Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          13lWhCBv/tjZDrXnBH7ViLQWB+AeWKDM6J0/NmGftBk=
Subject key identifier:   66:89:47:A9:1E:8F:F8:A9:F8:2C:53:40:5F:DA:14:B1:F0:DD:76:50
Certificate issuer:       /CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
Certificate serial:       9ECB7DCE8FAB7A7932B104F2540149A5EB5F5E
Authority key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 16 May 2025 13:05:04 +0000
ROA not before:           Fri 16 May 2025 13:00:04 +0000
ROA not after:            Fri 15 May 2026 13:05:04 +0000
asID:                     268296
IP address blocks:        2804:4efc:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 12:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9e:cb:7d:ce:8f:ab:7a:79:32:b1:04:f2:54:01:49:a5:eb:5f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
        Validity
            Not Before: May 16 13:00:04 2025 GMT
            Not After : May 15 13:05:04 2026 GMT
        Subject: CN=668947A91E8FF8A9F82C53405FDA14B1F0DD7650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:8c:cb:db:db:24:5c:2d:e7:6c:72:5a:a6:
                    d3:a7:c3:a2:87:53:44:6e:20:4e:68:41:54:2d:65:
                    a7:15:d1:b5:bb:26:65:f1:76:88:70:79:28:24:0f:
                    c3:5c:30:a5:9b:fb:fd:7a:63:e9:dd:c0:29:d0:dd:
                    be:a6:89:29:dc:26:81:c7:18:ec:4f:e7:b8:1f:b5:
                    48:71:96:66:c7:53:7d:7d:0e:1a:3a:7f:ed:a5:92:
                    73:e9:91:85:17:df:0d:bb:2b:dd:f0:28:70:6a:3a:
                    f2:f3:78:c7:6e:80:5d:b3:c2:aa:a9:84:54:85:d4:
                    b5:08:53:49:36:3a:17:56:77:d1:5f:c9:33:fc:a4:
                    4a:7b:7b:88:b6:ef:99:e7:7a:66:01:8a:4e:bd:7d:
                    55:d8:03:0f:60:99:04:fd:2a:88:e2:6d:fc:93:d7:
                    79:ca:ab:98:26:6b:4f:c2:c8:95:45:09:98:7e:f4:
                    47:ec:7f:60:9e:57:24:90:c0:e1:ab:5e:21:5e:e2:
                    da:bc:8f:8b:c0:50:60:c7:7f:a2:36:ea:aa:15:c5:
                    22:56:87:85:d1:db:96:88:ec:c2:91:48:40:91:71:
                    db:81:7d:a7:9b:f8:37:3e:28:37:5d:36:43:78:a6:
                    ca:1c:2e:a8:f7:fe:99:6c:70:76:2c:75:67:1f:14:
                    cf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:89:47:A9:1E:8F:F8:A9:F8:2C:53:40:5F:DA:14:B1:F0:DD:76:50
            X509v3 Authority Key Identifier:
                keyid:78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:fc:cc:36:9f:33:8b:05:f6:a1:db:66:4e:e4:ac:95:13:c9:
         3c:83:1b:e9:de:da:ee:b5:81:69:9e:9c:84:bb:3c:bd:da:26:
         4f:19:79:a8:30:90:f4:57:9b:ed:40:17:5c:e4:aa:36:4f:c9:
         be:8a:8c:56:e7:d6:d0:e9:b1:a2:28:08:5a:f8:ae:b5:d9:b4:
         27:5b:b5:ce:7d:a9:3a:4d:c7:f1:5b:85:60:62:b3:ca:a9:e9:
         a9:c0:b8:a1:93:8e:16:a0:db:2d:9e:56:58:83:b0:55:e7:5f:
         30:dd:b7:29:85:74:48:d5:23:aa:c4:3a:05:48:0e:05:e8:7c:
         e0:1b:44:49:79:04:ab:57:74:7d:fc:ac:45:60:e1:7a:32:79:
         54:58:60:b3:f6:e1:a8:95:e8:64:25:c7:93:df:a6:c1:7f:8f:
         c0:76:48:74:eb:41:97:86:0c:3a:67:de:d1:50:e5:d1:e8:db:
         1c:db:6b:50:bc:11:35:e7:2b:14:09:f7:55:85:9e:dd:e8:a0:
         c4:4b:e9:40:75:45:51:96:fc:26:15:3a:59:90:36:a4:61:5f:
         7d:6d:97:08:94:74:4b:50:4f:d3:57:ef:8d:9a:d9:47:20:2a:
         39:ac:27:06:2f:21:a0:cb:8d:1f:1f:dd:6b:9a:c4:c3:5b:3e:
         c4:01:a1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:05:26 2025 by rpki-client