Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fjTq2HLHYSasWBE21N2DFerRfqtqW7HLDBo37y3pcxw/0/323830343a353136303a3a2f33322d313238203d3e20323638343438.roa
File:                     323830343a353136303a3a2f33322d313238203d3e20323638343438.roa (raw, json)
Hash identifier:          4WIaCYJX3btjnU0D9DDxZJIWmEp7QMsLa5VnKW6Zlbc=
Subject key identifier:   07:4D:4D:C7:3B:C4:92:DA:B2:8E:DA:FD:19:3F:2C:B0:B8:78:5F:01
Certificate issuer:       /CN=E0BB6F76B94D0617712364595E7B14E0E99AF8D8
Certificate serial:       09279CB214571BB5120AF3DE40A30AD075752C12
Authority key identifier: E0:BB:6F:76:B9:4D:06:17:71:23:64:59:5E:7B:14:E0:E9:9A:F8:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0BB6F76B94D0617712364595E7B14E0E99AF8D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fjTq2HLHYSasWBE21N2DFerRfqtqW7HLDBo37y3pcxw/0/323830343a353136303a3a2f33322d313238203d3e20323638343438.roa
Signing time:             Thu 05 Jun 2025 15:04:08 +0000
ROA not before:           Thu 05 Jun 2025 14:59:08 +0000
ROA not after:            Thu 04 Jun 2026 15:04:08 +0000
asID:                     268448
IP address blocks:        2804:5160::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fjTq2HLHYSasWBE21N2DFerRfqtqW7HLDBo37y3pcxw/0/E0BB6F76B94D0617712364595E7B14E0E99AF8D8.crl
                          rsync://rpki-repo.registro.br/repo/9fjTq2HLHYSasWBE21N2DFerRfqtqW7HLDBo37y3pcxw/0/E0BB6F76B94D0617712364595E7B14E0E99AF8D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0BB6F76B94D0617712364595E7B14E0E99AF8D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:27:9c:b2:14:57:1b:b5:12:0a:f3:de:40:a3:0a:d0:75:75:2c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0BB6F76B94D0617712364595E7B14E0E99AF8D8
        Validity
            Not Before: Jun  5 14:59:08 2025 GMT
            Not After : Jun  4 15:04:08 2026 GMT
        Subject: CN=074D4DC73BC492DAB28EDAFD193F2CB0B8785F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:52:f8:7e:09:d2:cd:2e:e2:8d:83:43:6b:
                    6b:c2:b7:96:da:eb:1c:e4:01:4c:0f:0e:60:38:46:
                    50:a6:ab:00:09:38:4d:bf:0a:19:9d:f7:db:d7:7f:
                    46:5c:14:7d:7b:8e:2d:a4:19:b5:77:d0:c8:74:1f:
                    9b:85:55:d5:03:78:91:a5:19:e2:dd:1c:06:8e:82:
                    e9:26:64:e8:40:fe:04:1e:60:41:0c:1e:62:d3:f3:
                    52:e9:b5:dc:1e:81:a4:ef:a9:96:a7:20:5f:4c:d3:
                    88:2c:42:84:bb:f7:50:4b:4d:e0:5f:5e:cb:93:49:
                    83:e7:57:6c:43:b8:f0:28:0b:d1:ac:2b:11:ff:c5:
                    cd:6c:30:f8:39:65:7e:90:d8:00:f6:14:85:83:51:
                    62:0e:23:49:82:b8:81:65:f8:15:81:f1:52:9f:90:
                    24:ab:db:cb:b4:e9:32:9c:93:f1:af:96:af:95:26:
                    52:43:41:51:cf:03:ec:8b:0e:44:18:19:33:ed:07:
                    65:43:b9:26:5b:64:6f:4a:3c:66:1c:b3:45:73:2a:
                    4f:dc:ab:d2:85:9c:33:e5:8b:63:6d:24:c0:84:bb:
                    d3:60:dd:66:e0:6d:ad:b5:26:32:ce:51:ae:4c:42:
                    9f:9e:f8:19:e8:47:99:fe:ab:db:45:9a:a1:43:77:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4D:4D:C7:3B:C4:92:DA:B2:8E:DA:FD:19:3F:2C:B0:B8:78:5F:01
            X509v3 Authority Key Identifier:
                keyid:E0:BB:6F:76:B9:4D:06:17:71:23:64:59:5E:7B:14:E0:E9:9A:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fjTq2HLHYSasWBE21N2DFerRfqtqW7HLDBo37y3pcxw/0/E0BB6F76B94D0617712364595E7B14E0E99AF8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0BB6F76B94D0617712364595E7B14E0E99AF8D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fjTq2HLHYSasWBE21N2DFerRfqtqW7HLDBo37y3pcxw/0/323830343a353136303a3a2f33322d313238203d3e20323638343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5160::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:fb:24:60:91:54:6e:01:d4:27:fb:4d:f9:5e:66:e5:4b:ca:
         00:6f:99:f4:61:3d:56:22:ac:24:17:15:01:0b:bf:37:d6:d1:
         e1:75:42:63:3d:eb:a6:c5:0f:4b:81:b4:e8:28:93:28:7d:2e:
         64:37:14:6f:59:1e:c9:fc:1e:ed:9b:b3:55:b0:8b:28:b7:60:
         9b:ea:a1:26:e0:5d:7c:04:0e:98:e2:d7:7e:de:64:06:79:9e:
         0b:3f:45:40:64:e8:3a:a6:96:86:1d:c7:0d:ae:77:5c:dd:a7:
         cb:a8:5d:47:9a:b0:b1:5a:6d:d6:82:58:03:ef:8b:48:30:bd:
         07:4a:69:45:97:e5:f5:a4:ed:25:38:37:96:b4:36:1d:89:be:
         2d:17:2a:0c:3d:29:d4:17:25:6a:f9:d1:75:70:d7:67:cb:64:
         b9:64:20:67:d5:d1:7e:7a:f7:46:50:06:2f:a3:06:67:69:c4:
         6c:bf:f1:74:29:e8:11:64:57:74:8c:96:33:62:b5:aa:ae:30:
         a5:b7:b4:38:e0:45:ca:ef:b6:05:d9:c7:72:c3:b9:2d:63:b7:
         27:09:f9:9c:33:c8:47:67:95:2c:f6:69:76:75:ad:57:c6:18:
         01:72:d3:b4:1b:58:1a:e1:be:50:16:00:dd:bc:1a:a7:da:f7:
         2c:21:e8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:20:54 2025 by rpki-client