Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33322d3332203d3e203532353837.roa
File:                     323830343a386563303a3a2f33322d3332203d3e203532353837.roa (raw, json)
Hash identifier:          wpL10v59H954g33BuOd7BGNKMuPnDKrZ2Zn/nnChX1U=
Subject key identifier:   27:51:E9:2E:8D:18:88:22:3C:96:3D:E4:3D:F4:82:08:33:49:1C:59
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       3561191BCF1BD8194476E1E90D9DE85866B4AEBF
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33322d3332203d3e203532353837.roa
Signing time:             Thu 15 May 2025 00:25:43 +0000
ROA not before:           Thu 15 May 2025 00:20:43 +0000
ROA not after:            Thu 14 May 2026 00:25:43 +0000
asID:                     52587
IP address blocks:        2804:8ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 16:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:61:19:1b:cf:1b:d8:19:44:76:e1:e9:0d:9d:e8:58:66:b4:ae:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: May 15 00:20:43 2025 GMT
            Not After : May 14 00:25:43 2026 GMT
        Subject: CN=2751E92E8D1888223C963DE43DF4820833491C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:02:15:21:3f:dc:a4:79:7d:93:f7:a9:a6:88:
                    a5:9e:b4:a9:3a:83:b9:34:b9:bd:db:32:a0:f6:bf:
                    78:cd:9b:96:ae:e7:a0:97:3e:f2:fe:34:7a:e3:9d:
                    0f:2b:f1:ff:0a:4d:0a:22:c9:63:b9:8c:4c:65:2d:
                    b2:21:9c:1c:dc:19:83:c3:af:6f:74:d1:d5:01:b3:
                    a8:76:98:6d:66:47:02:21:ca:59:9f:ae:fa:45:ba:
                    3b:7b:40:2a:ef:b5:20:05:fc:13:ee:24:bb:78:35:
                    81:0a:77:87:fa:5f:60:7d:eb:df:26:cc:0c:f9:29:
                    bb:eb:87:40:b8:af:10:11:f4:98:33:52:b3:24:b3:
                    71:f7:ba:91:74:4b:8d:f7:b0:a8:1b:13:d6:cb:81:
                    0a:82:9b:8e:e0:96:a2:d8:47:3e:45:c5:00:37:94:
                    c4:15:7a:b5:09:f2:8a:05:03:56:51:68:81:7f:2b:
                    54:da:59:71:6c:1e:a8:ac:fa:83:2a:5b:18:ec:84:
                    8c:d1:ea:bc:1a:16:ae:52:96:b5:1f:23:70:c4:f7:
                    5d:e3:c0:b0:81:ab:4e:41:6e:54:b3:63:1a:fa:49:
                    3e:0d:8b:06:55:14:b1:6b:73:91:f7:f3:3b:40:5f:
                    36:8c:55:ed:cd:55:44:66:40:7a:bd:a4:31:81:4d:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:51:E9:2E:8D:18:88:22:3C:96:3D:E4:3D:F4:82:08:33:49:1C:59
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33322d3332203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:6f:c1:cb:71:d4:27:17:42:4a:08:0b:ef:59:30:3f:36:da:
         ff:5e:22:27:17:99:ec:9b:0d:17:7a:27:92:2f:d9:f9:d0:de:
         af:eb:e7:fa:8c:01:a3:d1:cd:cf:40:90:94:e2:a2:00:4b:ed:
         31:4d:bb:86:92:25:4a:ed:78:b3:4e:18:7a:03:ff:11:b0:71:
         dc:4d:c6:55:21:20:91:37:a1:c8:5e:06:f0:f6:19:89:5c:2e:
         aa:ab:e2:f8:d1:fa:4e:33:3c:89:bf:3a:48:56:21:34:53:02:
         aa:36:6d:57:e0:50:c1:09:a0:b6:a6:28:34:dc:84:a3:48:1d:
         e7:ba:99:b3:49:0b:70:99:31:29:a6:91:5f:2c:c2:84:a8:ac:
         b2:64:b0:d3:9b:f4:9f:5a:29:ac:4f:18:ce:32:25:1e:1f:3e:
         85:2b:82:82:b7:99:09:cb:bc:65:53:0e:dd:8c:05:36:ba:5c:
         46:87:3c:35:df:53:5b:fc:7a:64:33:fc:c2:e6:49:0a:df:54:
         72:b6:a8:eb:03:a5:2b:d3:f5:99:3b:fe:be:db:27:a7:0b:9d:
         f4:dc:4b:e7:f1:ae:b0:32:b8:b8:43:eb:7c:b2:45:9a:fe:2b:
         80:1d:55:f6:e9:36:a5:86:54:67:62:71:9b:b4:d2:5e:c9:2e:
         11:78:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:23:27 2025 by rpki-client