Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa
File:                     323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa (raw, json)
Hash identifier:          Fm72jXNedihMmSVYwWDB9msaqzvPn+whkD1ujIfoFQ0=
Subject key identifier:   EE:F9:7E:AC:68:72:46:2B:9E:2A:BC:87:9C:19:64:C7:F6:60:33:0C
Certificate issuer:       /CN=582517B9105955B7B839FB60DC59AE677C6B4DED
Certificate serial:       44697FEC5677BD02C2DBCB3E7BED7CA2572AD39B
Authority key identifier: 58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa
Signing time:             Fri 07 Mar 2025 04:00:38 +0000
ROA not before:           Fri 07 Mar 2025 03:55:38 +0000
ROA not after:            Fri 06 Mar 2026 04:00:38 +0000
asID:                     269417
IP address blocks:        2804:6444:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl
                          rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:69:7f:ec:56:77:bd:02:c2:db:cb:3e:7b:ed:7c:a2:57:2a:d3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582517B9105955B7B839FB60DC59AE677C6B4DED
        Validity
            Not Before: Mar  7 03:55:38 2025 GMT
            Not After : Mar  6 04:00:38 2026 GMT
        Subject: CN=EEF97EAC6872462B9E2ABC879C1964C7F660330C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d0:89:89:b3:df:2e:eb:ef:d8:31:0f:f4:20:
                    5d:da:d8:6d:68:d9:a6:88:60:bb:50:6c:7b:a1:29:
                    4e:d8:cd:70:04:aa:62:54:05:6c:25:3a:bd:0f:c3:
                    1e:67:be:a3:3e:bb:8c:68:89:96:b3:e2:95:cc:fb:
                    45:43:3a:17:12:41:74:19:12:29:35:11:1e:75:a6:
                    72:88:4d:c7:21:22:df:5a:34:03:ca:c3:b1:03:a7:
                    16:3c:85:01:e5:8c:68:2a:4a:6b:ed:33:99:cc:bc:
                    67:37:dd:2e:7e:e8:d0:bb:a9:60:ee:c8:51:07:ea:
                    0d:16:aa:a2:20:19:df:a0:fd:db:6d:50:fa:aa:fe:
                    bc:ca:6b:88:58:67:f8:5f:24:d6:67:0e:fb:14:9a:
                    0a:26:4c:02:87:b8:06:8d:3e:b7:9f:e8:3a:b1:1e:
                    56:b3:c0:0c:a5:18:30:68:2c:9a:2b:c1:0a:2c:b1:
                    61:52:3a:5e:f9:d8:1d:20:27:05:4c:16:15:d3:91:
                    af:93:07:8b:31:dc:a4:ba:a4:5c:9b:67:7d:2e:44:
                    52:f9:3d:24:05:80:7c:3a:fb:90:cb:89:13:1d:7e:
                    38:5d:2f:e7:3c:cc:73:03:74:ac:67:e0:f3:c9:d1:
                    2d:16:38:93:1b:a6:13:b3:9e:5c:7d:da:bd:73:dc:
                    0a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F9:7E:AC:68:72:46:2B:9E:2A:BC:87:9C:19:64:C7:F6:60:33:0C
            X509v3 Authority Key Identifier:
                keyid:58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6444:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b4:b6:b6:6e:12:68:fb:f9:07:18:f8:6d:12:54:2c:eb:75:05:
         b0:98:13:47:6d:90:bd:cc:b6:78:f3:4e:fb:7f:31:01:96:90:
         01:59:8d:76:1a:08:32:55:e3:60:1d:52:4d:61:e0:70:15:ac:
         0f:d7:77:2d:93:3e:d4:a5:c6:5b:e0:a0:e1:57:0b:98:3a:8c:
         97:75:03:2c:ce:5c:06:da:0c:ef:38:a2:d4:94:50:70:07:76:
         89:11:c7:a8:57:5a:bf:52:1c:ef:a4:86:d1:2b:06:e4:57:98:
         da:ce:e3:17:3e:65:43:02:da:3d:3b:f9:c9:a0:b2:09:d7:f2:
         55:41:25:79:2b:c9:de:0f:94:00:fd:a7:20:4f:72:fa:56:b5:
         52:e6:db:3e:57:c2:bc:c4:11:17:bf:45:ab:83:7c:1d:cd:8d:
         09:37:8f:15:da:ee:0b:31:e8:0a:c7:ee:c1:a6:33:44:4f:d5:
         3b:7b:51:43:77:c9:a9:c1:d9:1b:db:45:8e:ee:15:4e:1b:72:
         1d:38:81:9c:0b:10:88:6c:81:dc:9b:5a:43:9f:24:46:2a:5a:
         fd:09:40:1a:5a:6f:b6:7f:53:44:15:08:ce:9d:d1:69:80:a6:
         c1:83:72:52:bd:16:85:86:4d:99:64:a0:de:67:84:97:e4:ab:
         ae:06:21:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:57 2025 by rpki-client