Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a3a2f33362d3430203d3e20323639343137.roa
File:                     323830343a363434343a3a2f33362d3430203d3e20323639343137.roa (raw, json)
Hash identifier:          JPJQP27OEK8rUPH8CmEfxGwM8CyPkwEg19EZpb7vMjk=
Subject key identifier:   99:46:AA:31:DC:AA:6B:D8:61:FF:16:10:CE:08:2A:75:29:A6:B5:B1
Certificate issuer:       /CN=582517B9105955B7B839FB60DC59AE677C6B4DED
Certificate serial:       6C4094C60BBAEBB54918565254202366A992FA23
Authority key identifier: 58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a3a2f33362d3430203d3e20323639343137.roa
Signing time:             Fri 07 Mar 2025 04:00:38 +0000
ROA not before:           Fri 07 Mar 2025 03:55:38 +0000
ROA not after:            Fri 06 Mar 2026 04:00:38 +0000
asID:                     269417
IP address blocks:        2804:6444::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl
                          rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:40:94:c6:0b:ba:eb:b5:49:18:56:52:54:20:23:66:a9:92:fa:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582517B9105955B7B839FB60DC59AE677C6B4DED
        Validity
            Not Before: Mar  7 03:55:38 2025 GMT
            Not After : Mar  6 04:00:38 2026 GMT
        Subject: CN=9946AA31DCAA6BD861FF1610CE082A7529A6B5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4a:23:fc:78:3c:d0:8f:af:ae:17:63:fe:fa:
                    ad:b7:11:f0:1c:84:13:a5:18:62:e3:3b:68:d5:2c:
                    a4:d7:bd:74:15:64:8e:e0:39:36:65:59:c2:9d:8b:
                    31:5a:d5:27:a9:df:3e:33:1b:15:42:ff:12:fb:0a:
                    4a:dc:fa:3c:f6:87:1d:3e:80:df:30:72:c0:c0:8b:
                    86:15:9b:14:a7:ec:e7:5b:69:b1:54:0e:99:50:3f:
                    4a:6d:fe:9f:5f:eb:d8:b5:d4:7f:0f:02:b1:8d:c5:
                    3a:3c:56:c9:4d:40:37:b7:27:b1:5e:0c:55:c1:d9:
                    61:8b:3f:6f:f8:f1:10:ea:a2:18:85:c8:f6:d4:c0:
                    e4:75:c9:9b:ee:5e:60:03:fa:7f:f0:b4:a0:da:26:
                    4e:06:e5:65:57:c2:b5:3a:94:7d:3f:6e:1c:5c:ec:
                    86:ad:d2:5a:64:a5:16:5b:c8:f0:37:9e:9c:4c:d1:
                    53:3b:16:38:04:e8:2d:a3:91:23:34:20:17:b9:33:
                    8b:e3:1e:fb:c0:fd:a3:17:c7:32:0c:62:e8:9e:9c:
                    15:78:5f:92:8c:73:bb:84:33:fb:15:c2:7d:18:3e:
                    49:aa:39:90:ee:e4:a8:88:d6:60:20:0d:75:7e:38:
                    21:60:ed:08:09:3c:bb:7b:d0:2a:49:6a:ef:e9:fa:
                    98:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:46:AA:31:DC:AA:6B:D8:61:FF:16:10:CE:08:2A:75:29:A6:B5:B1
            X509v3 Authority Key Identifier:
                keyid:58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a3a2f33362d3430203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6444::/36

    Signature Algorithm: sha256WithRSAEncryption
         12:9a:69:f5:e7:2d:34:b5:cd:44:8b:fa:4e:e4:7f:34:f3:b5:
         da:d3:41:fd:c8:36:26:79:d8:c4:05:ca:85:57:46:af:60:ee:
         52:1f:22:0c:b8:51:6a:68:1d:6b:d9:84:b7:ea:65:96:05:6a:
         97:74:d1:66:f3:0c:44:0c:f5:ad:09:65:6b:34:40:b7:91:a4:
         7e:36:aa:11:fc:7b:27:a2:6f:e7:d1:1d:1f:70:48:dd:a6:62:
         3e:53:74:e2:02:03:99:28:9d:e9:05:3b:9d:4e:18:34:55:f5:
         4b:79:11:3c:45:63:6f:1e:39:9c:e1:1d:9b:91:52:c5:f0:76:
         d8:a3:b9:ae:9b:19:36:72:ce:54:c4:2f:cf:ba:45:6a:ba:1d:
         0f:3d:63:87:dd:e2:48:5d:8b:e4:2d:9f:90:6b:03:e7:91:5b:
         f9:65:de:a4:6a:0a:e2:76:e6:1a:a8:46:45:11:b5:df:b9:99:
         da:4f:0a:b4:84:f4:ff:0a:51:20:cd:8a:e5:1d:2c:b3:68:03:
         1e:24:fa:e6:d0:e1:9e:39:0e:52:1d:2f:24:3c:6e:3e:b4:3a:
         d6:73:5d:52:54:92:0a:78:90:14:af:19:f5:4b:2d:ff:69:25:
         60:00:29:3f:65:de:1b:bd:f3:c2:96:9c:2d:64:88:ff:a7:c7:
         28:23:aa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:05 2025 by rpki-client