Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/323830343a363133343a3a2f33322d313238203d3e20323639323230.roa
File:                     323830343a363133343a3a2f33322d313238203d3e20323639323230.roa (raw, json)
Hash identifier:          5m1/Ctvtb5pRBYEk4F8ouLjiCqZq1j4Mx0Oh2TDfa0A=
Subject key identifier:   30:72:F3:9A:6C:79:A1:68:A2:D4:21:5B:83:D8:30:F7:0F:00:9E:C7
Certificate issuer:       /CN=44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A
Certificate serial:       31065A7E866BF7AA1FA0EAFC08A98C13158A36DA
Authority key identifier: 44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/323830343a363133343a3a2f33322d313238203d3e20323639323230.roa
Signing time:             Mon 19 May 2025 14:29:34 +0000
ROA not before:           Mon 19 May 2025 14:24:34 +0000
ROA not after:            Mon 18 May 2026 14:29:34 +0000
asID:                     269220
IP address blocks:        2804:6134::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.crl
                          rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 08:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:06:5a:7e:86:6b:f7:aa:1f:a0:ea:fc:08:a9:8c:13:15:8a:36:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A
        Validity
            Not Before: May 19 14:24:34 2025 GMT
            Not After : May 18 14:29:34 2026 GMT
        Subject: CN=3072F39A6C79A168A2D4215B83D830F70F009EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:43:dc:f3:be:e0:53:f7:a6:0b:49:bf:e4:16:
                    fc:b1:d8:5e:ce:00:7b:14:6a:09:90:ae:8f:9a:d2:
                    8d:8d:1c:1a:35:4e:34:62:12:93:02:59:e3:25:c6:
                    82:9e:3c:da:22:4e:8a:db:01:a8:6c:52:ae:45:5e:
                    16:7d:4e:b5:50:63:c4:5b:75:c5:da:40:e4:b7:70:
                    81:bd:5f:73:0e:d8:e3:ee:c3:c5:92:01:d4:5f:f6:
                    9d:3b:45:32:35:99:90:ed:12:51:b4:33:dd:4b:f2:
                    85:75:9c:50:11:5c:73:d8:7b:10:7f:1e:a0:ae:d8:
                    40:6a:a1:a6:e6:32:85:24:2a:ce:32:92:5e:14:c7:
                    c4:0f:45:2b:cb:0f:fe:a9:e7:8e:4b:b9:80:18:56:
                    8a:75:c0:e8:9a:0b:cb:5f:43:dd:10:0d:6b:cc:9f:
                    8f:a6:cb:e7:43:93:41:25:bf:d4:11:15:98:86:9f:
                    32:b6:b9:8c:60:ef:e0:a5:71:5d:2e:a5:72:02:90:
                    1a:f0:40:fc:14:5a:f3:f6:d0:46:eb:e9:dc:5c:66:
                    b3:4a:f1:85:dc:db:7e:b7:7b:4e:a8:f9:8c:6b:ba:
                    ca:7c:ed:24:b9:a4:8b:c4:ed:9b:b6:68:5c:67:cb:
                    f9:56:f7:54:13:41:da:80:93:02:94:5e:d5:b1:a8:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:72:F3:9A:6C:79:A1:68:A2:D4:21:5B:83:D8:30:F7:0F:00:9E:C7
            X509v3 Authority Key Identifier:
                keyid:44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/323830343a363133343a3a2f33322d313238203d3e20323639323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6134::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:00:ae:fc:01:0a:b5:f7:2b:d6:a3:d3:0c:89:c1:12:e3:c7:
         b5:09:2e:ed:d9:9a:58:37:4f:24:ed:a6:d2:51:37:37:57:df:
         de:84:22:f6:5c:84:be:88:6f:10:86:0e:7c:74:03:15:4b:8d:
         13:d6:30:8f:3e:ea:7a:6e:00:5c:88:cc:d4:61:83:e1:1b:fb:
         4c:82:4e:fd:0a:5c:51:c9:a9:57:b2:5e:31:01:e7:2e:79:d8:
         5d:24:44:17:50:d5:ac:8d:5c:07:d0:13:e5:e1:fd:a9:26:69:
         24:78:9c:a9:3d:85:8c:ff:3c:e6:2d:7f:be:cb:a4:2b:25:a7:
         72:14:ec:e9:09:5c:8d:60:6b:29:d2:82:ed:79:39:d1:b4:f6:
         3c:c9:d8:45:a5:54:a2:41:96:52:4f:26:60:2b:b5:b5:6d:0c:
         6f:dc:f4:85:6c:20:ec:d0:90:b8:dd:d4:3b:73:9b:00:53:7b:
         71:7e:05:36:bd:00:47:1d:ef:f4:19:32:84:9c:0e:6b:4b:d6:
         c1:4f:00:7e:fa:78:3d:ca:23:4c:7e:12:f6:df:23:5c:c9:da:
         26:e1:4b:d1:e4:67:ab:a8:99:c4:e2:3e:1a:e3:ca:d7:2f:b6:
         ee:79:05:02:d3:e9:af:65:43:40:f8:23:41:28:64:29:2d:89:
         bd:a5:5d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:31:16 2025 by rpki-client