Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/323830343a373635343a3a2f33322d3332203d3e20323731313034.roa
File:                     323830343a373635343a3a2f33322d3332203d3e20323731313034.roa (raw, json)
Hash identifier:          H4B234f35yYmeWnN9Qqkhm8R57/oBQeDUkd8DAmTnm8=
Subject key identifier:   7A:09:1A:F0:E6:33:93:A9:6B:ED:55:0D:45:6F:CA:AC:AE:32:C4:69
Certificate issuer:       /CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
Certificate serial:       257618FF323EF2CE9E8B9A491326EAED00E15342
Authority key identifier: 25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/323830343a373635343a3a2f33322d3332203d3e20323731313034.roa
Signing time:             Wed 05 Mar 2025 19:15:28 +0000
ROA not before:           Wed 05 Mar 2025 19:10:28 +0000
ROA not after:            Wed 04 Mar 2026 19:15:28 +0000
asID:                     271104
IP address blocks:        2804:7654::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl
                          rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 15:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:76:18:ff:32:3e:f2:ce:9e:8b:9a:49:13:26:ea:ed:00:e1:53:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
        Validity
            Not Before: Mar  5 19:10:28 2025 GMT
            Not After : Mar  4 19:15:28 2026 GMT
        Subject: CN=7A091AF0E63393A96BED550D456FCAACAE32C469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:ac:45:5f:cf:dc:7e:a3:75:32:ed:69:f6:
                    4a:86:6b:ed:21:55:2a:61:d7:69:41:a4:7e:a6:a6:
                    0e:e0:65:cd:34:32:cb:ed:c8:f5:31:37:7f:14:cd:
                    6d:02:bb:8c:57:42:5d:3c:54:dc:15:af:d5:09:f8:
                    54:a4:df:0d:84:4a:b2:5d:90:33:37:95:11:23:8f:
                    e7:df:47:ea:b8:27:b0:ef:d5:03:21:51:07:da:c9:
                    a1:bf:34:2a:18:32:5d:7f:8c:72:ad:1b:8f:57:40:
                    da:83:f7:b7:7e:10:6b:57:1f:2f:6b:df:c2:cc:f3:
                    e5:43:83:33:f5:43:2f:31:bb:bf:51:0a:d8:e9:03:
                    6c:a9:88:05:8d:b8:12:e7:5d:0b:b1:7c:02:f6:86:
                    d5:17:02:ad:4c:8d:c6:6a:47:fb:3c:14:ca:5c:ff:
                    48:fd:64:2f:d5:f7:0f:41:ad:96:c7:af:cd:2a:12:
                    de:07:c3:96:02:90:19:4a:f3:bc:3c:c0:6d:5b:60:
                    49:50:b5:2a:f8:1e:df:5a:2f:c8:70:4a:46:dc:d7:
                    8d:cd:8a:06:6c:db:ca:e0:31:bf:62:c1:59:bf:d8:
                    07:c3:85:c7:4f:94:d6:8f:07:8a:96:0a:6e:30:59:
                    7e:70:fc:50:c4:f6:52:10:2d:ce:ab:99:d7:7d:bb:
                    03:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:09:1A:F0:E6:33:93:A9:6B:ED:55:0D:45:6F:CA:AC:AE:32:C4:69
            X509v3 Authority Key Identifier:
                keyid:25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/323830343a373635343a3a2f33322d3332203d3e20323731313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7654::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:5b:2c:e5:bd:f8:ff:42:12:d2:a7:94:25:5c:3b:7a:39:9d:
         37:7d:d6:d5:90:63:21:39:bc:3d:9f:05:80:a2:29:ce:74:37:
         0c:3a:ec:91:35:8f:47:63:26:85:21:f9:74:e3:96:c5:7a:1b:
         90:56:8d:28:fa:3d:a6:29:35:44:93:06:cd:5b:cf:8f:f2:b2:
         a2:d7:5e:60:fe:1c:80:a1:16:04:a0:3c:b5:26:a8:39:35:f9:
         e1:b6:80:c2:3b:50:15:6c:2b:fe:05:c1:88:a2:c0:ed:d0:99:
         31:3c:d8:16:f4:b7:a3:c4:ba:12:b1:61:d9:69:30:ed:e8:c0:
         19:99:d8:7c:9b:65:e5:51:e2:57:8a:bf:d5:1e:ec:6d:e3:12:
         eb:b7:41:a0:2f:c9:e7:cb:23:6f:c0:6d:e2:17:a8:a6:40:ee:
         c8:33:f4:62:a2:73:5e:4f:b1:02:c6:0e:cf:7f:25:d4:f9:e1:
         c0:af:30:68:84:de:b7:59:13:2e:db:c6:f5:7e:3d:c5:76:c9:
         dd:27:4c:53:f4:54:55:19:39:71:0a:a8:95:6a:fb:11:38:67:
         58:15:3c:76:84:f8:90:85:65:8e:52:5f:45:ea:83:45:81:b5:
         3c:df:44:8e:08:a2:05:16:fd:e1:dd:9d:e5:d5:db:48:5b:c6:
         a4:53:ba:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:20:53 2025 by rpki-client