Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/323830343a6262633a3a2f33322d313238203d3e203532383232.roa
File:                     323830343a6262633a3a2f33322d313238203d3e203532383232.roa (raw, json)
Hash identifier:          NiTHJW5Y+34NTE8ZT454pnL1Mlzpd+vYci8H9lwnai8=
Subject key identifier:   D5:12:55:33:E4:78:F4:6D:97:B7:C7:69:11:CE:B0:F5:00:0D:F0:51
Certificate issuer:       /CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
Certificate serial:       1A63985EAF8D3A166BD218DEA478BE45D085AEF4
Authority key identifier: 2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/323830343a6262633a3a2f33322d313238203d3e203532383232.roa
Signing time:             Wed 21 May 2025 18:13:04 +0000
ROA not before:           Wed 21 May 2025 18:08:04 +0000
ROA not after:            Wed 20 May 2026 18:13:04 +0000
asID:                     52822
IP address blocks:        2804:bbc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl
                          rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:63:98:5e:af:8d:3a:16:6b:d2:18:de:a4:78:be:45:d0:85:ae:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
        Validity
            Not Before: May 21 18:08:04 2025 GMT
            Not After : May 20 18:13:04 2026 GMT
        Subject: CN=D5125533E478F46D97B7C76911CEB0F5000DF051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:ae:dd:fc:2f:91:ee:0f:d9:93:51:aa:9e:
                    c7:a8:7e:18:e6:2b:c8:62:35:b0:e8:7c:97:f9:bb:
                    44:1f:ad:a4:94:89:d6:85:d4:51:48:3f:62:4a:25:
                    f4:fa:8e:19:93:ca:f0:52:c7:62:e0:90:c0:0f:3f:
                    2c:66:cc:56:cb:4d:f5:d0:df:f0:c1:96:9e:dc:e0:
                    9b:9f:90:eb:d3:23:c4:ad:72:e6:c8:74:3b:38:30:
                    0d:4b:79:e4:2e:e8:fd:02:f5:f9:75:dd:0d:57:36:
                    b2:3f:fd:0d:53:43:bd:e4:9e:3d:84:7e:07:ab:6f:
                    1e:93:a4:72:08:a8:aa:36:9f:76:a0:07:78:66:84:
                    89:d0:b9:27:28:32:06:c0:b0:93:0b:ab:7c:09:e1:
                    b4:89:f5:3e:fb:b1:33:e3:f1:0d:28:96:20:d6:00:
                    42:3a:b1:ef:9c:d2:d4:22:9a:c0:34:5e:f8:c1:31:
                    21:29:81:27:71:91:99:07:c3:cd:4f:9d:81:5c:72:
                    0b:bc:04:e3:49:07:2c:00:6a:7d:f8:f0:0c:cd:ec:
                    34:65:b5:85:5c:4f:62:22:5e:ea:89:4f:7c:4c:2f:
                    f3:aa:23:7d:90:92:a8:8d:7c:b3:4f:29:5c:65:18:
                    1e:29:b2:f9:e1:34:0e:9f:e7:f5:13:64:1f:ba:c5:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:12:55:33:E4:78:F4:6D:97:B7:C7:69:11:CE:B0:F5:00:0D:F0:51
            X509v3 Authority Key Identifier:
                keyid:2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/323830343a6262633a3a2f33322d313238203d3e203532383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:55:f0:97:41:cf:66:12:7d:24:35:01:92:4d:3d:c6:bb:a3:
         3a:1f:2f:1a:6a:5f:cf:19:aa:98:4f:d9:88:76:37:b8:4a:83:
         3a:f7:dc:47:1b:0c:f3:f3:e2:26:a9:df:42:6c:6e:0d:0c:8f:
         c5:cd:cb:be:80:33:92:b6:3f:f3:9d:ce:e7:dd:5e:a9:ae:92:
         ee:13:16:28:a8:1e:8b:24:32:66:77:7e:7f:24:60:5f:b4:7d:
         83:76:24:e8:fc:8e:bd:f5:04:0a:a6:40:88:2c:96:cc:2d:da:
         6d:fa:20:bb:61:cf:b5:fe:60:9d:3d:30:e4:21:c0:b4:47:29:
         7f:9e:6f:6c:60:5c:1a:e6:bb:d3:31:fd:68:7c:0c:41:bc:69:
         a3:45:69:b5:56:49:f5:8a:a0:1d:7a:6c:e3:aa:f0:32:5e:5c:
         79:7f:70:49:42:a5:40:d0:87:ac:8e:19:fe:ea:8d:e8:d9:4c:
         e8:29:ea:18:c2:86:b6:95:c1:67:4d:63:85:eb:13:4f:7b:b5:
         af:e7:f5:e9:a2:e5:93:21:ef:d3:45:52:5f:32:85:79:da:dd:
         0b:ef:55:b3:67:ed:d2:c3:0f:95:dc:72:29:01:e6:1c:21:33:
         0c:3c:88:06:62:da:61:6d:57:73:7e:49:f0:f6:3f:72:91:94:
         9e:b3:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:14 2025 by rpki-client