Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/323830343a313838633a3a2f33322d313238203d3e203631393339.roa
File:                     323830343a313838633a3a2f33322d313238203d3e203631393339.roa (raw, json)
Hash identifier:          HcOGsAPSHvkeaRLUa88kfrvHyXD3Izj/1JBiGMJkKhs=
Subject key identifier:   F6:38:AA:07:93:C9:CB:DE:B7:92:70:94:33:B3:73:61:A1:D1:10:7F
Certificate issuer:       /CN=312317E584CD5A10D2CB04D6FC1E40518B4C26C5
Certificate serial:       76E14840A0B2B02D9C74938FAA984D573496DBA0
Authority key identifier: 31:23:17:E5:84:CD:5A:10:D2:CB:04:D6:FC:1E:40:51:8B:4C:26:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/323830343a313838633a3a2f33322d313238203d3e203631393339.roa
Signing time:             Mon 26 May 2025 18:28:41 +0000
ROA not before:           Mon 26 May 2025 18:23:41 +0000
ROA not after:            Mon 25 May 2026 18:28:41 +0000
asID:                     61939
IP address blocks:        2804:188c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.crl
                          rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 02:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e1:48:40:a0:b2:b0:2d:9c:74:93:8f:aa:98:4d:57:34:96:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312317E584CD5A10D2CB04D6FC1E40518B4C26C5
        Validity
            Not Before: May 26 18:23:41 2025 GMT
            Not After : May 25 18:28:41 2026 GMT
        Subject: CN=F638AA0793C9CBDEB792709433B37361A1D1107F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:b1:fa:1a:0b:6a:53:2c:c1:60:20:59:22:
                    4e:7e:f8:55:c7:b8:3f:7d:75:17:12:5a:11:41:0c:
                    38:34:1d:6b:32:01:f9:fd:45:a6:b8:86:4d:4b:ae:
                    98:57:4b:ba:ef:c4:4b:fb:ed:99:73:f8:3b:64:fc:
                    ea:6a:82:fc:35:f1:5d:2b:1d:67:05:98:99:b4:81:
                    13:f3:c7:f7:54:47:1b:cf:70:0f:f7:4a:43:f4:45:
                    97:f0:9d:a2:db:20:32:da:d7:30:97:bb:83:ef:ca:
                    6b:2d:d5:21:3e:ea:c7:de:7e:b6:ab:a8:6e:6c:ad:
                    5a:cb:3b:eb:26:f3:b0:d3:1a:76:99:ae:43:21:0e:
                    33:15:e2:36:b7:06:56:8d:cc:0e:c1:b6:50:d7:7c:
                    80:bc:7b:00:3b:e5:99:e2:aa:19:d5:03:dd:9e:89:
                    e4:21:61:94:a0:9e:95:09:06:30:dd:b6:1f:a2:2b:
                    ab:ea:10:1e:d0:b5:67:6f:cb:c2:66:85:4a:da:d8:
                    28:09:e2:83:ae:30:d9:28:c9:5f:e3:77:b8:c3:0d:
                    94:0c:41:f0:2e:31:19:64:51:f2:87:9b:fe:5e:e3:
                    65:2c:77:a4:99:a8:34:f7:88:b8:89:59:b2:f8:85:
                    64:89:85:fb:76:29:73:ff:a3:76:ee:4d:a2:6d:b7:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:38:AA:07:93:C9:CB:DE:B7:92:70:94:33:B3:73:61:A1:D1:10:7F
            X509v3 Authority Key Identifier:
                keyid:31:23:17:E5:84:CD:5A:10:D2:CB:04:D6:FC:1E:40:51:8B:4C:26:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/323830343a313838633a3a2f33322d313238203d3e203631393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:188c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:64:3b:28:74:b9:01:24:89:7b:cb:9e:1b:bd:96:c6:36:20:
         b5:eb:a5:9c:3c:57:1c:37:75:2b:1d:aa:b7:28:ef:82:b9:3d:
         00:a0:be:65:b7:09:03:c2:e7:e3:04:92:c8:c9:7d:58:dd:93:
         f1:47:38:ac:6c:6d:7f:32:79:bf:71:f0:66:1e:05:51:9e:4d:
         47:ac:1d:3b:fe:c4:d7:f3:95:75:b4:ee:07:48:36:55:e7:ab:
         0a:41:16:78:7f:84:d8:1e:3d:bb:25:25:90:d6:b7:93:be:da:
         90:38:16:b9:49:eb:b9:be:e5:40:23:78:b8:bb:7c:f5:a3:f9:
         79:0a:a1:db:63:1d:22:a7:44:4c:4a:d1:5b:7a:a9:26:71:e2:
         24:ce:f7:4c:af:0d:04:b9:db:f6:5a:5e:10:91:7a:e4:20:0f:
         b9:1d:2f:c8:a0:fa:68:18:52:31:fe:a0:4f:cf:a2:08:87:d1:
         a4:da:91:58:17:f0:6a:9b:cf:82:82:8b:e9:6e:73:bf:90:7b:
         82:0a:c4:c2:b2:99:05:0a:1d:88:11:c6:5c:0f:21:3f:a9:20:
         e2:47:d2:e6:73:38:65:ad:8b:61:f6:24:0d:c1:38:17:d7:15:
         37:e3:2e:53:fd:3b:ab:51:a7:d3:38:22:59:60:cd:0d:6d:05:
         44:5d:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:44:13 2025 by rpki-client