Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346230303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a346230303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          3yIt1c6Zt9yuElcudwoRRsnjOYheOFpgwF/cT/QEIcQ=
Subject key identifier:   CE:D2:4E:DC:B4:A4:12:D3:CA:D4:CB:4D:84:55:6C:44:30:44:B9:C3
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       404171EAFCBFDF09B285580E69E3D734EB60DFC9
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346230303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:31 +0000
ROA not before:           Tue 03 Jun 2025 16:50:31 +0000
ROA not after:            Tue 02 Jun 2026 16:55:31 +0000
asID:                     264344
IP address blocks:        2804:2674:4b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 03:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:41:71:ea:fc:bf:df:09:b2:85:58:0e:69:e3:d7:34:eb:60:df:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:31 2025 GMT
            Not After : Jun  2 16:55:31 2026 GMT
        Subject: CN=CED24EDCB4A412D3CAD4CB4D84556C443044B9C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:3a:7a:fd:2a:95:28:e2:45:51:96:d6:44:
                    41:99:81:16:79:29:b0:ac:09:d3:88:5e:ff:59:6a:
                    7c:c6:7b:25:48:15:aa:6a:6a:b5:07:78:ec:51:1f:
                    3c:ec:c8:72:de:ef:6b:6e:38:f1:9c:ad:78:d6:46:
                    57:14:27:b6:84:8d:e5:ba:dc:34:ac:7d:d5:2f:16:
                    8c:dd:18:fc:23:be:64:08:e6:c7:b3:2f:86:34:20:
                    28:09:28:5a:eb:fd:49:13:42:0f:7d:5d:5a:49:46:
                    a1:f3:4f:42:09:36:f2:73:fe:92:a2:ca:ca:d5:18:
                    82:39:36:04:6e:4f:de:b6:c9:b0:34:34:5f:72:30:
                    25:9c:4b:01:ae:4c:c9:b1:6a:d7:02:7b:de:8a:48:
                    e1:ed:16:4e:d4:bb:dd:df:44:56:db:29:aa:db:86:
                    58:c1:0c:d5:2c:d2:62:43:79:bd:50:67:77:8d:94:
                    57:4d:88:c1:b9:42:15:6a:11:24:e4:f9:0f:fa:e2:
                    bf:87:b7:de:e0:9e:5a:2b:cd:1f:b1:35:3b:6b:a6:
                    2f:c2:c9:cd:9b:2c:93:b7:29:d5:fa:d3:37:25:fe:
                    61:6e:76:24:6c:14:b5:4d:ed:65:ba:da:ae:af:11:
                    ee:49:96:4d:e8:12:b6:91:9f:d6:0e:a1:90:b7:84:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D2:4E:DC:B4:A4:12:D3:CA:D4:CB:4D:84:55:6C:44:30:44:B9:C3
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346230303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:62:85:de:03:df:98:e9:f6:dd:dc:98:23:e4:68:7f:34:5a:
         3a:7f:db:c8:36:18:5d:57:4e:34:12:31:06:60:0a:c8:44:d3:
         dc:d1:7d:b9:56:dd:63:c1:b5:4c:79:08:e3:64:d6:97:e3:7e:
         30:6f:75:33:8c:c2:87:6a:2f:5f:98:00:cc:30:94:01:a2:8a:
         27:50:e5:f0:5d:87:16:28:09:2b:14:f3:78:88:f3:aa:a7:b1:
         44:6e:b5:1e:95:5d:66:2c:15:a6:a6:c1:09:d9:60:b2:af:1e:
         35:13:8e:c2:24:2e:1b:e1:f1:43:04:df:da:6f:8c:6d:36:ac:
         f9:4a:34:8a:dd:e1:5e:f5:ec:de:0d:10:be:4b:e5:f5:de:00:
         57:4f:3e:bd:13:d3:79:f6:58:c3:89:30:28:91:24:d6:42:a7:
         d7:11:2d:e4:f0:33:54:fc:e4:1a:38:a4:25:d5:d8:4b:a8:93:
         48:2a:64:55:ec:9f:22:da:96:a6:ee:cb:60:ed:14:d3:7d:5f:
         38:7c:8c:20:b6:09:b3:2d:76:c3:37:b4:f8:2d:c8:94:9d:55:
         ae:03:ca:f7:2a:32:dd:c8:d1:08:c9:e3:47:a5:17:e3:40:95:
         8f:42:13:54:43:d5:ef:d4:b6:7d:af:3d:c6:3d:6f:49:2a:a8:
         e5:2e:78:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:58:48 2025 by rpki-client