Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353230323a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a353230323a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          F+5i/cbYTY0DlNegbohv6Ig7aw1ZGs0/+8+TpIXMTAM=
Subject key identifier:   E3:CE:8C:39:F5:B6:2A:1A:0F:22:60:51:BA:73:14:C3:D5:9D:B3:32
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       172B51278CAAEF09B75F1B308403DFAF5B2A4B6E
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353230323a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:31 +0000
ROA not before:           Tue 03 Jun 2025 16:50:31 +0000
ROA not after:            Tue 02 Jun 2026 16:55:31 +0000
asID:                     264344
IP address blocks:        2804:2674:5202::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 07:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2b:51:27:8c:aa:ef:09:b7:5f:1b:30:84:03:df:af:5b:2a:4b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:31 2025 GMT
            Not After : Jun  2 16:55:31 2026 GMT
        Subject: CN=E3CE8C39F5B62A1A0F226051BA7314C3D59DB332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:b3:8e:dd:c0:86:1b:74:2d:aa:50:6e:e6:
                    c1:63:43:82:67:6c:b4:3c:75:0d:eb:5f:4b:18:97:
                    e2:a5:93:ed:43:5b:b0:cf:b3:3e:e4:41:86:52:83:
                    4c:cd:57:f4:66:6f:50:6b:a5:60:2d:00:52:2b:f3:
                    b2:6f:86:74:b5:df:12:53:a7:08:82:c4:8f:e6:c7:
                    a3:53:86:9b:50:26:76:89:68:12:1d:51:6d:b6:53:
                    58:d7:38:c2:72:54:85:77:8a:a5:22:51:e6:95:a8:
                    ed:87:be:9c:dd:4d:bf:5a:26:54:64:ee:6c:36:1c:
                    9f:05:ae:e0:c8:61:a5:e4:e4:5f:1f:57:94:eb:cc:
                    dd:47:e4:20:46:30:20:35:aa:9f:5f:b8:a1:6b:34:
                    eb:7c:da:db:a8:b6:ad:28:88:1e:ea:db:dd:c6:a8:
                    f7:d1:47:6a:41:5d:7b:f0:cf:e0:8a:41:a3:2f:0a:
                    4b:d3:7a:72:1c:5d:40:55:c7:f1:9a:7f:3a:3a:e0:
                    6b:71:40:27:b2:ea:1b:bb:9d:1d:d3:45:70:80:fa:
                    04:70:f7:21:d2:93:19:d8:54:ae:a6:0f:b1:a0:44:
                    1f:15:b8:4d:03:c7:28:3f:89:b9:fa:e8:c7:9d:d5:
                    0d:f2:2b:87:0f:9a:1b:44:f3:e1:c5:82:0e:97:40:
                    4d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CE:8C:39:F5:B6:2A:1A:0F:22:60:51:BA:73:14:C3:D5:9D:B3:32
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353230323a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:5202::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:80:26:7c:07:72:ed:bb:d6:23:2a:46:c8:66:f0:a8:1f:18:
         60:2d:b6:25:4e:aa:03:68:2d:44:5c:b0:27:1c:91:2d:e1:f2:
         fe:5b:83:99:39:10:15:67:87:cd:b6:a1:c0:56:30:f1:25:6e:
         91:ae:0a:b2:28:7b:68:9c:c9:77:76:0a:1c:61:f1:f7:3b:ed:
         5e:5e:53:29:57:89:0b:3a:df:02:31:ec:2a:f3:45:1f:8d:e6:
         e4:bd:f3:45:5a:e4:a5:46:15:d7:4f:98:5a:57:a8:cc:69:01:
         eb:9f:d3:37:2c:38:aa:4c:d7:bd:84:0c:3f:db:90:3c:d1:56:
         a3:0f:20:4a:08:6d:61:2c:73:bf:13:03:bd:a2:63:df:02:06:
         9f:e8:b9:a7:d4:3d:0b:d6:78:c3:1a:b3:4f:7e:bf:3f:9d:8e:
         40:6a:71:39:4e:a8:74:b0:45:7b:bb:cd:09:23:ec:87:cc:12:
         51:ce:91:88:9e:63:4e:3c:96:a7:dd:3e:a7:c8:42:f9:10:49:
         58:7a:3e:07:69:fa:af:1f:c0:a4:89:40:0a:a8:bb:9b:72:fe:
         3a:f5:78:4f:1d:ee:00:39:ac:5e:a4:76:a1:a1:00:d8:da:f4:
         00:ef:48:dc:19:dd:35:ae:1a:2c:48:cf:08:ec:5d:9a:9f:0e:
         31:8c:83:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:54:53 2025 by rpki-client