Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a633030303a3a2f33342d3334203d3e20323732373339.roa
File:                     323830343a383765383a633030303a3a2f33342d3334203d3e20323732373339.roa (raw, json)
Hash identifier:          nC+5VXP2lmWRpVbtyf2It0BUXY5kJwm4FBE8plv8ZCU=
Subject key identifier:   E4:46:B7:39:B2:6D:E4:AC:EE:2A:E8:7B:CD:E9:36:46:C5:EA:38:43
Certificate issuer:       /CN=A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA
Certificate serial:       61E446077024545FA6A9E8012643DDCA2EE48C3D
Authority key identifier: A7:6D:0D:0E:B5:FB:05:C5:DC:C6:13:69:48:DD:8D:7B:CB:11:D6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a633030303a3a2f33342d3334203d3e20323732373339.roa
Signing time:             Fri 30 May 2025 14:23:23 +0000
ROA not before:           Fri 30 May 2025 14:18:23 +0000
ROA not after:            Fri 29 May 2026 14:23:23 +0000
asID:                     272739
IP address blocks:        2804:87e8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.crl
                          rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 04:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e4:46:07:70:24:54:5f:a6:a9:e8:01:26:43:dd:ca:2e:e4:8c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA
        Validity
            Not Before: May 30 14:18:23 2025 GMT
            Not After : May 29 14:23:23 2026 GMT
        Subject: CN=E446B739B26DE4ACEE2AE87BCDE93646C5EA3843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:14:4a:bd:3c:3c:fb:44:e2:9c:d6:6a:3d:80:
                    09:6c:47:0d:cd:b9:7a:a7:b3:8b:fe:0f:6d:b6:3d:
                    c5:98:e4:bf:1e:5c:5a:77:49:eb:5d:f8:1e:bf:51:
                    63:d8:9a:29:f2:0e:3a:fb:22:14:05:73:e5:a6:4a:
                    d6:6a:ba:e2:be:7b:05:9f:25:9b:a7:c0:57:06:6d:
                    8d:0d:b8:a5:3f:e9:b9:ab:c7:39:7e:2d:50:4e:ab:
                    3c:2a:8e:b1:dc:aa:a0:9d:0c:fb:d4:19:83:5a:e5:
                    72:44:86:51:5e:e7:f4:52:89:10:d8:04:84:53:31:
                    16:66:78:1f:04:fe:34:52:a0:d3:1e:c7:bb:49:9b:
                    e1:21:b6:91:5d:f0:ea:e4:70:fd:1d:71:fb:d3:84:
                    bd:bb:ee:05:30:ca:32:de:53:e8:c7:e9:af:95:55:
                    ae:5a:f9:30:1d:92:86:17:b8:97:46:97:d2:5a:eb:
                    be:28:3a:75:f1:bd:cc:93:ec:81:33:c2:7d:fc:91:
                    29:97:44:2f:94:f7:af:0a:3b:2b:9b:93:51:a1:a2:
                    4a:87:32:a1:1c:aa:f0:cc:95:32:aa:b2:2d:c5:2d:
                    f0:ed:56:81:a1:10:38:f9:77:72:97:9f:c1:de:1e:
                    99:4f:88:be:88:00:7e:17:b8:40:24:fb:41:68:fc:
                    6a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:46:B7:39:B2:6D:E4:AC:EE:2A:E8:7B:CD:E9:36:46:C5:EA:38:43
            X509v3 Authority Key Identifier:
                keyid:A7:6D:0D:0E:B5:FB:05:C5:DC:C6:13:69:48:DD:8D:7B:CB:11:D6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a633030303a3a2f33342d3334203d3e20323732373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87e8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ae:ba:56:8a:52:0b:9e:d0:33:72:e8:55:99:3c:85:c1:6f:7e:
         34:78:48:26:6e:12:ec:f0:77:58:64:c0:56:eb:f2:13:9f:e2:
         15:41:f4:b0:ba:01:b7:59:32:a8:df:52:60:bb:7e:cb:0f:2e:
         0f:1d:85:78:45:d9:96:43:f2:b7:39:95:a3:bb:09:87:81:a6:
         29:f6:f5:53:90:5e:76:c9:15:91:18:9f:b8:86:6f:2e:01:a5:
         c2:b5:a3:29:82:72:6d:fc:bc:44:b3:90:ab:12:72:83:b6:2f:
         01:66:44:ac:59:be:01:47:fd:a4:6f:1d:a4:43:1a:ad:b6:41:
         76:1c:34:a3:f7:cc:37:ee:7b:12:2f:90:37:8e:59:53:4c:be:
         9b:de:32:41:19:b1:32:c7:47:0a:28:8c:50:1d:ed:f8:b0:4d:
         ba:9b:a0:08:df:77:21:61:5c:6e:fa:c6:6a:53:5b:84:c1:fa:
         c5:27:42:4a:fc:75:5a:8a:66:68:78:16:40:2e:de:a0:8f:09:
         df:5e:c5:fa:55:ee:fe:68:4d:54:a5:1d:17:c9:59:bf:e2:39:
         03:87:73:d5:1b:62:53:fe:a4:2f:0f:30:a7:17:8d:4e:03:a9:
         33:f9:4b:dd:51:af:ef:72:e8:90:0c:fd:fe:21:2b:12:ef:5b:
         33:7a:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:33:03 2025 by rpki-client