Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a303a323a3a2f36342d3634203d3e203532363133.roa
File:                     323830343a6433633a303a323a3a2f36342d3634203d3e203532363133.roa (raw, json)
Hash identifier:          QpCKhn4SRXJIwUts8oBZLrJM47rujHDbXIcCTtFnifI=
Subject key identifier:   16:CB:A3:B9:0F:F2:47:2A:2C:34:21:6A:09:89:F0:55:CC:65:D9:01
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       764FC59A7CFA7BD60A553202E9F4C9844F99923F
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a303a323a3a2f36342d3634203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:18 +0000
ROA not before:           Thu 06 Mar 2025 09:37:18 +0000
ROA not after:            Thu 05 Mar 2026 09:42:18 +0000
asID:                     52613
IP address blocks:        2804:d3c:0:2::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4f:c5:9a:7c:fa:7b:d6:0a:55:32:02:e9:f4:c9:84:4f:99:92:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:18 2025 GMT
            Not After : Mar  5 09:42:18 2026 GMT
        Subject: CN=16CBA3B90FF2472A2C34216A0989F055CC65D901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6a:94:e0:85:7e:84:7e:05:e4:51:cd:56:91:
                    d1:98:7b:cf:72:37:a8:28:d5:fe:5c:46:81:ee:53:
                    c9:d3:13:12:c2:65:4d:cf:e9:4f:58:66:59:ca:a3:
                    9c:53:37:c9:64:fa:d8:13:ce:7d:fc:5b:32:67:95:
                    68:f6:b1:b0:18:1c:bc:75:41:9e:d5:31:5b:51:6c:
                    0e:72:4c:c6:09:a7:65:8e:ea:44:22:b9:a5:20:2d:
                    e5:b1:bb:ec:95:cd:3d:d2:0b:af:0c:d0:79:f8:eb:
                    8c:23:da:39:e2:81:bb:9e:7b:1e:ff:88:33:3d:21:
                    20:cd:de:44:3f:b8:49:7e:6e:b0:5e:31:bc:51:ef:
                    11:7f:56:3d:cb:6b:a8:a3:30:4b:d1:f1:2e:db:98:
                    e4:1d:1e:ac:40:9f:19:c5:bc:71:be:af:04:02:31:
                    8e:17:6d:0d:cb:cd:9b:e8:f7:9b:9b:8c:ce:81:b6:
                    92:9e:92:74:c7:e2:3e:5b:5d:ca:8e:3d:92:ab:49:
                    81:89:8f:84:65:b2:27:e3:19:e3:3d:9a:02:cc:78:
                    1f:5b:8b:48:e0:83:59:3e:29:66:ff:84:17:28:0c:
                    11:fa:fd:89:18:c4:0b:cf:66:ed:f9:5b:aa:8c:e3:
                    4c:85:2a:aa:52:b8:69:c9:43:c0:60:97:01:bd:75:
                    b9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CB:A3:B9:0F:F2:47:2A:2C:34:21:6A:09:89:F0:55:CC:65:D9:01
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a303a323a3a2f36342d3634203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c:0:2::/64

    Signature Algorithm: sha256WithRSAEncryption
         02:12:d0:1a:a3:b7:5f:c8:0e:bc:0d:9f:39:8f:9b:d9:a4:e1:
         0c:f9:3c:70:9f:be:4d:fc:33:3a:03:af:f0:49:76:a2:cd:42:
         38:0c:8a:c3:5e:2b:8e:3a:96:0d:f5:a2:41:69:9d:b4:c3:a1:
         ed:73:74:50:14:8a:31:56:2e:0f:e2:2a:f9:78:f2:db:57:42:
         c4:10:e6:fe:59:41:37:7a:3c:37:a7:c8:69:7e:49:ca:79:0c:
         bd:09:83:e1:cb:22:af:ef:79:17:a4:d9:d0:ea:70:3b:1b:a6:
         84:b8:02:23:fc:97:48:91:bd:19:b0:75:ed:fa:5f:8d:74:53:
         6b:4c:14:dd:43:be:58:68:95:7e:8b:94:b9:72:30:61:58:6f:
         3e:3f:dd:1c:58:76:89:4e:4c:b2:bb:bc:5c:2f:b7:b6:1a:59:
         f7:3b:27:9c:3c:cb:f2:b0:f6:ca:e4:39:a9:aa:4d:69:25:b0:
         d0:5d:8a:8f:91:34:a4:85:ec:d6:04:1a:99:b2:be:ee:dc:cd:
         ce:97:ec:e4:e6:1c:8a:a6:cf:e1:d1:ba:64:db:9d:ba:b3:d6:
         aa:3b:b2:28:3d:9e:a0:e0:b5:fe:c0:97:88:b9:2e:b7:b5:33:
         87:9e:fb:32:97:a2:02:30:cd:9f:78:59:37:f3:45:95:8e:f6:
         49:27:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:25:45 2025 by rpki-client