Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a313a3130303a3a2f36342d3634203d3e203532363133.roa
File:                     323830343a6433633a313a3130303a3a2f36342d3634203d3e203532363133.roa (raw, json)
Hash identifier:          pc3fRn3xa1QzipfOwGFOlS+vtEu0jHiTwlu8KYVZGKk=
Subject key identifier:   62:50:F0:F9:42:73:90:F9:72:6E:CB:02:FA:35:CF:5A:AF:DA:A6:53
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       2542585D82138C2C87F18140E99F37700385C46E
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a313a3130303a3a2f36342d3634203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:20 +0000
ROA not before:           Thu 06 Mar 2025 09:37:20 +0000
ROA not after:            Thu 05 Mar 2026 09:42:20 +0000
asID:                     52613
IP address blocks:        2804:d3c:1:100::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:42:58:5d:82:13:8c:2c:87:f1:81:40:e9:9f:37:70:03:85:c4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:20 2025 GMT
            Not After : Mar  5 09:42:20 2026 GMT
        Subject: CN=6250F0F9427390F9726ECB02FA35CF5AAFDAA653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:7f:a1:06:e8:80:77:e7:75:6f:24:d1:07:
                    95:15:97:01:d4:b6:9c:ca:60:04:dd:83:26:2b:a0:
                    88:17:4d:ac:5e:22:50:37:47:6a:d4:ca:f7:9a:ec:
                    f9:ba:61:91:10:ad:ed:7b:dd:55:19:df:e9:66:6b:
                    ec:2a:49:50:7e:69:e5:f6:91:4f:2a:03:34:7b:29:
                    7f:2a:a1:90:8b:e8:02:a7:da:31:68:b9:51:e5:2c:
                    d8:29:d3:d7:30:8d:68:ca:ad:a4:b9:c8:ff:cb:ca:
                    8a:f8:b3:0d:5c:57:0c:c7:88:01:56:0f:dc:86:d8:
                    b1:62:68:72:d3:df:ed:14:a7:06:b9:9f:68:ad:b3:
                    94:8f:63:8d:5d:f0:b6:d6:e4:db:a1:34:b4:10:7e:
                    01:b2:a6:75:14:35:87:ae:fd:a2:ed:2b:75:39:09:
                    e6:26:bc:2e:9a:0e:e7:69:5f:79:a1:ec:1a:a4:6d:
                    fa:45:63:84:b8:6e:fb:ae:99:8c:ce:4f:dc:ea:fd:
                    8f:64:49:0e:7a:d2:53:da:48:ef:68:26:ff:8c:92:
                    b9:b6:80:eb:28:7f:2e:2d:bc:d7:40:5e:d1:47:b1:
                    5d:21:87:35:04:9e:0a:5c:50:d5:36:af:20:2c:82:
                    b8:84:bf:05:97:fd:39:3a:87:70:6b:45:91:f2:d7:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:50:F0:F9:42:73:90:F9:72:6E:CB:02:FA:35:CF:5A:AF:DA:A6:53
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a313a3130303a3a2f36342d3634203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c:1:100::/64

    Signature Algorithm: sha256WithRSAEncryption
         93:19:8f:4b:80:cc:6e:e1:f1:cf:59:41:19:19:dd:c6:74:14:
         ea:46:d0:6e:0f:72:21:4a:8f:ff:97:47:e9:dd:d0:fe:0a:1e:
         f7:99:72:a7:0c:30:4d:fe:b2:02:1c:c2:a6:3d:10:0c:ab:e2:
         50:e8:73:d7:b1:e2:4a:83:2f:7b:c5:21:04:e9:29:b5:30:d4:
         da:b9:b2:22:cc:3c:e3:98:86:cc:66:9b:27:a4:8b:65:2a:16:
         a6:83:9d:af:86:9b:10:b5:c3:d7:e6:23:b1:2b:58:ca:f5:86:
         1b:d7:25:58:9d:bf:29:b8:53:7b:3d:6d:3e:8a:0e:1d:c5:56:
         e7:0e:f2:0d:62:12:09:fd:e5:69:f6:8f:f8:ce:55:d1:5f:cf:
         82:96:c8:5e:a0:12:8a:4e:1d:78:74:6e:d3:0f:73:cb:f4:73:
         3f:a6:f4:82:1d:1a:20:c8:12:7d:38:e7:28:51:a0:7d:05:78:
         bb:7b:38:59:b7:d2:b1:05:35:a2:bb:54:b8:cf:e5:cb:6d:31:
         74:e3:4a:7b:a4:54:26:79:fd:2b:68:ec:4f:e6:4c:4c:97:9b:
         b0:2b:e2:f6:6c:93:9d:9d:26:ae:1a:f3:d6:34:74:8b:67:d2:
         f2:83:1c:1b:72:4a:59:cb:57:74:61:c2:1d:66:a4:8a:ff:02:
         c4:5f:07:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:49:14 2025 by rpki-client