Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a633030303a35373a3a2f36342d3634203d3e203532363133.roa
File:                     323830343a6433633a633030303a35373a3a2f36342d3634203d3e203532363133.roa (raw, json)
Hash identifier:          bDlkVmLPLNS3JGgOAvqKVr907iOiC56bVgvcg6oq/Ls=
Subject key identifier:   61:1A:DE:ED:DA:E6:3C:AD:90:3D:AE:17:30:F4:19:58:A6:5E:FD:B9
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       1933C6D9C2B3134BBC1408BF9699DBA442BA656C
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a633030303a35373a3a2f36342d3634203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:18 +0000
ROA not before:           Thu 06 Mar 2025 09:37:18 +0000
ROA not after:            Thu 05 Mar 2026 09:42:18 +0000
asID:                     52613
IP address blocks:        2804:d3c:c000:57::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 23:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:33:c6:d9:c2:b3:13:4b:bc:14:08:bf:96:99:db:a4:42:ba:65:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:18 2025 GMT
            Not After : Mar  5 09:42:18 2026 GMT
        Subject: CN=611ADEEDDAE63CAD903DAE1730F41958A65EFDB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:27:68:d7:50:3e:8d:41:39:da:33:cd:28:
                    ad:b7:9d:bf:dc:c3:ff:aa:33:b5:9e:33:35:1c:ea:
                    4c:6c:2d:42:a2:76:26:9a:29:1b:f6:dd:39:8c:95:
                    2d:5e:58:94:7b:a0:c1:6c:62:46:15:32:f2:4f:e6:
                    fd:66:a6:d7:88:2b:ca:1b:a5:e1:6d:b3:5b:b5:93:
                    c9:f9:c1:7e:b7:fa:cb:01:35:1b:ff:12:d2:d0:f8:
                    78:2c:23:d9:08:d0:36:4e:7b:7f:b8:89:32:c5:07:
                    7c:26:9f:0d:5b:52:c0:c5:4e:a2:26:7b:cb:cd:a6:
                    4e:7d:d9:18:f6:fa:54:a6:00:ee:bc:d6:59:4d:e1:
                    b6:f6:32:44:bb:60:83:11:03:9b:35:b5:6b:a2:ef:
                    52:0f:aa:8d:46:8c:b4:a4:14:44:7f:58:01:8f:24:
                    7b:24:5b:49:0a:33:50:ae:0f:ca:28:c1:63:df:96:
                    cb:c0:51:9e:28:65:dd:02:70:7a:66:1b:53:3c:e6:
                    61:91:de:26:44:5a:ef:db:e0:a9:08:6d:1d:4f:ef:
                    bc:05:66:27:94:81:cd:00:41:b9:05:09:ab:45:27:
                    00:47:c6:55:b9:b0:ad:90:2e:4a:5b:b2:2e:c2:1b:
                    a8:a1:f0:d8:80:bb:5e:c9:bb:c8:84:bc:f4:d9:28:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1A:DE:ED:DA:E6:3C:AD:90:3D:AE:17:30:F4:19:58:A6:5E:FD:B9
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a633030303a35373a3a2f36342d3634203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c:c000:57::/64

    Signature Algorithm: sha256WithRSAEncryption
         7c:01:2c:43:a3:de:5a:49:6e:eb:27:26:31:e3:77:81:45:99:
         0f:95:c6:eb:43:7d:9f:b1:70:68:1c:b6:66:d4:21:3c:c7:87:
         74:fe:17:9f:33:c3:62:34:49:bc:95:40:0a:77:c8:f2:d8:5d:
         05:c3:4a:7e:f4:8b:ac:bc:c3:9c:af:7b:35:06:f0:74:4f:94:
         5a:2a:40:e3:cc:2f:f6:cd:1c:00:be:bf:96:a8:09:d0:77:93:
         f8:ae:31:40:3c:60:af:88:5a:4a:88:28:80:7b:24:ce:f7:aa:
         ee:57:6d:74:60:39:fa:11:48:2e:4a:35:9e:da:df:b8:a3:e1:
         67:22:24:d4:53:0b:f0:df:2c:3c:ca:9a:e9:73:5d:c2:b0:e7:
         bd:fb:c4:db:13:08:79:a8:d0:9b:eb:d4:1e:49:f4:71:4b:58:
         a8:64:a5:ba:4d:65:80:ec:26:5b:a2:bd:4a:a7:fd:08:a0:0a:
         bf:f9:05:21:9b:fc:ec:94:b2:86:39:80:0c:df:8d:74:2a:8f:
         12:84:9f:be:12:8c:0c:fd:f2:62:fc:77:43:55:e0:fc:4b:00:
         bf:86:8a:4e:72:75:2d:c2:b6:8a:00:98:55:1a:05:7b:1f:47:
         7d:b0:fa:88:16:c7:83:ba:36:56:b1:c5:5c:76:f6:1e:6b:d0:
         59:57:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:45 2025 by rpki-client