Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a313030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a313030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          QfdWbj79BwSFvwFxrfqvJrbnmO1l1lFCxn6htd6HzDI=
Subject key identifier:   9D:19:E7:67:1C:08:FD:6C:AF:45:11:72:01:F1:58:C9:A2:38:63:89
Certificate issuer:       /CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
Certificate serial:       6EB407DA2E740072C0548226A18AF03471F69C82
Authority key identifier: 18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a313030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Tue 03 Jun 2025 16:01:47 +0000
ROA not before:           Tue 03 Jun 2025 15:56:47 +0000
ROA not after:            Tue 02 Jun 2026 16:01:47 +0000
asID:                     267991
IP address blocks:        2804:5654:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 11:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b4:07:da:2e:74:00:72:c0:54:82:26:a1:8a:f0:34:71:f6:9c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
        Validity
            Not Before: Jun  3 15:56:47 2025 GMT
            Not After : Jun  2 16:01:47 2026 GMT
        Subject: CN=9D19E7671C08FD6CAF45117201F158C9A2386389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fa:ff:63:14:65:87:4e:52:92:23:ee:f0:86:
                    6b:80:0c:3e:91:53:36:06:7e:82:ff:97:27:af:3c:
                    b8:2c:b6:e8:15:42:26:11:e5:46:f9:4c:47:6f:0e:
                    44:da:03:f4:b1:89:aa:a1:df:21:9a:fe:7a:09:b2:
                    c5:9a:e0:d2:06:68:d4:3e:3f:a8:05:29:a9:a6:d4:
                    4f:2f:83:3d:f5:48:ae:64:32:89:4e:5c:a0:81:fa:
                    a1:11:f6:d0:d8:48:8e:7e:4b:75:15:7f:38:25:61:
                    db:7d:f7:62:0d:dd:09:7a:90:41:ed:02:db:75:0b:
                    ab:df:f6:df:59:45:2d:0b:75:d0:be:2e:40:32:ed:
                    87:55:21:f9:b3:08:8f:5e:7a:b5:65:e5:b7:24:1b:
                    fa:b2:e9:da:9a:34:c0:97:80:13:c2:b9:58:da:69:
                    dc:fb:4e:be:4e:96:0a:7d:f0:43:df:f9:0c:79:74:
                    d1:ba:a4:6c:e2:24:d3:ae:7c:d2:24:13:af:49:fa:
                    99:f5:47:b8:fa:b7:02:93:50:cb:43:06:6e:f4:aa:
                    51:bf:bf:80:86:7a:ea:e6:fd:63:3d:b8:84:bc:a5:
                    3c:9c:71:60:37:94:23:7f:57:17:63:e1:43:60:c4:
                    3c:d0:86:09:4c:77:c9:0f:27:4b:a5:ae:9d:bd:8b:
                    62:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:19:E7:67:1C:08:FD:6C:AF:45:11:72:01:F1:58:C9:A2:38:63:89
            X509v3 Authority Key Identifier:
                keyid:18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a313030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a5:76:27:6e:f1:0b:81:c3:e0:8e:b5:26:d7:27:d5:61:92:68:
         a3:71:91:b6:a1:33:b3:1e:24:88:76:b1:7d:95:2e:7f:d9:8b:
         f6:8b:1a:ec:42:9f:98:b3:41:cd:b3:d6:ba:26:ca:87:aa:72:
         f9:8a:64:6e:97:c8:02:7b:92:ff:3e:1d:2f:9f:10:1a:3e:fd:
         25:11:58:43:da:f0:cf:51:bd:b1:aa:7b:e0:6a:f5:f3:69:94:
         12:dd:64:70:cf:f4:18:2e:1a:e0:28:3e:08:af:a2:e6:fe:3a:
         2c:a6:ac:cb:b8:9a:45:88:11:32:78:4f:81:1b:02:fc:7d:cc:
         08:f1:9e:1e:0f:a8:61:8a:6c:44:a4:f9:d7:e8:cf:b8:1a:61:
         96:4b:a9:22:3b:28:e6:b5:7a:9f:eb:68:14:96:c3:c2:d4:73:
         a2:91:58:71:41:bf:10:cc:09:ce:5e:83:94:b4:db:64:33:7e:
         00:dd:76:93:ba:fe:19:4d:74:52:bb:96:a3:c4:5e:1a:49:48:
         db:e8:f7:0e:28:2a:74:95:06:6d:15:7a:7a:58:9c:48:49:74:
         85:20:00:a0:c3:65:c1:ee:12:50:f2:3b:64:0a:52:52:88:ff:
         0b:80:c9:2c:9c:1c:0f:4a:f4:0e:44:53:70:a9:43:b1:d6:f8:
         49:9b:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:27:28 2025 by rpki-client