Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a333030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a333030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          xg7nlr6hEVAXqSsB+zAi+RtcTPChlHskzGABzErMZKA=
Subject key identifier:   DC:81:0C:A9:EC:2C:94:9E:03:55:2D:D7:99:99:EE:7F:34:C5:FC:65
Certificate issuer:       /CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
Certificate serial:       66DFB6C62F410341ADC9873187B9D955BB66458B
Authority key identifier: 18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a333030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Tue 03 Jun 2025 16:01:51 +0000
ROA not before:           Tue 03 Jun 2025 15:56:51 +0000
ROA not after:            Tue 02 Jun 2026 16:01:51 +0000
asID:                     267991
IP address blocks:        2804:5654:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 11:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:df:b6:c6:2f:41:03:41:ad:c9:87:31:87:b9:d9:55:bb:66:45:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
        Validity
            Not Before: Jun  3 15:56:51 2025 GMT
            Not After : Jun  2 16:01:51 2026 GMT
        Subject: CN=DC810CA9EC2C949E03552DD79999EE7F34C5FC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:16:bd:d0:b1:f7:e3:cf:5d:d5:1b:f1:52:78:
                    ff:a8:89:aa:53:48:e1:d2:4e:c4:26:28:67:bd:f8:
                    46:b0:6f:cf:99:a0:a6:81:51:9c:d5:30:c5:19:b6:
                    a5:c9:35:20:6e:41:b2:c4:9f:08:64:e4:07:62:ee:
                    ee:80:ff:ad:35:e9:1e:a1:9a:43:3c:70:99:a7:dd:
                    c8:42:13:e0:77:92:79:55:a1:c9:f6:7f:5f:ba:b6:
                    e2:a4:5e:df:ab:64:43:fc:3a:38:50:1e:ba:5b:7d:
                    ed:33:07:b6:53:e9:fb:c3:9f:24:a5:94:4e:c1:b6:
                    86:c2:78:e2:35:ec:96:61:e8:d3:cb:62:ea:51:46:
                    7f:48:7e:48:3e:88:6d:fa:9b:7a:ad:72:89:e3:9a:
                    6c:9a:d6:f9:46:b2:64:fd:55:0a:a9:38:1d:95:5b:
                    48:5d:aa:81:da:c1:52:b5:d3:51:fc:9a:c7:8f:f2:
                    b3:13:7f:3c:17:bc:5e:4c:3b:e7:80:28:33:cc:ae:
                    e5:90:f4:c5:b2:6c:fe:7d:22:1a:65:f7:71:c8:b1:
                    55:71:4c:8e:5c:75:e6:70:df:d5:43:0d:10:29:8c:
                    16:22:a2:6a:0b:e7:b6:0a:37:2d:77:9d:67:87:03:
                    72:68:c1:2e:21:2f:96:b9:e7:fc:34:5e:22:6b:4c:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:81:0C:A9:EC:2C:94:9E:03:55:2D:D7:99:99:EE:7F:34:C5:FC:65
            X509v3 Authority Key Identifier:
                keyid:18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a333030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         64:21:f7:b8:8f:37:06:b4:88:c0:da:10:49:10:7e:23:4b:c5:
         b4:f0:14:56:00:4d:01:8d:ce:4e:80:58:85:41:89:cc:1f:c6:
         51:ce:f2:0a:fa:6a:fb:c6:c8:36:5b:17:e9:83:36:6c:ff:86:
         e3:31:fc:4c:3b:dc:4a:ea:05:ac:9e:fd:fa:5f:cb:f2:2b:78:
         8a:37:e8:61:1e:9c:1c:60:9e:e6:cd:1f:ff:36:72:e6:f9:d9:
         87:96:fb:14:6b:ad:80:e4:b6:3d:91:fd:cb:31:c2:50:a9:84:
         d3:21:a5:d1:a6:0a:f5:a9:3e:65:fe:cf:fa:58:48:9a:2b:54:
         a1:32:cb:32:01:8b:2f:0c:bf:30:0e:ed:19:60:64:00:f3:a5:
         97:5c:57:d8:6a:dd:05:d5:3b:29:5f:3f:91:b3:ba:75:cd:85:
         da:74:2d:60:85:e2:64:69:71:34:3c:b5:18:24:17:ab:bb:16:
         35:f3:fd:18:ae:5d:8c:a4:d7:37:ed:32:85:b6:65:15:8d:ed:
         cd:f6:43:98:12:c8:09:8f:4d:4f:17:30:92:6b:64:95:e3:92:
         cf:f2:be:99:f8:82:dd:4b:20:60:ba:09:33:d0:16:aa:3f:e1:
         fe:92:be:59:00:38:e9:6f:2f:e7:31:a1:56:cc:d7:dd:57:a7:
         1e:33:ac:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:10:17 2025 by rpki-client