Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a343030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a343030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          N0RXXc96Y5U58vYF4ejwtBBOhu6HRUqkMsfLC1dgenE=
Subject key identifier:   C2:27:65:F8:73:D9:FF:68:C6:49:37:19:90:71:BC:D5:DB:A5:CA:4D
Certificate issuer:       /CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
Certificate serial:       25132C05E87EC3441B08425A73FE4C73DF0731DD
Authority key identifier: 18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a343030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Tue 03 Jun 2025 16:01:46 +0000
ROA not before:           Tue 03 Jun 2025 15:56:46 +0000
ROA not after:            Tue 02 Jun 2026 16:01:46 +0000
asID:                     267991
IP address blocks:        2804:5654:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 11:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:13:2c:05:e8:7e:c3:44:1b:08:42:5a:73:fe:4c:73:df:07:31:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
        Validity
            Not Before: Jun  3 15:56:46 2025 GMT
            Not After : Jun  2 16:01:46 2026 GMT
        Subject: CN=C22765F873D9FF68C64937199071BCD5DBA5CA4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:3f:2c:31:8c:d0:d8:a4:e6:0c:b8:58:59:
                    4c:e6:5c:21:d4:70:99:85:1b:37:1c:91:80:85:fe:
                    29:5d:d1:d2:29:c4:a9:ed:96:15:89:64:2e:3a:8e:
                    be:e3:01:d7:9d:bf:b7:2b:ca:73:c4:15:ad:57:8e:
                    ab:db:e9:bf:0a:97:be:5d:a0:04:86:12:4c:d8:fe:
                    c1:2d:ce:d8:05:06:e8:20:2f:e1:f8:3d:9e:e7:1b:
                    3a:8d:d8:88:07:38:84:3d:89:59:b7:3f:f6:48:97:
                    26:5f:30:81:e6:88:1a:bd:ad:5d:d5:d6:66:2c:52:
                    f2:6c:e4:b1:3e:da:a8:c2:ac:ba:34:90:e9:62:e1:
                    1b:fc:fd:2f:05:20:f9:fe:1a:e7:50:5f:96:ad:83:
                    11:f5:39:a8:7c:f4:bf:2d:07:b0:7b:37:b6:9e:10:
                    02:1c:0d:e7:50:d6:3d:33:12:fe:27:df:67:dc:2c:
                    9a:a1:1a:28:a1:7e:cf:e3:79:2b:3b:d4:89:3b:bf:
                    f5:0b:9e:bc:32:27:db:9c:86:ad:97:02:d2:28:cf:
                    a7:0c:cf:cd:20:c0:fc:5c:26:dd:8b:39:dd:6a:7c:
                    29:af:20:73:81:97:7f:9b:1d:47:e3:f4:27:41:6b:
                    3f:2f:59:cc:87:4a:af:d6:92:84:1b:80:f5:08:9e:
                    3e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:27:65:F8:73:D9:FF:68:C6:49:37:19:90:71:BC:D5:DB:A5:CA:4D
            X509v3 Authority Key Identifier:
                keyid:18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a343030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         76:da:fc:5a:d1:33:11:40:f3:fb:65:70:e9:3c:a1:26:dd:1a:
         07:11:f5:d1:b8:e6:77:e6:f0:ea:d3:d5:df:f9:e4:bb:17:9c:
         28:fb:27:5f:88:55:f8:d6:ee:3a:83:31:2d:3f:d8:5b:f6:4b:
         c3:7c:a7:93:73:11:5e:18:20:a3:94:0e:f2:ec:a5:9d:41:6e:
         e4:74:f4:b4:4b:39:ca:07:d6:b3:b7:fc:51:33:12:92:61:39:
         c9:52:00:29:56:69:6c:aa:a5:4d:2f:a5:3a:0d:90:fa:76:00:
         b6:c5:55:7a:93:a2:3c:fc:8e:a5:73:5a:eb:b8:62:1d:27:f1:
         fb:cc:13:22:87:a7:8f:71:ec:30:2b:76:42:68:7d:a8:13:c7:
         35:37:51:66:c1:47:ab:1f:34:db:9b:8d:43:0d:f0:f3:f1:94:
         91:e3:81:c9:ab:fe:59:f6:d7:1d:c8:ae:f2:43:cc:47:eb:58:
         42:cc:68:66:a6:61:65:18:d3:1d:2d:95:86:92:6b:13:27:21:
         f3:9e:fa:69:35:b9:0a:b7:24:a5:99:f0:fe:c5:51:06:c3:54:
         ed:bf:60:ee:3e:a4:fe:b3:6e:ca:6e:7c:58:c9:12:fc:3b:32:
         8a:02:2b:16:27:00:ba:59:46:e9:b6:03:91:8b:34:d8:b3:d8:
         7a:93:f3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:52:51 2025 by rpki-client