Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a353a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a353a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          2n+guGToWab0B11OvedrryYm6U3zSJ4lTjegQGItsCU=
Subject key identifier:   8E:36:C5:8A:B0:21:AD:95:E3:0B:48:AC:12:92:E4:5D:A6:BC:DB:AB
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       177A63BDDD3E3C28D59F3C0E28827B55BF4A4098
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a353a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:36:11 +0000
ROA not before:           Wed 05 Mar 2025 20:31:11 +0000
ROA not after:            Wed 04 Mar 2026 20:36:11 +0000
asID:                     262617
IP address blocks:        2804:90c:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 14:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7a:63:bd:dd:3e:3c:28:d5:9f:3c:0e:28:82:7b:55:bf:4a:40:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:31:11 2025 GMT
            Not After : Mar  4 20:36:11 2026 GMT
        Subject: CN=8E36C58AB021AD95E30B48AC1292E45DA6BCDBAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:b4:3d:15:44:05:8a:41:d7:7b:cd:0d:8e:
                    89:cb:a2:f0:29:3c:24:8e:9a:ba:0a:4a:8c:31:60:
                    94:1b:bc:0b:a8:5d:63:c8:70:6d:ee:69:16:e7:e5:
                    31:d6:fd:29:13:5b:8a:75:30:dd:23:09:1e:6c:67:
                    5e:b5:f8:fb:f1:02:1f:bb:3c:53:d7:d7:20:28:13:
                    3b:5d:5d:b2:53:f0:75:c4:a3:fe:31:2e:ce:b3:5d:
                    f8:87:1f:67:5b:ea:5b:7f:b5:b0:98:43:95:ef:06:
                    6e:91:8c:0c:61:9b:60:17:e5:dc:d7:e7:5d:2a:3a:
                    fe:57:3d:74:7e:d9:b2:fa:7b:ce:f2:2d:cd:b3:19:
                    1a:f8:b9:d8:00:9e:9b:a8:8b:c2:87:59:3b:bf:f0:
                    d7:1f:c0:20:21:1a:a8:d0:e3:41:ce:3c:43:6f:ad:
                    eb:c0:42:f5:52:9a:07:a4:89:91:2e:cf:2c:58:35:
                    25:46:56:03:cc:0a:c2:f2:bf:0a:09:95:f2:b7:09:
                    e4:1f:81:5d:a4:ad:3d:97:7a:36:f2:79:be:57:2e:
                    52:5f:5b:82:d7:f2:8b:f5:e3:c9:4a:e4:62:87:32:
                    5b:40:05:50:82:6e:f5:b7:1c:9c:f4:14:59:7f:be:
                    af:99:66:a0:e3:6f:ae:9f:92:b0:7b:7c:68:19:67:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:36:C5:8A:B0:21:AD:95:E3:0B:48:AC:12:92:E4:5D:A6:BC:DB:AB
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a353a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:57:b0:c7:c4:e1:e8:c9:9d:78:ea:82:41:b5:59:14:b1:fe:
         5b:39:db:46:dd:cf:b7:b3:f6:0a:66:a2:31:1c:4a:6b:cc:58:
         18:65:38:a8:b5:e3:01:1e:64:69:55:aa:4f:27:c0:79:e4:7b:
         97:f1:20:14:c9:a9:c7:3d:cc:95:e6:41:b0:54:2b:98:d0:ea:
         92:d3:5a:78:e6:a6:ca:ce:21:cf:7a:3a:1e:ab:e4:b8:8d:ca:
         8b:2f:35:bb:2f:52:c7:fe:22:39:83:9c:bd:55:b3:b9:37:c8:
         ef:36:3a:34:00:10:a0:44:04:88:a1:5b:d9:b7:ef:ae:c0:07:
         13:f7:db:18:4c:38:75:b8:5a:13:79:13:a8:bd:1a:03:8c:69:
         ea:28:47:ce:a6:83:d9:7d:72:ae:32:13:1c:78:77:a4:fb:2c:
         07:23:3a:60:4e:a9:8b:20:1d:49:19:45:1b:b8:39:30:fd:07:
         24:78:b3:6c:26:2d:92:5e:0a:62:2e:16:df:a6:a6:dd:97:6f:
         26:c9:fc:e0:e1:f7:53:6a:77:28:d4:12:e9:13:0d:72:9f:d8:
         84:d4:3d:e4:0b:44:1c:3f:ca:9b:55:c8:de:7a:5e:b2:c9:d6:
         cd:9d:87:ca:f6:d7:d1:fd:23:10:07:f9:8a:35:8e:13:95:36:
         d3:cd:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:03 2025 by rpki-client