Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a316162633a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a316162633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          MvPz3y0Epy/bzPLx2pRcbwggob0plpvF/qWUOGlLvy8=
Subject key identifier:   76:D8:9E:76:C9:D2:27:27:68:E4:C2:2F:A9:E7:DD:2B:69:D2:F4:F8
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       105CE5DD3A62ABE2265314530512ACC03C0144BF
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a316162633a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:29 +0000
ROA not before:           Tue 27 May 2025 19:09:29 +0000
ROA not after:            Tue 26 May 2026 19:14:29 +0000
asID:                     264485
IP address blocks:        2804:2050:1abc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 21:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5c:e5:dd:3a:62:ab:e2:26:53:14:53:05:12:ac:c0:3c:01:44:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:29 2025 GMT
            Not After : May 26 19:14:29 2026 GMT
        Subject: CN=76D89E76C9D2272768E4C22FA9E7DD2B69D2F4F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:6a:84:06:c1:db:ea:09:2c:87:05:9b:b5:
                    fd:46:87:ed:d4:29:b1:e7:29:bc:ab:a2:e4:b1:90:
                    83:ef:35:02:d0:4d:1f:e0:41:0a:27:fa:e5:11:7d:
                    07:27:da:6d:a8:16:8e:03:13:a7:8b:88:a2:c3:70:
                    1d:3e:ac:39:03:8d:15:79:ae:be:b6:e2:e6:1f:bd:
                    b7:a0:f4:14:b1:b0:b3:fb:a3:7d:99:63:94:d7:ea:
                    f3:63:18:aa:be:14:b3:66:fe:97:1f:6a:29:c1:2f:
                    19:d9:6f:6f:b3:ed:04:e8:12:ff:23:b5:e7:22:1e:
                    92:48:51:d7:f2:83:c7:ca:63:9c:c0:b0:30:0b:ca:
                    a9:00:ef:1a:f4:4b:7b:9f:1b:16:3c:c4:67:f7:a7:
                    a0:11:a0:31:61:8a:35:5a:23:e4:94:3a:f4:49:7f:
                    68:05:d7:7d:af:bc:c2:b6:b1:30:09:f2:32:f1:7f:
                    36:6b:f8:a7:1a:25:1a:28:b7:93:83:5e:bc:28:46:
                    10:dc:07:ed:a1:f4:c4:c7:f6:2c:b9:a9:5d:d9:dc:
                    5c:10:89:6f:48:8e:d0:9d:a3:99:85:35:8c:e9:d8:
                    47:f2:62:98:a8:5a:a2:01:ef:4b:08:dd:aa:7b:f2:
                    ac:23:28:c2:65:37:c7:4f:29:bc:5d:ee:29:93:a8:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D8:9E:76:C9:D2:27:27:68:E4:C2:2F:A9:E7:DD:2B:69:D2:F4:F8
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a316162633a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:1abc::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:ee:09:1f:60:01:0e:7d:86:94:82:4d:4c:fe:ed:e2:93:2c:
         20:43:69:2b:32:26:8d:ee:f8:f9:5b:d9:4a:e0:81:d8:db:a2:
         a4:e2:66:c1:8b:a5:68:d7:f2:89:bd:f7:fb:50:68:f0:cf:02:
         bf:39:8d:2d:fd:51:48:86:21:3e:a4:c3:f6:68:1a:e2:53:8d:
         cd:57:46:4e:d9:ed:55:ff:b1:49:70:f8:04:b9:55:3a:cf:c4:
         17:5b:ed:9d:4d:67:fd:33:07:46:1c:fa:96:f3:6a:1d:f9:96:
         c5:f9:c8:26:db:85:62:95:a5:21:9f:28:eb:df:c2:44:2f:b9:
         0d:be:f0:d7:ac:fd:4e:e7:ca:db:8a:a5:87:74:ca:7a:d3:43:
         42:ae:ee:12:37:39:93:f4:70:13:d9:eb:d0:7f:8f:3c:30:21:
         06:3d:20:59:fe:9d:12:93:66:75:76:18:65:db:ba:1a:0f:9f:
         89:15:93:10:b0:ba:0d:ba:fd:a7:f1:21:22:49:e6:71:8e:56:
         5f:e6:db:a2:9e:13:38:15:02:f1:1c:7e:15:90:84:f6:cd:b9:
         0c:05:87:4c:b3:6b:de:4c:8b:72:da:7c:ef:b0:74:e6:e9:61:
         48:0d:b1:57:e0:b6:54:80:20:1d:4d:c6:48:c4:6b:13:22:0e:
         60:98:f2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:50:52 2025 by rpki-client