Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a323030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a323030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          notIUvf2olTovRxbpc1jrTnbrhLxldPKBQ+RsBq5gX4=
Subject key identifier:   52:0D:C8:2E:DF:B7:AA:81:17:BC:DF:0C:AB:68:0B:4D:8C:6C:29:0E
Certificate issuer:       /CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
Certificate serial:       637DEB757D194EC0CEC890FF78CC3A41F3F9C8C8
Authority key identifier: BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a323030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Fri 23 May 2025 21:55:17 +0000
ROA not before:           Fri 23 May 2025 21:50:17 +0000
ROA not after:            Fri 22 May 2026 21:55:17 +0000
asID:                     274726
IP address blocks:        2804:92a8:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7d:eb:75:7d:19:4e:c0:ce:c8:90:ff:78:cc:3a:41:f3:f9:c8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
        Validity
            Not Before: May 23 21:50:17 2025 GMT
            Not After : May 22 21:55:17 2026 GMT
        Subject: CN=520DC82EDFB7AA8117BCDF0CAB680B4D8C6C290E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:51:5b:33:4a:76:db:00:cf:e6:fd:e1:e7:
                    af:61:f1:c4:e7:82:e5:b2:ac:7b:df:e9:84:af:80:
                    e5:6b:10:34:f4:7e:0d:79:47:2b:23:fd:3a:ae:c3:
                    0a:ba:f0:f4:eb:8a:6c:ba:a4:a8:86:58:d3:58:c9:
                    a1:7e:56:23:90:74:f7:22:be:81:e5:45:62:a3:09:
                    fd:a9:27:d3:67:2f:66:9e:8e:df:c2:ef:93:cd:7f:
                    ff:9c:8a:2a:f2:67:1a:b2:1a:0a:95:6c:d1:1e:e9:
                    67:bf:fa:d3:f9:36:25:af:84:c5:7f:83:da:1c:7c:
                    bc:b5:26:76:7a:20:23:fe:2a:91:59:82:2e:02:90:
                    ad:02:e6:f2:d6:0c:37:0f:06:b6:95:60:ae:68:8a:
                    2f:77:38:9c:08:15:fe:b8:2a:b1:a1:f0:d7:58:ee:
                    73:9b:91:98:6f:16:42:39:f2:25:37:12:99:e0:f1:
                    6e:cc:4d:c7:1c:6d:c6:aa:73:88:b5:10:1a:7b:2b:
                    82:8f:2e:b7:5a:86:b3:20:fb:3a:70:f2:84:be:b9:
                    cf:62:8c:11:c9:16:37:f7:cf:a8:cc:ef:99:e4:02:
                    50:3d:d4:de:08:b6:fe:97:ad:5d:5a:81:e6:3a:d8:
                    96:74:c5:0b:39:e5:53:3b:c9:3f:f6:82:41:16:77:
                    c6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0D:C8:2E:DF:B7:AA:81:17:BC:DF:0C:AB:68:0B:4D:8C:6C:29:0E
            X509v3 Authority Key Identifier:
                keyid:BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a323030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:95:12:52:3c:bf:9c:f4:a1:4a:b4:df:42:ab:f0:08:85:f8:
         85:3e:32:04:ff:9a:15:b1:4e:64:dd:5a:65:8b:7c:8e:03:2f:
         d5:cf:49:7c:21:ae:59:67:31:13:1b:3a:4e:3d:7d:ae:ae:b8:
         fe:d8:db:e2:cb:c6:94:de:b2:a6:3a:74:ca:3a:c5:49:0b:44:
         6d:e5:59:3a:b6:fe:21:0d:83:af:c4:2f:c5:a0:1c:43:f0:cf:
         78:c8:56:57:58:8f:b8:f1:5d:97:ac:2a:0a:62:3f:a5:a3:7d:
         1a:ea:dc:36:33:71:1d:68:f7:de:bb:71:99:05:a1:e8:46:a9:
         d3:5b:b3:89:1b:5b:ad:c3:90:74:bf:f6:23:98:b4:74:31:b6:
         2e:ca:f4:3b:dd:63:25:bb:3b:85:54:fa:ed:31:66:c5:6b:cb:
         f8:39:fa:6e:61:c9:47:e4:23:e2:3f:0d:18:b0:e1:2f:24:c2:
         1b:b0:57:b3:f6:dc:99:73:75:f2:93:28:ba:cd:8a:52:c2:39:
         3a:8e:9c:d3:fe:9b:6e:79:7c:56:17:6f:23:2b:83:83:19:52:
         df:d1:c2:9a:2e:73:40:94:72:8a:cb:1b:76:3f:87:0b:07:ac:
         17:1e:5d:3d:b6:f3:52:c2:ea:bf:f0:44:19:f5:df:53:15:fb:
         3a:97:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:34:48 2025 by rpki-client