Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa
File:                     323830343a393261383a3a2f33342d3334203d3e20323734373236.roa (raw, json)
Hash identifier:          yJlj6AcjDjm4CzDN1wTUx82nyhR+7vokMiYCfoOGNN0=
Subject key identifier:   BB:9B:2B:07:C0:EE:2F:2E:CB:05:14:E9:E8:C2:FF:E2:55:FA:1D:95
Certificate issuer:       /CN=ADFB743F78B2F288155F57415C2B114473B48D92
Certificate serial:       7DB55905131839BEB80A9351C792B2A95999A95C
Authority key identifier: AD:FB:74:3F:78:B2:F2:88:15:5F:57:41:5C:2B:11:44:73:B4:8D:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADFB743F78B2F288155F57415C2B114473B48D92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa
Signing time:             Sat 14 Jun 2025 17:25:48 +0000
ROA not before:           Sat 14 Jun 2025 17:20:48 +0000
ROA not after:            Sat 13 Jun 2026 17:25:48 +0000
asID:                     274726
IP address blocks:        2804:92a8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/ADFB743F78B2F288155F57415C2B114473B48D92.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/ADFB743F78B2F288155F57415C2B114473B48D92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADFB743F78B2F288155F57415C2B114473B48D92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b5:59:05:13:18:39:be:b8:0a:93:51:c7:92:b2:a9:59:99:a9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFB743F78B2F288155F57415C2B114473B48D92
        Validity
            Not Before: Jun 14 17:20:48 2025 GMT
            Not After : Jun 13 17:25:48 2026 GMT
        Subject: CN=BB9B2B07C0EE2F2ECB0514E9E8C2FFE255FA1D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:85:88:5a:85:9b:1e:4b:9a:fe:06:5e:90:37:
                    3d:2d:65:72:94:b4:46:3d:80:a3:3d:c5:e1:55:44:
                    fe:eb:4e:78:50:6a:46:48:cd:7d:ba:79:ec:03:f6:
                    7c:67:f1:a2:9e:a0:61:4b:23:ca:48:85:25:f8:e8:
                    05:34:a9:6a:a1:8c:1f:28:45:19:8b:4a:10:ce:9e:
                    1c:46:e2:2e:4f:f5:17:d4:b6:90:00:bb:19:d3:be:
                    f4:90:21:7e:55:80:c2:eb:b8:3f:2d:62:af:ce:b7:
                    d5:d6:b8:80:40:89:c1:5c:85:a2:43:37:86:dc:31:
                    31:0e:7f:2c:6d:86:17:06:7c:e6:a7:c5:97:50:8c:
                    3f:ab:b3:40:75:22:12:67:32:ec:ce:83:93:e6:27:
                    c4:2f:f9:4c:73:89:73:90:8e:63:b0:49:2c:d0:37:
                    b3:4a:71:6e:6f:d4:9f:4c:c9:3c:ed:9e:f0:e4:c5:
                    6d:38:60:60:99:96:f7:69:e2:ac:96:a7:0a:8e:3f:
                    64:e4:5a:b5:e3:23:b7:a9:2b:80:8b:5c:43:18:b1:
                    b8:94:80:8f:31:d8:f7:b1:60:60:9d:bf:00:33:f8:
                    d4:7e:72:c8:c0:60:a8:b9:98:69:25:4f:77:b7:09:
                    36:5b:49:c7:91:e4:27:40:f8:73:76:9e:46:73:43:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9B:2B:07:C0:EE:2F:2E:CB:05:14:E9:E8:C2:FF:E2:55:FA:1D:95
            X509v3 Authority Key Identifier:
                keyid:AD:FB:74:3F:78:B2:F2:88:15:5F:57:41:5C:2B:11:44:73:B4:8D:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/ADFB743F78B2F288155F57415C2B114473B48D92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADFB743F78B2F288155F57415C2B114473B48D92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8::/34

    Signature Algorithm: sha256WithRSAEncryption
         9a:23:76:ff:b5:13:66:bd:b3:15:7e:5e:fa:2e:71:93:38:3f:
         24:82:34:1e:b9:7d:21:12:9a:42:be:fd:3e:2f:cb:88:98:10:
         f5:26:a3:77:80:f6:91:e1:ec:cb:03:ad:9c:d1:5d:de:51:d7:
         4c:b4:98:25:9e:a7:b8:00:ee:40:d2:8b:70:64:54:08:f0:ab:
         fb:a8:0a:e8:3e:15:5a:93:5d:06:2b:01:ee:24:49:c6:a5:45:
         eb:3c:12:01:ee:1e:54:cd:c6:e7:36:30:5a:81:98:44:af:97:
         66:d6:28:d4:e4:6e:f9:6f:4d:9d:91:39:bd:7b:1d:52:98:24:
         a6:9e:e1:a0:8e:a7:6a:81:fa:fc:79:b5:65:0b:f7:34:74:df:
         9e:35:49:87:cc:3f:92:07:2c:c6:47:05:fe:e3:7a:bd:a7:62:
         76:22:46:d9:53:73:06:14:9b:0c:a2:98:83:b0:b9:d8:fa:85:
         5f:2c:bd:82:69:2f:9c:00:12:e5:be:1f:0b:9a:0f:75:34:39:
         57:51:45:8d:51:96:41:bf:21:97:27:83:97:ca:fd:40:e4:73:
         48:7e:b9:be:0a:4f:27:e6:9d:e4:99:0f:af:03:60:b6:4e:d4:
         57:48:fa:90:32:55:15:20:7f:6a:53:60:3b:03:7a:79:ef:29:
         61:8d:54:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:34:45 2025 by rpki-client