Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a343030303a3a2f33342d3334203d3e20323730353936.roa
File:                     323830343a366536633a343030303a3a2f33342d3334203d3e20323730353936.roa (raw, json)
Hash identifier:          JwOLjuLSsxB3a2TWAmsNcP6NWW66cPKPHYebC1q7e8k=
Subject key identifier:   CC:93:57:EF:8F:67:69:8B:64:FC:D5:05:BD:67:B3:FA:3A:F4:62:02
Certificate issuer:       /CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
Certificate serial:       27AEB39BBE780D19FB3058BFC1EFBE235FBEFAEC
Authority key identifier: 87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a343030303a3a2f33342d3334203d3e20323730353936.roa
Signing time:             Wed 26 Mar 2025 14:53:00 +0000
ROA not before:           Wed 26 Mar 2025 14:48:00 +0000
ROA not after:            Wed 25 Mar 2026 14:53:00 +0000
asID:                     270596
IP address blocks:        2804:6e6c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl
                          rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 16:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ae:b3:9b:be:78:0d:19:fb:30:58:bf:c1:ef:be:23:5f:be:fa:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
        Validity
            Not Before: Mar 26 14:48:00 2025 GMT
            Not After : Mar 25 14:53:00 2026 GMT
        Subject: CN=CC9357EF8F67698B64FCD505BD67B3FA3AF46202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:a5:0f:cd:41:c7:62:36:52:17:62:01:93:
                    eb:21:2d:f8:68:bc:2f:6a:0e:61:b6:13:b6:ea:74:
                    af:51:04:08:c4:1a:d4:79:8a:5c:5d:e7:be:f4:be:
                    36:88:77:8a:40:d9:3a:4f:c1:e9:33:1d:db:18:f1:
                    1a:1e:13:e0:d0:5b:1f:58:17:3c:bb:cb:bf:1e:fd:
                    e3:73:a1:e7:83:5e:7b:f4:f9:5c:f4:4b:71:80:a0:
                    d8:79:9e:11:71:00:da:71:9b:ff:38:48:ab:e8:b9:
                    50:4c:82:2f:14:cc:bf:88:40:af:e6:ac:10:ba:8d:
                    1c:71:17:26:7b:88:0b:ef:39:19:c2:e5:e4:ba:31:
                    34:0e:43:90:f1:c5:53:cd:1b:d5:59:e9:2d:0a:8e:
                    ff:fe:3b:54:71:3e:fe:fb:b3:29:8e:7a:98:29:4f:
                    cc:44:87:72:38:72:a0:95:dd:e7:d1:34:c4:dd:34:
                    38:9c:ed:e6:98:d1:1f:89:7f:42:6c:3b:a9:8e:72:
                    42:5b:bd:d9:b5:8a:7f:d3:ef:2d:bb:9c:61:28:60:
                    39:f5:36:77:76:39:9b:92:d1:c9:a9:44:87:28:40:
                    e1:df:2b:e5:d4:06:ab:ea:c0:d8:b2:4b:da:09:69:
                    db:a4:00:f4:bf:ff:ce:48:24:14:28:a6:1a:ee:f4:
                    1f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:93:57:EF:8F:67:69:8B:64:FC:D5:05:BD:67:B3:FA:3A:F4:62:02
            X509v3 Authority Key Identifier:
                keyid:87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a343030303a3a2f33342d3334203d3e20323730353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e6c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         37:ea:9e:6d:ea:59:20:59:e4:73:08:a1:4d:56:f6:67:64:2f:
         84:5a:9f:14:25:df:82:22:ba:1b:87:e8:03:ba:cd:2a:93:2c:
         d1:c0:74:2f:2d:16:94:fe:a4:26:50:e4:f1:56:c1:7e:58:41:
         bc:b1:da:8a:fa:97:38:6a:1b:22:c6:06:3e:d6:62:df:dd:12:
         45:ff:6a:b9:74:08:ce:c0:42:33:ac:45:fa:17:8c:25:7d:58:
         35:71:b2:6e:b0:cf:77:d4:43:35:09:03:f5:31:0c:fe:e3:93:
         e7:52:8e:3e:03:71:e6:68:11:81:8d:2b:8b:af:c2:b9:e0:ea:
         9b:4c:0a:b8:67:88:f2:4b:c7:07:40:28:b7:81:9e:09:fe:d0:
         bf:0a:96:e9:20:57:4c:a6:f9:56:81:ff:f7:8b:ba:fe:41:0b:
         91:6a:95:ac:aa:1d:94:88:9b:00:99:e6:3d:35:52:c5:43:30:
         11:6f:24:70:52:5a:c3:3f:fe:48:51:ba:c9:11:d9:86:a3:73:
         f9:04:aa:cf:16:c8:01:36:ba:aa:a1:f7:8e:cd:60:fc:b5:d6:
         b3:13:09:64:da:e8:aa:3e:d7:89:5e:c8:ef:b6:7e:03:5e:f7:
         76:95:7c:25:88:8e:a1:23:53:24:44:85:ae:ca:08:27:d7:79:
         25:07:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:17:12 2025 by rpki-client