Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a3a2f33342d3334203d3e20323730353936.roa
File:                     323830343a366536633a3a2f33342d3334203d3e20323730353936.roa (raw, json)
Hash identifier:          rKg+11xIffKFmScPvhpBDJaMi5KqAbpvDoOY/VNRUkc=
Subject key identifier:   CF:91:80:4D:2B:94:EA:6C:4B:B0:8C:CE:96:D1:5F:95:A8:22:C5:80
Certificate issuer:       /CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
Certificate serial:       53A9B7F98BFA1C4EF797B9DCA44A3815BC0A9079
Authority key identifier: 87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a3a2f33342d3334203d3e20323730353936.roa
Signing time:             Wed 26 Mar 2025 14:53:00 +0000
ROA not before:           Wed 26 Mar 2025 14:48:00 +0000
ROA not after:            Wed 25 Mar 2026 14:53:00 +0000
asID:                     270596
IP address blocks:        2804:6e6c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl
                          rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 16:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a9:b7:f9:8b:fa:1c:4e:f7:97:b9:dc:a4:4a:38:15:bc:0a:90:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
        Validity
            Not Before: Mar 26 14:48:00 2025 GMT
            Not After : Mar 25 14:53:00 2026 GMT
        Subject: CN=CF91804D2B94EA6C4BB08CCE96D15F95A822C580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:db:b9:57:3f:4e:30:26:9d:20:af:33:ab:
                    6e:29:44:01:02:3e:e5:b3:ba:05:1d:e0:a5:66:95:
                    16:0e:a0:2e:bc:2d:ba:56:24:55:e8:c2:c4:5c:91:
                    1d:db:df:8b:c5:9b:ea:83:f4:9c:72:f5:b8:59:1c:
                    7d:77:ab:89:49:91:6d:ec:be:dc:9d:9c:f7:56:05:
                    10:b3:e5:24:1b:b7:eb:ef:49:ae:21:66:c5:94:dc:
                    79:fe:75:b5:cc:e6:aa:cc:00:f3:fd:77:c1:74:5e:
                    22:7a:e8:ca:16:2a:bf:4e:21:58:00:7c:b8:1b:a0:
                    13:1e:ba:3b:51:1d:47:ad:2e:3f:c7:e2:8d:70:d7:
                    f8:80:e3:66:d9:0f:c4:3e:59:92:f2:fa:84:c9:a1:
                    bc:e7:91:2f:91:cc:52:e4:74:09:f6:3f:b8:c4:8e:
                    0e:8f:65:b7:fb:45:c2:d6:4f:52:0d:f6:2a:43:0f:
                    3e:1d:2d:80:5b:11:b5:cd:b3:3c:d3:ec:1e:db:39:
                    cf:d4:92:f0:3f:0b:1a:c4:b9:51:83:76:0b:e0:34:
                    2e:19:3d:f5:11:fe:d7:d2:a5:20:46:a4:c9:8c:f5:
                    43:af:af:9c:cb:19:1d:73:f4:03:a4:fe:8d:96:e7:
                    47:13:3b:46:46:cf:25:57:4a:81:45:91:4a:b1:96:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:91:80:4D:2B:94:EA:6C:4B:B0:8C:CE:96:D1:5F:95:A8:22:C5:80
            X509v3 Authority Key Identifier:
                keyid:87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a3a2f33342d3334203d3e20323730353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e6c::/34

    Signature Algorithm: sha256WithRSAEncryption
         13:46:f2:74:56:81:a7:6f:47:cd:e2:ea:be:b2:69:ab:82:b8:
         6f:ee:30:41:ae:f6:66:2a:3c:1d:a7:53:8d:a6:0c:9f:40:4b:
         1b:92:44:38:4f:30:d3:54:d7:5f:36:77:2f:43:68:a9:2e:67:
         ce:5c:74:24:fc:04:9f:b5:12:55:25:29:d6:c0:13:65:21:f2:
         a9:c6:f9:7b:48:b2:5d:7c:a2:2c:a3:af:5a:a0:ef:df:1b:29:
         b2:1e:59:9d:32:d8:12:5c:5a:c9:a0:2b:13:41:72:ac:e9:3c:
         24:b8:ea:68:80:4b:3f:e4:16:be:c2:47:57:36:8b:41:ed:a9:
         69:60:de:ba:ce:ef:59:ab:db:a3:ef:e9:db:c6:c1:ba:4f:55:
         a8:01:40:e8:ba:bf:ed:b9:d0:48:91:0e:b9:da:8e:e1:c0:cc:
         1c:02:3e:b4:ab:cf:a7:d7:d5:e0:34:7f:a3:73:60:2a:9a:f7:
         a0:df:5e:de:28:9d:cd:50:06:66:34:c9:a3:dc:ca:aa:3c:a2:
         a8:80:71:f8:52:ba:6b:c9:0a:30:5e:fd:4e:3b:da:13:f1:a2:
         8c:fe:a0:79:9b:0a:07:14:97:fd:da:a8:7f:c3:dc:2e:db:f6:
         25:12:8f:35:8f:fc:de:73:2c:21:e0:e7:46:83:f6:a7:50:d3:
         da:0c:fc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:15:41 2025 by rpki-client