Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a633030303a3a2f33342d3334203d3e20323730353936.roa
File:                     323830343a366536633a633030303a3a2f33342d3334203d3e20323730353936.roa (raw, json)
Hash identifier:          hbT3KO1slATpOD7WhhOWiYibPov3+gDShMjU7B4fe/8=
Subject key identifier:   75:70:2A:ED:4C:E3:40:A9:C5:05:EC:85:59:8C:E5:1A:41:43:68:FE
Certificate issuer:       /CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
Certificate serial:       28D5BF30FE600819C848A37C4F05249ADACA4097
Authority key identifier: 87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a633030303a3a2f33342d3334203d3e20323730353936.roa
Signing time:             Mon 14 Apr 2025 21:15:18 +0000
ROA not before:           Mon 14 Apr 2025 21:10:18 +0000
ROA not after:            Mon 13 Apr 2026 21:15:18 +0000
asID:                     270596
IP address blocks:        2804:6e6c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl
                          rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 01:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d5:bf:30:fe:60:08:19:c8:48:a3:7c:4f:05:24:9a:da:ca:40:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
        Validity
            Not Before: Apr 14 21:10:18 2025 GMT
            Not After : Apr 13 21:15:18 2026 GMT
        Subject: CN=75702AED4CE340A9C505EC85598CE51A414368FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7f:53:2f:52:08:9d:b9:f9:40:27:e4:70:14:
                    89:c9:21:6f:4f:1c:54:97:7a:ff:b2:a8:2e:5a:4e:
                    e5:b0:2b:d5:e6:52:7a:1e:58:60:35:13:6d:83:fa:
                    08:b4:27:76:23:aa:cb:cd:cb:04:ee:e4:53:00:73:
                    7d:b1:8f:82:72:a0:7a:6e:b2:5b:50:a7:ac:af:67:
                    9a:03:a0:28:23:92:b6:eb:d9:af:84:00:73:4e:00:
                    96:0e:5e:b9:5d:ae:e4:95:f2:ec:53:a0:1e:0b:81:
                    1d:5e:9a:95:05:b6:38:d9:79:cc:8c:25:c7:a9:06:
                    47:98:ab:35:82:bd:4f:7d:40:8b:65:5c:27:29:44:
                    32:f5:d6:c2:dc:c6:fe:6b:31:96:5f:53:71:21:b5:
                    e4:4d:ef:60:85:28:62:e7:c8:7e:5c:bf:21:f0:13:
                    4e:e8:90:52:24:ac:6e:d1:ea:60:c6:78:5d:25:16:
                    54:85:de:c8:d1:46:bf:e4:e4:6b:e8:71:21:b1:2c:
                    fb:2e:a1:d8:a3:af:fc:3c:00:ac:1e:e1:df:59:df:
                    35:2d:d7:44:58:b0:cc:d1:e8:11:7e:dd:25:95:53:
                    47:f0:aa:13:74:c2:86:ec:66:1a:51:61:2f:70:80:
                    20:88:47:a3:ae:05:81:d3:43:a9:93:06:6b:3a:18:
                    bd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:70:2A:ED:4C:E3:40:A9:C5:05:EC:85:59:8C:E5:1A:41:43:68:FE
            X509v3 Authority Key Identifier:
                keyid:87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a633030303a3a2f33342d3334203d3e20323730353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e6c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a7:a5:1f:5c:80:c9:6f:c0:df:f7:95:99:fc:e9:3f:16:ae:57:
         2c:66:72:32:c3:b3:d4:a1:ea:38:da:89:61:e9:c1:43:e0:28:
         1c:b0:9d:95:fd:2f:cb:56:79:c0:35:e0:b2:34:38:15:6f:2a:
         3e:d7:36:8e:c0:f7:3f:c2:0c:ee:ba:a6:1e:09:47:93:f7:58:
         06:f5:f3:b5:af:49:e3:25:6c:14:1d:c2:5e:ee:67:84:29:32:
         e1:74:6f:cb:4d:a8:01:f0:65:bd:67:43:f4:65:cd:9b:dd:69:
         32:8f:ed:6c:f2:ff:e5:77:72:89:e2:b9:54:39:b5:1b:3f:39:
         f4:84:c6:90:0a:3c:a7:1b:52:1a:ac:8b:93:d4:1b:20:b6:48:
         24:6c:e5:44:ea:21:44:27:0c:34:41:b3:86:5d:78:a2:09:8a:
         83:57:99:3a:29:e0:32:f7:0b:ea:5d:c6:86:c6:c4:a0:05:b5:
         87:ac:52:6e:9a:bd:f6:0b:0b:0d:a0:67:58:43:63:d2:33:0e:
         f1:9a:0c:bb:a6:65:7e:97:18:5d:ef:b1:f5:c8:88:66:9b:99:
         56:f6:81:e7:87:f6:ce:17:6c:80:ed:87:94:5a:ea:9a:d6:bb:
         12:a0:0c:46:79:dc:58:44:9d:3b:ee:14:26:f6:be:b6:b0:00:
         49:13:ef:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:00:57 2025 by rpki-client