Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/323830343a346333383a3a2f33322d3335203d3e20323637333537.roa
File:                     323830343a346333383a3a2f33322d3335203d3e20323637333537.roa (raw, json)
Hash identifier:          a8sxQCBzW+i+vxO863Fu2eViMmKG0FVe3ECX2Uj5q94=
Subject key identifier:   A8:62:06:B9:8A:41:88:A4:2A:FF:84:91:56:88:20:4C:A8:F6:77:F2
Certificate issuer:       /CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
Certificate serial:       6D53DD0286E6C421717F1B1F7A129504594392E9
Authority key identifier: 17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/323830343a346333383a3a2f33322d3335203d3e20323637333537.roa
Signing time:             Thu 06 Mar 2025 08:33:13 +0000
ROA not before:           Thu 06 Mar 2025 08:28:13 +0000
ROA not after:            Thu 05 Mar 2026 08:33:13 +0000
asID:                     267357
IP address blocks:        2804:4c38::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 20:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:53:dd:02:86:e6:c4:21:71:7f:1b:1f:7a:12:95:04:59:43:92:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
        Validity
            Not Before: Mar  6 08:28:13 2025 GMT
            Not After : Mar  5 08:33:13 2026 GMT
        Subject: CN=A86206B98A4188A42AFF84915688204CA8F677F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:80:b3:77:55:84:85:da:2d:37:c3:9a:f6:
                    82:19:bc:5c:97:98:b3:6d:bc:d5:f6:e1:8d:8d:12:
                    70:0d:a2:1f:68:12:9d:92:1d:68:69:2b:cc:86:d5:
                    c8:2c:78:a0:fd:99:fa:5d:dd:59:a5:57:1f:06:58:
                    07:89:fd:a1:4e:aa:55:cf:ae:d8:46:e2:da:ea:0a:
                    db:a5:c8:93:54:cd:d9:c6:86:d0:3e:7c:b1:b2:7f:
                    cc:c6:2a:e1:5b:55:25:90:bb:a3:74:02:25:8f:2f:
                    c4:88:f1:6a:6a:a1:cd:21:29:f9:a2:18:0c:35:44:
                    17:c2:3d:b3:6e:9a:60:a4:e1:b0:d1:c5:fd:92:45:
                    6f:9a:c3:1b:27:f6:5d:59:17:0c:17:63:7a:b4:a2:
                    1a:d2:af:96:d2:54:a5:f3:27:44:25:34:99:b4:55:
                    6d:4f:b0:48:b6:29:53:f3:c2:fc:d5:07:7a:f2:c5:
                    3f:b4:1c:bf:d3:4a:f2:98:13:10:27:c6:9a:20:e1:
                    a4:e0:35:19:3c:11:59:56:88:be:06:ab:d7:1b:d5:
                    a3:4b:76:95:fc:1f:a2:8c:d7:44:49:4e:53:bc:2b:
                    ea:86:a9:f2:66:4f:23:9e:f0:28:1b:06:0b:36:c7:
                    10:df:08:b2:af:e9:d9:d1:0b:a9:70:16:a1:1a:a9:
                    8c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:62:06:B9:8A:41:88:A4:2A:FF:84:91:56:88:20:4C:A8:F6:77:F2
            X509v3 Authority Key Identifier:
                keyid:17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/323830343a346333383a3a2f33322d3335203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:8e:7b:12:c6:c9:75:b6:ca:78:1b:92:bd:ea:d3:79:23:35:
         92:f9:47:a1:28:48:4e:ed:8b:0b:80:de:4d:82:41:26:ce:28:
         91:d1:0b:0c:c9:6a:99:1e:0f:fb:fe:5e:2e:d4:d8:d1:6b:7e:
         55:1e:e5:ba:c4:61:af:dd:f2:2c:82:70:e3:31:68:a0:5a:68:
         dc:08:f2:10:77:74:98:a2:1a:b3:63:c7:9f:7a:e6:1d:4b:4e:
         83:b5:64:a1:d7:72:c8:07:f6:42:fa:a1:28:bc:50:34:28:f1:
         2a:95:b0:95:c3:12:9e:61:79:bd:d4:f6:2d:78:ed:75:2d:b7:
         de:be:d3:28:66:19:21:71:ce:67:b4:4c:7f:4a:b0:d4:aa:6d:
         4b:7e:ef:f8:12:b1:bb:f2:48:11:ed:6f:f7:b7:f5:0f:9b:ff:
         a1:cc:c0:04:2b:f8:d1:00:2b:d4:71:67:62:e6:06:43:39:51:
         7c:ce:bb:0c:1c:46:47:4f:83:06:31:2d:90:82:e1:9f:f8:9b:
         18:3c:9a:78:a2:c8:b6:8c:1f:5d:3c:84:aa:b4:7a:40:20:f6:
         bb:7f:32:b8:5b:40:db:58:a4:d9:f0:01:99:e8:61:79:4d:1f:
         eb:ed:b7:e5:5f:3b:00:bb:79:5e:b3:ff:23:33:8b:55:e0:99:
         a9:52:f2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:10:24 2025 by rpki-client