Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/323830343a386131383a3a2f33322d3332203d3e20323733363437.roa
File:                     323830343a386131383a3a2f33322d3332203d3e20323733363437.roa (raw, json)
Hash identifier:          /Oos3stdCxy+eYzQg8n8Cyi3e056pQIPQkmOoKRUahI=
Subject key identifier:   48:8C:02:48:1A:13:A1:08:DB:8C:15:20:45:11:B3:92:3C:12:AE:80
Certificate issuer:       /CN=94DB0A8D7CACDA66FC8602CC3C8CB4B8872F9183
Certificate serial:       35A21F483C02F25FE1200E61B2CFC008789D57F9
Authority key identifier: 94:DB:0A:8D:7C:AC:DA:66:FC:86:02:CC:3C:8C:B4:B8:87:2F:91:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94DB0A8D7CACDA66FC8602CC3C8CB4B8872F9183.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/323830343a386131383a3a2f33322d3332203d3e20323733363437.roa
Signing time:             Thu 15 May 2025 16:07:00 +0000
ROA not before:           Thu 15 May 2025 16:02:00 +0000
ROA not after:            Thu 14 May 2026 16:07:00 +0000
asID:                     273647
IP address blocks:        2804:8a18::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/94DB0A8D7CACDA66FC8602CC3C8CB4B8872F9183.crl
                          rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/94DB0A8D7CACDA66FC8602CC3C8CB4B8872F9183.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94DB0A8D7CACDA66FC8602CC3C8CB4B8872F9183.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a2:1f:48:3c:02:f2:5f:e1:20:0e:61:b2:cf:c0:08:78:9d:57:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94DB0A8D7CACDA66FC8602CC3C8CB4B8872F9183
        Validity
            Not Before: May 15 16:02:00 2025 GMT
            Not After : May 14 16:07:00 2026 GMT
        Subject: CN=488C02481A13A108DB8C15204511B3923C12AE80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:72:5a:fc:8d:3d:9a:fc:0f:83:d0:52:2b:
                    25:9b:88:e3:73:b4:5f:00:b4:a0:28:0e:6e:c2:4c:
                    4c:eb:d7:6e:07:3b:62:6d:5b:c2:d5:cd:83:c9:a6:
                    3c:a1:58:39:e6:79:ed:61:27:b3:c3:95:9b:b9:7e:
                    53:60:45:ab:8b:9f:df:f0:92:5b:b3:64:90:5b:80:
                    f0:b6:31:2e:b1:8c:7e:7c:02:f6:2f:93:05:c3:8b:
                    e0:cd:60:5c:af:94:f4:96:80:a2:42:dc:b8:fc:d4:
                    42:a3:1b:0a:41:cf:b4:cf:33:fd:65:9b:a5:4d:23:
                    67:18:00:91:e4:59:6a:af:db:5f:4b:cf:33:e2:08:
                    cb:18:1c:1a:6f:59:7d:f9:7d:5a:2a:65:f1:26:32:
                    dd:3a:d8:90:23:0a:16:36:39:81:d7:e2:10:e0:93:
                    80:84:50:d6:b3:59:43:c8:f4:ca:ae:bf:1d:c7:b6:
                    cb:65:98:62:ee:dc:8b:b3:69:e3:1f:62:4b:a3:59:
                    8c:30:e1:fe:35:61:b1:bc:4e:1d:d6:21:e2:88:4e:
                    b0:73:05:5a:d6:99:b2:53:72:50:71:5f:59:d1:ec:
                    b1:c1:6a:98:ba:a6:42:94:3c:b0:f0:bf:58:3d:ab:
                    06:ce:0f:98:3d:b7:d5:27:59:5e:cd:b6:5c:96:70:
                    98:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8C:02:48:1A:13:A1:08:DB:8C:15:20:45:11:B3:92:3C:12:AE:80
            X509v3 Authority Key Identifier:
                keyid:94:DB:0A:8D:7C:AC:DA:66:FC:86:02:CC:3C:8C:B4:B8:87:2F:91:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/94DB0A8D7CACDA66FC8602CC3C8CB4B8872F9183.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94DB0A8D7CACDA66FC8602CC3C8CB4B8872F9183.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/323830343a386131383a3a2f33322d3332203d3e20323733363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a18::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:0c:ca:f7:f5:0b:34:ac:71:47:43:4a:bb:0b:ac:79:04:b3:
         22:9f:d9:01:05:d4:3e:0f:7c:5b:73:a8:99:25:4a:39:a5:bf:
         a8:98:e0:b1:05:c3:4b:85:97:3c:44:3a:7e:7f:71:50:43:2d:
         6f:a7:24:22:d4:32:c1:80:e7:c3:b2:dd:36:03:9c:98:28:ea:
         f2:2e:57:21:ac:2f:24:a3:10:c3:73:c3:38:56:39:dd:a3:73:
         58:31:ab:73:5a:8d:b4:1c:63:03:12:e3:5f:a9:31:ce:b4:6d:
         f6:5b:26:e4:b1:30:52:5f:36:e8:8f:87:a4:fe:e2:c1:28:4e:
         e1:22:9e:7d:e9:97:04:6c:5f:a9:ad:e4:54:02:cc:02:91:d1:
         76:1e:af:dd:e6:2e:f5:66:5a:ea:ad:6e:0c:61:69:d7:9e:bc:
         00:93:4b:44:c6:42:f0:ea:76:c6:77:85:93:f5:96:75:fb:3e:
         d9:7a:d2:dd:68:e4:f1:c5:0a:32:5d:49:bf:95:be:8f:ca:3d:
         c8:ff:f3:a5:eb:94:e1:21:5d:26:5c:91:bc:93:8f:ee:52:4c:
         06:f8:b2:46:67:6f:9f:31:3e:cc:4d:69:90:72:1f:a0:b6:bd:
         1d:9c:77:a8:55:32:6a:0a:95:c0:18:c7:9c:6e:2a:4e:b1:52:
         76:28:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:59:58 2025 by rpki-client