Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/323830343a373839383a3a2f33322d3438203d3e20323731323533.roa
File:                     323830343a373839383a3a2f33322d3438203d3e20323731323533.roa (raw, json)
Hash identifier:          xW+fvQFNMFekLO82/E1nb9mF3MD5AQJ7vbCnI5uk25M=
Subject key identifier:   EA:6C:E5:66:2B:C1:17:2D:76:5D:2A:CC:52:29:F5:2F:DB:64:9F:BB
Certificate issuer:       /CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D
Certificate serial:       3C0C9E6C82D41C339FDC0A5510F486032BBE3CC7
Authority key identifier: CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/323830343a373839383a3a2f33322d3438203d3e20323731323533.roa
Signing time:             Thu 15 May 2025 13:09:25 +0000
ROA not before:           Thu 15 May 2025 13:04:25 +0000
ROA not after:            Thu 14 May 2026 13:09:25 +0000
asID:                     271253
IP address blocks:        2804:7898::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 05:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0c:9e:6c:82:d4:1c:33:9f:dc:0a:55:10:f4:86:03:2b:be:3c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D
        Validity
            Not Before: May 15 13:04:25 2025 GMT
            Not After : May 14 13:09:25 2026 GMT
        Subject: CN=EA6CE5662BC1172D765D2ACC5229F52FDB649FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:7c:60:30:63:1c:38:5a:7b:df:48:b8:16:
                    04:59:10:3f:db:4a:72:ca:ec:a2:f2:b3:79:26:08:
                    10:25:de:47:99:e3:21:c9:7d:a9:2f:d2:64:fe:f7:
                    3e:8d:4d:e5:36:0c:ec:13:d8:24:6d:b4:69:28:84:
                    8c:38:70:72:1b:3d:b2:69:36:1d:2f:eb:81:2d:46:
                    5b:91:26:b6:bf:9a:40:58:ae:64:1a:80:8b:56:3d:
                    85:54:95:87:1b:36:e5:50:3e:18:42:53:1f:62:af:
                    7e:49:83:ef:58:ff:e8:87:2f:1f:fd:b9:a2:c3:0d:
                    db:77:ae:4f:5b:15:eb:39:56:5d:bd:3c:15:5c:ed:
                    19:f0:54:33:76:9c:1f:fc:4c:92:74:cd:4b:36:ac:
                    49:bc:13:1f:29:f1:3b:e6:db:ba:40:39:3c:dc:9f:
                    25:1d:aa:58:74:44:1d:a4:ba:17:e2:4a:3c:8c:54:
                    96:5d:a0:51:37:e4:3b:81:a2:cd:ac:67:e2:4c:6b:
                    1f:a3:26:0b:cf:3c:bc:ff:6b:ad:7a:4b:ce:d4:dd:
                    e4:a1:ed:a9:74:8b:68:62:0e:38:13:4e:99:30:2b:
                    32:df:d5:b1:cb:78:5f:b8:e7:e5:24:51:9e:be:5a:
                    8f:4d:3b:17:77:6d:b5:a9:c2:e2:ef:97:7c:13:3e:
                    8c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6C:E5:66:2B:C1:17:2D:76:5D:2A:CC:52:29:F5:2F:DB:64:9F:BB
            X509v3 Authority Key Identifier:
                keyid:CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/323830343a373839383a3a2f33322d3438203d3e20323731323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7898::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:98:38:04:a2:0f:ba:5f:9c:27:05:8d:a2:b2:50:b2:05:ad:
         38:ad:b4:f8:89:f9:6a:e3:35:2e:54:82:6c:b4:a5:2a:ef:80:
         87:b2:32:d8:b1:84:fa:89:27:ba:ba:bf:aa:5c:b9:4b:f4:c0:
         39:5c:1a:c6:0e:72:7b:1e:5d:db:7a:51:00:13:37:ee:76:24:
         fa:4b:b6:08:b3:01:c2:36:28:8d:da:60:e0:16:00:b8:b8:7b:
         6c:58:aa:09:5c:3f:de:ef:30:7c:0d:53:60:97:ca:ff:d4:6d:
         a5:c4:87:72:e0:90:65:8e:4d:23:75:3f:d6:a5:27:a5:68:0a:
         08:d1:72:a2:99:ef:e4:b3:a4:bc:aa:fc:58:36:66:fa:2f:7d:
         ac:84:fd:7a:34:7e:d7:f2:70:34:a5:33:ce:7c:1f:3c:f1:f8:
         23:13:11:41:8a:ee:74:72:68:79:16:79:69:6b:ae:61:1b:cd:
         a1:f4:e5:68:64:4d:5f:85:07:25:95:9b:7f:07:a8:97:e3:21:
         ae:a3:5b:6f:8b:9f:c7:d3:e5:37:e2:a3:1c:48:95:49:06:d6:
         2a:af:a2:48:7a:6e:dc:61:b9:09:81:2d:1f:a2:78:bf:f3:2a:
         67:41:c3:39:41:00:b7:1f:37:e1:58:23:a9:5c:b5:17:a6:77:
         d6:e5:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:56 2025 by rpki-client