Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33322d3332203d3e20323636333735.roa
File:                     323830343a333664343a3a2f33322d3332203d3e20323636333735.roa (raw, json)
Hash identifier:          q2Vg1uVdG9aIkAxy5BRpUWWzuJVN248veI3N4i/v0Gw=
Subject key identifier:   09:6A:B2:3B:7D:EB:C7:6E:E0:6A:55:15:EB:08:66:0E:7F:ED:2B:43
Certificate issuer:       /CN=D6A90BECE8B023958D9E4927F946B5C29F86D4EA
Certificate serial:       5FB3A81989EBB7412ED765382852EC412F284BFD
Authority key identifier: D6:A9:0B:EC:E8:B0:23:95:8D:9E:49:27:F9:46:B5:C2:9F:86:D4:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33322d3332203d3e20323636333735.roa
Signing time:             Mon 07 Apr 2025 17:27:59 +0000
ROA not before:           Mon 07 Apr 2025 17:22:59 +0000
ROA not after:            Mon 06 Apr 2026 17:27:59 +0000
asID:                     266375
IP address blocks:        2804:36d4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b3:a8:19:89:eb:b7:41:2e:d7:65:38:28:52:ec:41:2f:28:4b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A90BECE8B023958D9E4927F946B5C29F86D4EA
        Validity
            Not Before: Apr  7 17:22:59 2025 GMT
            Not After : Apr  6 17:27:59 2026 GMT
        Subject: CN=096AB23B7DEBC76EE06A5515EB08660E7FED2B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:f9:a4:0d:28:cc:67:69:84:4d:5e:11:30:
                    dc:90:aa:25:e2:35:8b:b7:58:c0:31:4f:b9:6f:31:
                    64:b9:bb:51:20:0c:b7:55:bb:17:95:db:70:95:8a:
                    f1:6b:8e:c7:d5:2a:a2:48:82:28:84:4f:56:97:0e:
                    a5:ab:4e:c6:72:a3:fd:b5:85:3a:35:d2:a3:46:b9:
                    9c:62:36:87:cb:b1:33:5d:23:d5:82:79:ca:6d:33:
                    d0:6f:54:dc:d4:65:b3:b6:4c:c2:dd:bf:f3:7d:8b:
                    60:74:64:ea:73:21:96:df:e9:2a:33:fd:b8:78:9c:
                    fb:69:c0:f5:55:c5:ec:71:a2:bc:50:85:1c:40:b5:
                    10:a7:93:af:bd:31:dc:18:14:2f:13:45:17:67:36:
                    9b:a4:82:0a:9c:89:48:e2:43:21:c7:f7:79:d9:de:
                    93:ba:44:2f:35:07:09:7c:5e:c7:4a:19:a3:a1:2f:
                    d6:cf:8d:b1:1f:30:2d:f7:c2:b0:80:fb:77:86:21:
                    8c:1f:10:97:06:e8:77:2f:f5:ab:2d:3e:65:ac:a3:
                    d5:f8:8a:34:d3:ff:10:cd:29:0e:58:2e:bc:b4:1d:
                    9b:0b:6e:80:9c:bf:d1:76:1a:18:b6:61:89:2d:45:
                    e1:7a:64:bf:54:53:a9:25:d3:87:fc:77:7d:fe:30:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6A:B2:3B:7D:EB:C7:6E:E0:6A:55:15:EB:08:66:0E:7F:ED:2B:43
            X509v3 Authority Key Identifier:
                keyid:D6:A9:0B:EC:E8:B0:23:95:8D:9E:49:27:F9:46:B5:C2:9F:86:D4:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33322d3332203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:a0:9e:2e:40:12:ee:43:50:dc:2b:c4:f5:f8:dc:7b:5b:36:
         bd:58:bc:64:9c:ae:a4:f5:70:38:44:ec:e9:a1:d4:66:1e:d6:
         28:92:53:c8:69:92:8d:4d:4d:df:46:e4:4b:58:49:99:81:20:
         ff:32:d6:1b:30:72:ec:be:60:84:74:80:cd:0e:ae:86:8f:fc:
         ee:6c:45:c2:e1:38:6e:91:e2:bc:08:c7:0c:0a:e6:d2:37:a9:
         fa:3f:1f:73:d6:cf:c8:49:b7:1d:67:fd:5f:95:cd:27:af:6d:
         94:c1:bb:e2:17:b6:77:77:d7:f2:20:03:00:9e:57:52:f8:d6:
         40:dc:51:83:4d:22:bb:75:c8:b5:79:aa:5d:1b:83:4f:1b:a8:
         ed:c4:0f:51:64:00:19:55:a2:f6:e8:44:ae:09:3a:f2:bf:d9:
         13:0e:a6:00:b8:b3:8c:bb:43:5b:d5:6c:d4:ea:42:dc:51:22:
         87:af:2f:ee:25:72:15:b1:99:47:3f:ab:48:47:a6:f7:9c:3e:
         50:39:8e:d3:43:5d:1e:f9:fd:6f:4c:7a:2d:b1:00:07:cc:9a:
         e0:48:f6:ed:be:db:ed:c2:49:6a:4f:1a:c4:fd:dd:a6:68:63:
         9c:a4:12:08:c0:91:f0:de:fe:60:c1:e0:f8:91:e2:e6:30:f0:
         32:ed:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:06:21 2025 by rpki-client