Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323030313a313238303a3a2f33322d3332203d3e203136363835.roa
File:                     323030313a313238303a3a2f33322d3332203d3e203136363835.roa (raw, json)
Hash identifier:          ldDTUwzwOQ62K4XB9c/MtLD8eisYr1F9q3wQD34FheE=
Subject key identifier:   15:C2:3E:91:A8:08:18:14:A4:D1:E0:36:2C:FE:E2:2D:D7:2B:CA:B9
Certificate issuer:       /CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
Certificate serial:       6B42ED11745956A4E999AA47166186203BBA33E2
Authority key identifier: 6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323030313a313238303a3a2f33322d3332203d3e203136363835.roa
Signing time:             Wed 26 Mar 2025 17:47:59 +0000
ROA not before:           Wed 26 Mar 2025 17:42:59 +0000
ROA not after:            Wed 25 Mar 2026 17:47:59 +0000
asID:                     16685
IP address blocks:        2001:1280::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl
                          rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 20:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:42:ed:11:74:59:56:a4:e9:99:aa:47:16:61:86:20:3b:ba:33:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
        Validity
            Not Before: Mar 26 17:42:59 2025 GMT
            Not After : Mar 25 17:47:59 2026 GMT
        Subject: CN=15C23E91A8081814A4D1E0362CFEE22DD72BCAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f6:b0:8b:3b:e1:3b:d2:76:4b:a4:9a:08:56:
                    e0:5e:bd:1e:a2:e8:a7:cf:29:46:ca:09:bd:4c:ff:
                    cc:55:e1:c8:4b:d6:d3:41:9d:67:9d:3d:5f:e0:dc:
                    90:31:7f:5e:f4:30:c1:53:ae:2d:8f:2a:1c:55:3c:
                    48:2d:0e:61:31:fb:44:a9:ce:6c:09:5c:40:f4:5d:
                    d9:25:0d:53:2b:d6:36:c1:c7:ea:29:3f:45:68:c9:
                    a1:68:05:1a:84:b2:11:d1:3a:66:4f:8b:22:46:01:
                    84:76:64:62:9a:d9:50:70:12:98:80:d5:7d:62:b5:
                    08:5a:30:11:5c:a8:7a:4d:8c:f6:42:52:12:df:6c:
                    9a:96:b8:32:4e:87:d6:39:b3:e9:d9:d7:75:42:85:
                    8a:b8:d7:79:56:c8:b5:e8:52:76:4b:34:bf:6a:cd:
                    51:c3:07:30:52:34:08:54:3f:d3:f0:d4:de:60:f4:
                    8c:ce:6b:12:3e:a9:bb:55:f8:4a:b4:ca:fb:db:e9:
                    94:7a:76:1e:1f:1b:39:91:58:17:49:ca:db:dd:0b:
                    81:3f:8c:fb:21:5d:cf:90:2f:86:b2:9f:d8:3e:bf:
                    56:46:71:11:ed:47:ac:f5:df:d0:cd:da:c4:7e:cd:
                    19:37:40:8f:6c:86:36:5f:c0:31:f9:6a:2e:20:2a:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C2:3E:91:A8:08:18:14:A4:D1:E0:36:2C:FE:E2:2D:D7:2B:CA:B9
            X509v3 Authority Key Identifier:
                keyid:6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323030313a313238303a3a2f33322d3332203d3e203136363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1280::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:76:72:36:2c:3b:7c:14:32:5a:4c:6c:b9:31:8b:7e:d3:26:
         ec:d9:84:c9:bd:bd:04:83:0e:b7:98:a3:78:c7:fa:33:c0:05:
         03:68:04:67:9f:14:3e:23:80:28:86:5c:e2:96:8d:16:ef:8c:
         a4:7f:22:af:bb:a7:d0:8d:5a:79:9c:43:8a:78:91:ac:4c:4c:
         da:7d:e2:2c:ca:b4:bf:07:01:b7:6a:ce:37:4e:42:a3:ff:0e:
         35:38:9a:71:43:a1:b0:4f:50:da:bf:c2:ed:ad:29:1c:1e:64:
         4f:77:a8:fd:d7:11:54:b6:03:f4:b4:3d:ec:89:37:d0:a9:7b:
         ed:29:75:51:ea:8a:e7:cf:89:59:30:60:5c:e2:bf:ff:d3:60:
         43:28:86:92:57:c8:47:c4:55:b3:5f:16:3e:ae:63:2c:a8:0f:
         7e:c8:63:7b:90:81:74:fe:19:f3:4c:46:5d:5d:38:d7:95:3d:
         ab:a2:c3:f4:cc:1d:86:0d:fe:49:ab:d2:e3:a3:e3:7c:b4:8b:
         b6:56:02:b0:d0:bd:57:b6:ed:6e:85:6b:85:bb:34:ec:30:c0:
         72:49:58:4e:16:58:43:1d:02:07:44:25:ee:7f:fc:9e:04:2b:
         d2:e5:e9:e9:1e:0d:5c:92:82:45:e9:78:56:3a:3a:cf:3b:2d:
         68:d9:07:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:01:37 2025 by rpki-client