Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a3a2f33322d3332203d3e20323637303335.roa
File:                     323830343a343732383a3a2f33322d3332203d3e20323637303335.roa (raw, json)
Hash identifier:          UnXsxzPbl7ofvD9p449Hip9cyJsQW34FtGSZhV4Iczc=
Subject key identifier:   A9:54:3C:FC:82:37:63:F9:64:83:9E:09:9D:8C:30:54:2F:C8:4E:6B
Certificate issuer:       /CN=83846E182B5864F5550CA4AE8052E6D6E1F3AC6C
Certificate serial:       4DD203FE7704EAEF0A8AD6316AAB8D083C7E75C9
Authority key identifier: 83:84:6E:18:2B:58:64:F5:55:0C:A4:AE:80:52:E6:D6:E1:F3:AC:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a3a2f33322d3332203d3e20323637303335.roa
Signing time:             Tue 03 Jun 2025 17:27:18 +0000
ROA not before:           Tue 03 Jun 2025 17:22:18 +0000
ROA not after:            Tue 02 Jun 2026 17:27:18 +0000
asID:                     267035
IP address blocks:        2804:4728::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.crl
                          rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d2:03:fe:77:04:ea:ef:0a:8a:d6:31:6a:ab:8d:08:3c:7e:75:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83846E182B5864F5550CA4AE8052E6D6E1F3AC6C
        Validity
            Not Before: Jun  3 17:22:18 2025 GMT
            Not After : Jun  2 17:27:18 2026 GMT
        Subject: CN=A9543CFC823763F964839E099D8C30542FC84E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:b5:a4:6c:9f:f7:dc:9f:b5:12:2b:f9:8d:
                    b6:16:51:1d:fd:66:40:8c:79:76:6a:23:aa:7a:6c:
                    1b:15:89:0b:fc:dd:7a:ea:d0:b6:f6:64:78:cc:8d:
                    4f:c7:b7:45:30:7f:1b:ce:60:d5:66:44:97:d1:56:
                    5c:89:fd:f9:f6:0d:38:a2:cc:a1:90:46:61:57:89:
                    7f:0b:e2:4b:20:6e:be:fa:aa:08:e8:6b:ac:43:d5:
                    88:6c:6c:68:40:ce:0a:3d:b7:4b:d2:74:aa:0e:24:
                    2d:98:86:33:71:fc:ac:62:9a:ec:e9:70:3f:e3:af:
                    b7:25:8f:ad:79:bd:b9:c3:d7:bb:a1:d0:11:f2:8f:
                    fd:e4:51:7d:44:f3:68:93:f2:56:75:ba:30:c7:40:
                    65:47:d1:cc:f0:a3:d1:a2:8d:ab:89:a8:ce:bb:f1:
                    53:44:97:38:60:f5:5c:ad:02:a0:a4:4d:0f:15:6a:
                    c7:58:1a:92:9e:74:c2:35:94:3b:71:5d:e8:b9:01:
                    fa:2e:15:03:b5:d9:74:00:d2:ab:db:96:98:9c:cf:
                    86:c8:08:32:8a:f2:cf:f3:3e:51:cb:f9:8a:94:33:
                    1b:03:6b:bb:3d:2a:70:d8:8a:34:6c:16:d6:87:ab:
                    42:c4:31:91:4c:7f:3e:c5:d7:15:24:87:7a:79:ba:
                    c5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:54:3C:FC:82:37:63:F9:64:83:9E:09:9D:8C:30:54:2F:C8:4E:6B
            X509v3 Authority Key Identifier:
                keyid:83:84:6E:18:2B:58:64:F5:55:0C:A4:AE:80:52:E6:D6:E1:F3:AC:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a3a2f33322d3332203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4728::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:61:bd:d9:34:b4:a6:72:57:57:9c:06:2a:71:30:1f:ae:e4:
         78:f1:50:8d:af:8e:f3:d5:b9:0d:3d:54:45:4a:1e:ba:38:c5:
         b1:f6:78:d3:13:31:5a:9a:e4:34:07:9f:40:cf:c2:78:02:24:
         86:67:27:50:c6:01:c1:17:fc:38:a2:25:fe:e6:90:38:56:09:
         4b:c2:58:f0:94:2c:a7:b5:f7:e5:64:7c:cd:79:6e:f0:19:56:
         b9:a9:b4:1b:b8:04:3d:28:33:67:fd:24:36:1d:56:bd:29:ad:
         07:16:04:05:c4:90:a3:f0:4d:eb:e3:d2:02:34:fb:7a:8e:8b:
         24:52:b6:fd:ea:52:bc:56:ac:e8:38:a1:b2:e6:cb:1d:1b:99:
         62:ce:ad:8b:dd:7b:e0:19:d1:9c:4f:dc:43:4f:47:98:c8:c0:
         f7:fb:59:63:8d:f9:e8:b1:56:cb:0e:bc:a1:bf:c2:ce:bf:5e:
         8f:1c:38:90:67:08:4d:19:38:7d:23:d9:12:47:15:1f:8d:b4:
         b2:17:5a:cb:2a:aa:e7:c9:36:32:81:69:51:92:56:c8:59:40:
         38:fe:79:30:f4:a5:79:3e:80:c3:2c:b7:48:db:1e:e0:3c:30:
         09:20:3a:e2:7f:3d:36:53:79:e2:62:5b:98:d7:4f:53:1c:21:
         21:8f:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:56 2025 by rpki-client