Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a3a2f33332d3333203d3e20323637303335.roa
File:                     323830343a343732383a3a2f33332d3333203d3e20323637303335.roa (raw, json)
Hash identifier:          VvYK6T86WnVsB82HBv2KLx1uLL+/Wn7d+Vumg2BRJ7U=
Subject key identifier:   D6:08:20:58:93:33:34:65:F0:1E:F2:3E:BC:57:0A:DF:B4:B1:83:F5
Certificate issuer:       /CN=83846E182B5864F5550CA4AE8052E6D6E1F3AC6C
Certificate serial:       175F95BCB198E4235DB26F8D0014B82691762272
Authority key identifier: 83:84:6E:18:2B:58:64:F5:55:0C:A4:AE:80:52:E6:D6:E1:F3:AC:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a3a2f33332d3333203d3e20323637303335.roa
Signing time:             Tue 03 Jun 2025 17:27:18 +0000
ROA not before:           Tue 03 Jun 2025 17:22:18 +0000
ROA not after:            Tue 02 Jun 2026 17:27:18 +0000
asID:                     267035
IP address blocks:        2804:4728::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.crl
                          rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5f:95:bc:b1:98:e4:23:5d:b2:6f:8d:00:14:b8:26:91:76:22:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83846E182B5864F5550CA4AE8052E6D6E1F3AC6C
        Validity
            Not Before: Jun  3 17:22:18 2025 GMT
            Not After : Jun  2 17:27:18 2026 GMT
        Subject: CN=D608205893333465F01EF23EBC570ADFB4B183F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:75:30:00:02:37:e9:f1:cb:7d:8c:06:1c:33:
                    1d:c2:f1:a0:d2:44:f1:35:70:01:3a:dc:f1:5d:d6:
                    16:db:49:5f:37:3d:4d:24:eb:97:b4:9b:5c:97:47:
                    bb:f9:18:24:f3:90:6e:ca:2d:18:20:cf:cf:ca:5a:
                    42:30:31:3d:0f:0c:3d:ba:4f:4e:14:f5:8d:dc:bd:
                    6a:07:66:20:48:6f:41:48:b6:71:30:a6:cc:1a:14:
                    55:b7:77:92:76:63:ad:e5:82:39:b4:21:95:d0:0a:
                    e6:ba:bb:0b:ba:28:df:08:1a:7a:00:0d:a5:d7:60:
                    3a:67:8e:d9:0a:3a:3f:db:b0:db:bf:05:03:8f:2c:
                    aa:71:5c:58:05:76:43:4a:3a:9e:69:d6:da:13:a6:
                    0d:c1:34:8c:e6:e2:5a:17:9e:05:73:7d:32:7e:e0:
                    e5:1e:7b:bf:a5:25:91:a0:68:8c:1b:f9:ef:26:56:
                    e1:e0:36:02:f8:84:12:9c:31:13:bc:65:ac:ed:72:
                    3c:7a:3e:f3:6b:7f:32:c7:80:4b:d5:f5:69:a9:d5:
                    59:40:8f:40:07:2e:d1:de:16:2a:18:ad:39:d4:1e:
                    84:95:42:5e:bf:d9:f5:99:5b:49:7b:d2:7a:0a:78:
                    2a:df:27:5e:71:e3:7b:ed:0f:3b:b7:7c:ab:18:23:
                    bf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:08:20:58:93:33:34:65:F0:1E:F2:3E:BC:57:0A:DF:B4:B1:83:F5
            X509v3 Authority Key Identifier:
                keyid:83:84:6E:18:2B:58:64:F5:55:0C:A4:AE:80:52:E6:D6:E1:F3:AC:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a3a2f33332d3333203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4728::/33

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:8a:37:b5:f1:93:e2:00:6c:65:8a:ba:a9:ce:ee:43:89:
         71:d6:c3:d2:5f:2e:8e:18:a1:a7:09:ac:17:96:79:43:82:d3:
         82:90:ad:80:fd:e1:ef:8b:fe:b6:7b:e0:c6:a6:fb:37:26:1f:
         79:ad:a1:b8:52:6d:69:a7:bb:1e:80:65:3a:c9:e9:24:75:10:
         77:0a:d2:05:5f:da:cd:7f:d7:74:8d:5d:e0:eb:71:ff:35:c7:
         83:7f:3e:77:9e:09:91:ab:58:4c:ca:5f:b0:eb:7e:0a:3e:15:
         e1:61:fb:d7:5f:ad:e8:88:ce:95:27:58:6e:79:5c:99:1f:41:
         04:22:6d:7b:4d:8e:b8:f6:da:88:ed:cf:1a:4a:50:3b:1e:ba:
         62:94:27:7d:6a:36:46:bd:46:a1:0c:7f:8f:d5:ae:73:88:fd:
         1f:ff:d7:5f:a3:2b:ea:e9:db:74:27:bb:a2:ae:fd:33:90:71:
         b3:cd:97:79:14:52:61:3c:7e:6e:2b:98:f6:11:75:97:74:dd:
         fc:c9:89:48:4c:3d:35:6d:a1:fb:13:1d:aa:87:88:36:65:d4:
         e4:20:33:0b:34:59:bc:73:ca:ee:14:4f:70:4b:1a:b1:73:13:
         b8:29:91:00:48:58:1d:cd:72:49:d7:5a:0c:16:fd:67:66:d0:
         54:64:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:39 2025 by rpki-client