Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/323830343a373862633a3a2f33322d313238203d3e20323731323632.roa
File:                     323830343a373862633a3a2f33322d313238203d3e20323731323632.roa (raw, json)
Hash identifier:          W8hsSOKjJTpzYWQXdLpDwkH1spfBNRqGKdniteFHpVU=
Subject key identifier:   53:4C:24:F5:3C:1E:FB:2D:05:BD:89:B4:5A:3B:1E:FB:3D:5A:E9:68
Certificate issuer:       /CN=9E17AE12E54FEC7BF015C94EBD811062D85D7047
Certificate serial:       6A04BBBE2EBE86E74B0B589965FDCB5909D4FCEB
Authority key identifier: 9E:17:AE:12:E5:4F:EC:7B:F0:15:C9:4E:BD:81:10:62:D8:5D:70:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/323830343a373862633a3a2f33322d313238203d3e20323731323632.roa
Signing time:             Thu 12 Jun 2025 16:02:46 +0000
ROA not before:           Thu 12 Jun 2025 15:57:46 +0000
ROA not after:            Thu 11 Jun 2026 16:02:46 +0000
asID:                     271262
IP address blocks:        2804:78bc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl
                          rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 19:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:04:bb:be:2e:be:86:e7:4b:0b:58:99:65:fd:cb:59:09:d4:fc:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E17AE12E54FEC7BF015C94EBD811062D85D7047
        Validity
            Not Before: Jun 12 15:57:46 2025 GMT
            Not After : Jun 11 16:02:46 2026 GMT
        Subject: CN=534C24F53C1EFB2D05BD89B45A3B1EFB3D5AE968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:71:7a:03:46:70:59:c9:d5:c3:9b:3d:3e:
                    c3:f3:c9:aa:fa:f5:7d:d5:c0:95:50:dc:44:9e:a9:
                    d7:d3:7d:65:88:f9:d1:bb:fb:75:40:b4:e1:f0:9c:
                    6c:82:5f:fc:25:b1:3a:29:49:40:f9:f9:09:2c:40:
                    ec:61:8f:07:d3:01:9a:67:2d:e8:8c:8f:29:c2:92:
                    67:c8:13:86:b2:d9:46:55:df:d3:36:98:83:08:e3:
                    dc:ac:e5:a5:72:fc:97:aa:9e:cb:23:47:ad:fe:bd:
                    24:13:fc:61:88:05:b0:89:d3:65:c6:96:e3:db:09:
                    c2:c7:71:39:40:86:b4:28:82:e6:4d:9c:63:9d:8d:
                    50:9a:ca:f3:bd:fb:e3:e1:cf:41:f6:86:d7:5c:09:
                    6f:a3:97:ae:b1:11:06:fb:db:58:54:07:6a:e7:78:
                    d9:23:0c:b9:f2:79:5d:65:d7:37:72:8d:2e:b8:9f:
                    ab:5f:36:a6:dd:9a:3b:ee:c4:83:12:6d:b9:6f:56:
                    72:87:28:31:ea:f4:68:2a:34:6c:07:10:c2:8a:10:
                    98:f3:29:8f:8b:0e:43:3a:08:27:13:e2:69:ce:3e:
                    59:d6:e0:d4:91:d5:f3:be:90:08:8f:8c:38:83:11:
                    47:46:81:b7:7f:4d:d4:d6:60:9b:9b:04:17:85:a3:
                    4c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4C:24:F5:3C:1E:FB:2D:05:BD:89:B4:5A:3B:1E:FB:3D:5A:E9:68
            X509v3 Authority Key Identifier:
                keyid:9E:17:AE:12:E5:4F:EC:7B:F0:15:C9:4E:BD:81:10:62:D8:5D:70:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/323830343a373862633a3a2f33322d313238203d3e20323731323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:81:5b:e6:d6:d7:0d:b3:d5:ba:f1:70:03:1a:c2:a9:56:b3:
         ae:a2:ac:26:97:12:c7:65:e6:8e:a8:49:77:b0:b8:35:af:f8:
         c0:ec:09:1e:5b:4e:a2:72:02:40:45:3e:4d:20:b5:83:bc:ad:
         02:e1:fc:2d:0f:36:38:d0:5c:47:e5:da:ed:9d:01:3b:e1:0f:
         52:b1:fa:44:0a:a0:37:cc:76:77:c9:9f:5c:8e:ac:05:16:d4:
         03:47:b6:a1:89:9d:ec:49:87:d4:1c:ba:77:da:4e:cf:f1:1d:
         ab:60:bf:7c:c2:ae:c3:5f:cd:5f:cc:f4:78:12:1d:d9:c0:11:
         71:65:3b:a3:78:83:5b:b2:e1:b9:a8:60:a6:de:a4:57:9e:ed:
         f2:99:35:94:8d:c9:f4:12:c8:ae:d7:d4:be:76:54:3e:e3:5e:
         a1:46:5c:81:e3:c0:e8:ae:73:54:c2:7e:e4:60:42:2a:0b:3b:
         f6:15:5a:2b:77:8e:d2:c2:b5:74:7d:16:5f:d6:fc:d4:69:81:
         36:e3:05:16:bf:96:9a:9a:79:48:6f:e0:56:e8:af:03:7d:b7:
         bc:86:72:d4:f6:8f:d3:37:ec:a6:8a:34:6b:15:a4:51:6b:f0:
         a2:4c:aa:84:e5:49:72:ad:bf:46:9e:9e:73:a9:a5:db:58:67:
         97:0b:da:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:43:26 2025 by rpki-client