Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/323830343a366663343a3a2f33322d3438203d3e20323730363833.roa
File:                     323830343a366663343a3a2f33322d3438203d3e20323730363833.roa (raw, json)
Hash identifier:          9XM9sCu/TTNlq6V0+SeS3wOQF44MqPp8oXHMdR1O5SQ=
Subject key identifier:   63:63:01:59:04:92:0A:50:12:26:DE:EC:C0:2C:98:5B:8C:D1:D4:26
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       1A9C39EA27B838368C3F12CD9944CA6104E3F15E
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/323830343a366663343a3a2f33322d3438203d3e20323730363833.roa
Signing time:             Thu 08 May 2025 13:20:37 +0000
ROA not before:           Thu 08 May 2025 13:15:37 +0000
ROA not after:            Thu 07 May 2026 13:20:37 +0000
asID:                     270683
IP address blocks:        2804:6fc4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
                          rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 00:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9c:39:ea:27:b8:38:36:8c:3f:12:cd:99:44:ca:61:04:e3:f1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: May  8 13:15:37 2025 GMT
            Not After : May  7 13:20:37 2026 GMT
        Subject: CN=6363015904920A501226DEECC02C985B8CD1D426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:23:ab:b0:ac:bf:ac:e8:9f:de:7c:89:1a:71:
                    30:d2:fe:ce:7a:7a:27:e6:ac:bb:e6:5b:ba:82:c4:
                    dd:51:94:56:df:58:c3:65:7f:85:20:82:aa:e1:68:
                    2e:ee:bf:84:1a:2c:be:ca:ec:e6:dd:4d:4a:10:44:
                    4c:b1:3f:a3:a4:c0:82:c0:97:b0:b2:a4:b3:a2:9c:
                    15:0f:5c:f4:9b:92:74:a4:c5:38:b7:6d:12:20:54:
                    f9:0e:18:22:5f:0f:0c:fa:fb:fb:3a:58:71:8f:d0:
                    dd:83:72:35:de:e5:74:80:f7:15:38:21:26:cf:de:
                    bc:c3:f7:f1:22:e4:03:ee:69:83:94:89:6e:55:fd:
                    2b:ba:60:fb:ef:14:c6:cd:37:ad:d3:b3:39:52:e4:
                    8f:65:76:53:4a:4b:d1:7a:c4:a0:58:70:98:f2:ce:
                    d8:95:a1:6e:25:0f:5d:63:4f:c7:cf:49:0f:f8:7f:
                    d5:e9:e0:72:5f:89:23:84:8a:b5:dd:5e:55:aa:ec:
                    be:61:59:f5:af:0a:e0:93:32:70:14:6c:8b:e3:22:
                    02:c9:ff:1f:e4:83:00:3f:65:f6:0c:5b:af:b5:9e:
                    be:3f:85:de:60:24:05:ea:31:4c:de:ee:ea:d0:b4:
                    db:e8:96:18:81:df:d4:47:be:00:d8:e4:14:ae:89:
                    13:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:63:01:59:04:92:0A:50:12:26:DE:EC:C0:2C:98:5B:8C:D1:D4:26
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/323830343a366663343a3a2f33322d3438203d3e20323730363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:7d:d7:3c:b9:90:47:18:c5:82:bf:7d:d8:cc:a0:91:d1:c8:
         5a:41:51:93:c2:b5:25:42:99:6d:1c:22:20:73:8a:b2:16:8c:
         96:01:4e:79:62:f0:52:37:bb:00:de:94:e6:8c:d6:00:2d:69:
         9c:e2:8a:b9:43:27:a3:2e:f8:85:09:95:69:d4:19:2f:8a:ef:
         09:e4:1b:fb:d0:b6:46:c2:03:df:04:cb:2c:0e:5c:c5:89:6c:
         1b:e8:d1:bf:32:23:40:d1:8f:b4:48:8e:dd:ac:11:c4:70:dc:
         56:d0:93:b6:0e:a8:ac:70:8d:02:1b:1e:82:2f:cc:f9:c7:c7:
         1d:d1:05:9f:6e:5a:dc:2b:4b:a4:42:24:c7:44:17:d2:b5:53:
         25:c9:fd:be:a5:af:a0:d6:2e:f3:a1:5c:dc:30:d0:14:5e:c8:
         1e:b9:90:4c:e5:a5:55:89:0f:73:ad:e1:43:a4:6b:c1:2e:f4:
         f7:f4:f7:af:57:63:d5:a9:3f:9b:33:67:81:96:69:56:ac:a3:
         06:65:66:a5:5f:f3:d6:d4:c9:ef:fe:44:c3:18:e6:64:38:62:
         a9:04:22:bb:73:2d:c2:8f:e7:90:d5:7b:7a:a4:a5:e8:d5:fe:
         b9:c6:16:45:60:aa:62:35:7b:ec:62:65:a8:b8:ee:e5:ca:24:
         5e:25:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:17:46 2025 by rpki-client