Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/323830343a316361633a343030303a3a2f33342d313238203d3e203631363638.roa
File:                     323830343a316361633a343030303a3a2f33342d313238203d3e203631363638.roa (raw, json)
Hash identifier:          pgf0Hd3BnYtWmi5YE5O3W5VQtKLncunFz267eYaViOE=
Subject key identifier:   0E:24:DB:6C:82:E6:D5:97:6E:75:79:FC:DF:B2:22:E6:92:89:8A:B9
Certificate issuer:       /CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
Certificate serial:       1E496C77B3F22099CF1AF10D17B8366346427921
Authority key identifier: B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/323830343a316361633a343030303a3a2f33342d313238203d3e203631363638.roa
Signing time:             Wed 30 Apr 2025 20:15:53 +0000
ROA not before:           Wed 30 Apr 2025 20:10:53 +0000
ROA not after:            Wed 29 Apr 2026 20:15:53 +0000
asID:                     61668
IP address blocks:        2804:1cac:4000::/34 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.crl
                          rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 07:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:49:6c:77:b3:f2:20:99:cf:1a:f1:0d:17:b8:36:63:46:42:79:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
        Validity
            Not Before: Apr 30 20:10:53 2025 GMT
            Not After : Apr 29 20:15:53 2026 GMT
        Subject: CN=0E24DB6C82E6D5976E7579FCDFB222E692898AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3d:a6:c2:f8:e2:dd:d8:c1:20:1d:9d:aa:af:
                    13:fb:c0:c6:31:59:8f:6e:4b:f5:2f:3e:b3:c8:43:
                    a2:dc:41:4a:16:75:bf:6e:21:33:12:cb:4c:90:f9:
                    77:2b:1c:e0:92:19:63:ee:f9:6c:88:9f:69:5b:cd:
                    3b:95:61:c5:20:1f:88:34:e5:dc:ba:33:df:cf:39:
                    5b:d2:91:90:d8:dc:3b:57:f0:1a:02:d3:19:a4:da:
                    01:60:8e:76:88:0b:6e:2b:dd:dc:f2:55:13:6b:4d:
                    fb:d9:f9:25:50:de:fb:5b:14:66:75:e8:2f:29:f2:
                    21:20:81:23:80:fe:1e:1b:33:1f:82:f1:51:e3:3f:
                    4a:83:f0:91:fb:4b:42:76:d3:55:00:be:b5:a6:81:
                    b6:35:c2:00:1e:06:45:ed:9b:25:59:cc:82:3a:3d:
                    f3:d2:ff:43:1e:ac:da:95:a9:83:f3:12:94:7a:48:
                    fb:cf:97:36:d1:f2:b3:13:a1:a8:3c:52:f5:a8:e5:
                    5a:12:b7:e9:ee:12:fd:b8:77:17:ac:d7:2f:63:83:
                    6e:6c:45:96:7a:06:34:c2:ee:b2:cf:6e:f1:c3:74:
                    de:72:db:e6:70:24:56:b1:1e:83:c7:16:73:8c:ab:
                    b5:d9:e6:1a:7c:20:0b:65:6c:9f:e3:fe:b0:e7:f6:
                    ae:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:24:DB:6C:82:E6:D5:97:6E:75:79:FC:DF:B2:22:E6:92:89:8A:B9
            X509v3 Authority Key Identifier:
                keyid:B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/323830343a316361633a343030303a3a2f33342d313238203d3e203631363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cac:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         23:e8:06:03:d0:51:90:58:0d:8d:12:f3:55:bc:f3:49:a0:87:
         09:1c:a8:dc:54:46:c1:89:09:37:18:97:ae:d6:e3:fe:6a:0d:
         e3:9b:d0:54:ee:1e:cf:a5:76:91:5e:f0:87:87:ed:4d:5d:33:
         05:87:31:cb:04:80:70:41:2b:ba:07:5b:b2:f0:01:44:de:a3:
         23:23:bb:5f:6b:80:62:2e:fc:df:db:59:56:32:40:4d:10:b8:
         ac:a9:5c:0a:87:ba:a6:19:31:39:32:d0:f1:6a:6c:49:0c:27:
         cd:b8:77:52:e9:d2:96:df:fa:c0:8f:d8:05:71:8a:44:55:19:
         b4:0d:24:10:18:f2:34:3b:e3:7e:ad:c8:7b:92:8d:12:6a:22:
         86:fb:f0:8a:6b:47:94:12:e0:d7:91:f4:7e:c4:a5:c7:30:d7:
         a7:19:39:b4:5c:67:58:8d:c1:43:cc:99:e4:92:2c:12:7d:21:
         46:e3:41:f6:4d:db:66:63:be:ce:95:5a:03:de:b6:46:d8:6e:
         64:04:4b:fd:20:35:6f:53:74:4a:28:46:91:97:13:8e:af:48:
         10:4b:b4:03:20:1b:e9:a0:26:9c:5f:98:67:a0:46:bc:09:4d:
         29:a7:48:2b:94:0e:35:0e:3f:a9:09:f6:22:2c:a9:46:13:17:
         2f:83:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:10:06 2025 by rpki-client