Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a3a2f33322d3334203d3e20323635343531.roa
File:                     323830343a333435343a3a2f33322d3334203d3e20323635343531.roa (raw, json)
Hash identifier:          r3bCeQ3Va1xBObYctOhmI8el+yMJ561eA1zNaJrdc6A=
Subject key identifier:   75:B5:90:FC:2F:55:9F:C6:FD:4C:5E:13:A3:7E:27:56:17:FF:B3:33
Certificate issuer:       /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
Certificate serial:       60FDD3764754A57F982F7DE3B430B776BE7E1573
Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a3a2f33322d3334203d3e20323635343531.roa
Signing time:             Fri 23 May 2025 15:06:11 +0000
ROA not before:           Fri 23 May 2025 15:01:11 +0000
ROA not after:            Fri 22 May 2026 15:06:11 +0000
asID:                     265451
IP address blocks:        2804:3454::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl
                          rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 05:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fd:d3:76:47:54:a5:7f:98:2f:7d:e3:b4:30:b7:76:be:7e:15:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
        Validity
            Not Before: May 23 15:01:11 2025 GMT
            Not After : May 22 15:06:11 2026 GMT
        Subject: CN=75B590FC2F559FC6FD4C5E13A37E275617FFB333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:b0:83:7b:ab:2e:99:a6:31:9f:4c:c8:68:
                    48:ad:fc:b8:b7:de:ee:6e:0d:87:d7:6c:96:83:a9:
                    9c:1e:6e:fc:51:06:28:19:2a:95:4b:1c:dd:25:ab:
                    dd:3f:10:a5:97:29:42:5f:39:c2:7c:3c:7e:43:64:
                    3c:bf:ae:35:73:1b:5c:cb:a5:42:f3:17:93:21:0e:
                    bb:d1:cf:c1:3d:c0:58:ae:9f:42:19:37:67:3c:ad:
                    5e:47:3e:d0:21:16:1c:ea:8c:a6:30:49:b6:c3:9e:
                    91:4b:c0:42:ae:f1:ce:4a:75:4b:e9:f5:5b:e5:6c:
                    fb:53:41:2d:b0:e6:54:c7:0a:36:97:7e:66:b8:89:
                    da:e4:6f:c9:1b:cd:c6:be:4c:ff:d2:2e:5e:e1:9d:
                    3d:c5:ab:eb:eb:9d:a9:87:e5:88:4c:5d:2c:93:41:
                    54:3c:cd:62:cf:82:2c:c8:1f:2d:8a:99:e0:be:3a:
                    9b:54:84:ea:59:80:69:d6:71:8e:9e:7d:06:66:e4:
                    0b:62:1a:4c:0b:2d:31:2f:78:52:26:28:d6:f5:9b:
                    6d:52:cf:e8:1f:6c:cc:b9:97:bf:59:68:fa:69:97:
                    0b:04:d8:fb:d1:c3:10:34:cf:56:f0:17:4c:8f:c8:
                    81:f3:d0:1e:ee:09:b3:cf:1a:03:a0:20:b2:ba:37:
                    7c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B5:90:FC:2F:55:9F:C6:FD:4C:5E:13:A3:7E:27:56:17:FF:B3:33
            X509v3 Authority Key Identifier:
                keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a3a2f33322d3334203d3e20323635343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3454::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:6c:ab:96:8c:f2:78:8c:ff:ba:b6:f5:21:1f:c4:4a:5d:15:
         64:db:58:52:00:17:59:8c:f5:2e:a1:f7:36:bb:82:12:3f:9f:
         d0:1e:28:59:32:e6:96:d7:77:d8:09:3d:19:7a:4b:8c:e6:e1:
         12:26:dd:4d:91:ca:db:80:49:3b:66:81:a6:f9:55:5e:0a:8d:
         9b:1a:bd:c1:55:da:80:00:f3:59:b7:15:0d:2a:c5:9c:3d:6a:
         e3:76:a5:34:2c:9b:2c:12:8f:70:6a:50:ec:90:85:ac:4b:51:
         16:60:32:e4:e0:66:45:44:f5:68:fd:8b:8d:54:91:65:82:bc:
         3c:da:b6:a3:c4:23:62:f3:be:d7:0f:cd:46:4a:26:d8:0a:08:
         5e:76:f5:63:aa:9b:ca:bc:c0:cf:ff:65:99:81:4d:2e:3d:50:
         08:f7:67:99:29:ce:e7:2d:20:7c:79:b6:c0:4b:e1:c7:c0:0e:
         e5:14:21:43:4e:3d:e4:c7:7d:4f:a6:64:a9:fc:87:4e:33:94:
         ce:f0:89:1f:6c:00:d8:ad:ac:eb:a5:04:0d:30:3c:18:b8:55:
         4c:a7:5b:8a:e4:12:ab:32:3c:e6:0d:76:a6:1e:63:b3:f6:4b:
         fa:b5:78:a5:b9:1c:ad:b5:5d:f6:f8:d4:3c:b0:de:06:2c:f4:
         22:79:35:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:23:49 2025 by rpki-client