Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a343030303a3a2f33342d3334203d3e20323636333638.roa
File:                     323830343a333662633a343030303a3a2f33342d3334203d3e20323636333638.roa (raw, json)
Hash identifier:          vogEBrOVHiRwnGV2lHaU3IVZUvrDTpTNDSXfA893RY4=
Subject key identifier:   B2:D1:EA:A5:F2:7E:E0:2E:CB:71:50:87:A0:CB:93:B8:3C:71:7A:7C
Certificate issuer:       /CN=536DE1C52594C50A13E5683BE9F9A3133E1884CE
Certificate serial:       173DD13009F69DCE53FEFAAADA5A97BBC08D2643
Authority key identifier: 53:6D:E1:C5:25:94:C5:0A:13:E5:68:3B:E9:F9:A3:13:3E:18:84:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a343030303a3a2f33342d3334203d3e20323636333638.roa
Signing time:             Sat 28 Jun 2025 19:03:41 +0000
ROA not before:           Sat 28 Jun 2025 18:58:41 +0000
ROA not after:            Sat 27 Jun 2026 19:03:41 +0000
asID:                     266368
IP address blocks:        2804:36bc:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.crl
                          rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3d:d1:30:09:f6:9d:ce:53:fe:fa:aa:da:5a:97:bb:c0:8d:26:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=536DE1C52594C50A13E5683BE9F9A3133E1884CE
        Validity
            Not Before: Jun 28 18:58:41 2025 GMT
            Not After : Jun 27 19:03:41 2026 GMT
        Subject: CN=B2D1EAA5F27EE02ECB715087A0CB93B83C717A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:a5:dd:82:bd:10:cc:76:8a:e0:72:bb:55:
                    c5:95:11:c8:75:98:d0:02:81:d0:5c:5d:a4:8b:c1:
                    55:12:b4:da:c6:8b:e1:e6:4c:42:b1:d4:2b:3f:38:
                    fa:c7:37:51:ef:26:0a:f8:7c:8d:f0:d2:82:40:8e:
                    11:48:9a:24:38:62:99:70:01:19:ad:b9:47:05:80:
                    87:36:9f:38:21:e9:18:a8:45:f4:cc:53:fc:c5:35:
                    81:f1:7c:c4:d9:f9:ff:7d:41:2c:05:29:4e:15:90:
                    c8:05:d7:cd:15:b6:2a:60:92:c6:4d:2c:59:18:28:
                    b4:2b:27:ab:24:e4:6f:55:b8:cb:9f:40:12:c4:3e:
                    1d:f5:1f:c9:83:52:19:ed:50:90:ef:10:04:1c:3c:
                    a6:88:6d:e3:72:c1:4c:ef:74:c5:25:47:ba:bb:b9:
                    70:f0:37:19:2f:91:7c:4c:12:4f:92:85:fa:a1:72:
                    c6:c4:af:6d:4e:c7:54:6a:e2:b8:9f:22:7e:bf:7e:
                    5f:93:89:a6:19:4f:22:cd:bb:36:3b:37:2f:28:e5:
                    95:3e:16:3c:e1:35:00:0c:36:41:3e:3f:65:96:78:
                    28:f8:70:ba:46:05:62:11:ac:d6:59:85:ad:1e:49:
                    72:bb:a0:92:bb:c1:f3:19:ff:54:29:1f:77:4b:dc:
                    55:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D1:EA:A5:F2:7E:E0:2E:CB:71:50:87:A0:CB:93:B8:3C:71:7A:7C
            X509v3 Authority Key Identifier:
                keyid:53:6D:E1:C5:25:94:C5:0A:13:E5:68:3B:E9:F9:A3:13:3E:18:84:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a343030303a3a2f33342d3334203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36bc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:5e:19:9f:5d:a0:b2:62:fe:00:31:d6:78:49:f3:77:1a:bb:
         f0:2d:7b:8d:58:0f:92:94:de:27:9e:2c:bf:16:01:71:b2:87:
         8c:3a:c3:38:a9:f9:94:50:7c:26:ab:7a:fd:b5:f5:99:19:33:
         63:96:2c:56:2d:21:7a:46:98:17:73:2f:0d:a2:95:aa:18:4c:
         55:ef:f4:62:7e:69:4e:3f:68:12:45:d1:9c:3f:9b:73:63:4c:
         6a:01:0c:f1:53:44:0e:19:ee:fb:01:bf:a1:f9:89:f4:a8:59:
         84:8b:ff:81:f7:dc:94:8d:dc:6f:ff:51:d5:60:9a:78:32:01:
         ba:c8:17:19:59:70:04:c2:87:49:e6:e2:92:d4:91:15:d4:7b:
         d0:57:59:f8:8b:7e:04:35:5f:b7:e2:d0:19:98:0f:37:94:06:
         ac:25:ad:3e:3a:97:90:e6:27:6c:0f:b9:1c:16:a7:98:0a:09:
         38:96:3d:6d:33:c7:b9:bb:19:b7:a7:59:7b:a4:c0:2a:cb:d5:
         d6:ff:35:d1:ab:d6:19:94:3a:25:a6:dd:6c:eb:7f:4d:e1:a3:
         05:0e:44:5e:79:a6:30:da:da:16:75:fe:ed:8f:3c:e3:1e:67:
         46:5d:37:6d:b9:9e:f5:bc:40:b2:da:88:c2:74:41:2d:a8:24:
         a5:68:75:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:54:00 2025 by rpki-client