Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/323830343a313037383a3a2f33322d3438203d3e20323633363337.roa
File:                     323830343a313037383a3a2f33322d3438203d3e20323633363337.roa (raw, json)
Hash identifier:          pnA4EY4cZRZHr1HGs47OrlTauoLkLvVXo0+ljA9CmCw=
Subject key identifier:   F5:B6:A4:0C:BD:FF:64:9E:06:D5:22:1C:84:15:83:25:9E:69:67:2C
Certificate issuer:       /CN=783CF2D02131A21E333113BEEE878BC38B6104B6
Certificate serial:       66B098C72CEB2A57498E94269BB99A9CB17FDDAB
Authority key identifier: 78:3C:F2:D0:21:31:A2:1E:33:31:13:BE:EE:87:8B:C3:8B:61:04:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/323830343a313037383a3a2f33322d3438203d3e20323633363337.roa
Signing time:             Fri 09 May 2025 13:25:54 +0000
ROA not before:           Fri 09 May 2025 13:20:54 +0000
ROA not after:            Fri 08 May 2026 13:25:54 +0000
asID:                     263637
IP address blocks:        2804:1078::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl
                          rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 19:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b0:98:c7:2c:eb:2a:57:49:8e:94:26:9b:b9:9a:9c:b1:7f:dd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783CF2D02131A21E333113BEEE878BC38B6104B6
        Validity
            Not Before: May  9 13:20:54 2025 GMT
            Not After : May  8 13:25:54 2026 GMT
        Subject: CN=F5B6A40CBDFF649E06D5221C841583259E69672C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:dd:5b:0c:9f:b5:19:36:ec:68:78:a0:a4:
                    c4:a1:82:65:5e:d2:62:d3:49:2b:78:90:40:79:be:
                    63:0a:8f:c3:db:08:b7:0a:65:13:2f:bd:2b:18:72:
                    36:a1:51:b0:24:84:3d:8a:fb:9a:50:f4:9e:ee:4a:
                    10:78:7f:24:64:d9:31:44:80:3f:50:b9:85:66:5b:
                    04:c3:08:46:35:a5:e8:f0:e5:24:b6:b7:d3:3d:91:
                    3a:48:78:81:13:fd:c3:68:5e:8d:ff:ef:fc:0e:de:
                    00:ea:9d:64:a4:f5:b5:fb:99:ac:66:60:75:01:07:
                    9b:8f:88:e9:84:d3:1d:31:72:58:46:6c:b3:93:33:
                    71:50:84:d1:73:50:46:5e:5d:fc:b4:72:60:60:9a:
                    4c:16:f4:7b:1b:ba:b9:4b:b2:3c:63:cf:f0:77:af:
                    ce:77:7f:37:61:b4:e0:a6:bf:d7:9c:03:5b:39:78:
                    6d:ad:e0:a4:6a:24:83:7e:2e:53:66:f7:2d:0a:26:
                    d7:dd:0f:05:08:5a:b3:25:03:de:2b:1b:2f:54:b1:
                    3e:63:95:b6:fa:13:63:ac:22:cf:96:35:ad:bb:3d:
                    5b:c5:bc:b5:4c:cc:08:0e:f8:ca:16:84:cf:30:65:
                    d4:9f:70:08:8f:a8:a9:53:4c:03:47:04:41:17:91:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B6:A4:0C:BD:FF:64:9E:06:D5:22:1C:84:15:83:25:9E:69:67:2C
            X509v3 Authority Key Identifier:
                keyid:78:3C:F2:D0:21:31:A2:1E:33:31:13:BE:EE:87:8B:C3:8B:61:04:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/323830343a313037383a3a2f33322d3438203d3e20323633363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1078::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:94:9f:59:65:1c:04:71:dd:00:2e:f2:22:0a:04:db:81:51:
         c1:58:34:09:0a:cd:3f:ff:c5:73:fa:5c:81:23:c6:38:2b:04:
         13:fd:e4:b4:53:55:36:53:6d:cb:33:a6:a2:64:8c:8a:1c:17:
         dd:97:fc:da:81:23:41:e7:46:0f:6d:97:c0:01:7d:07:55:58:
         02:1c:2c:9f:65:0f:c1:68:c1:1e:b1:3d:0a:71:3e:cc:5f:a8:
         0e:61:74:db:47:40:c1:14:58:34:c8:47:09:51:a2:59:6e:1b:
         da:04:a0:37:88:5f:d3:bb:7c:80:5d:90:1a:d7:ed:92:33:06:
         f2:1d:c7:55:35:ea:9b:07:15:82:45:39:9a:7d:1e:d1:88:45:
         50:91:01:0f:69:e4:df:6c:88:48:67:6c:88:f2:01:b6:ef:c0:
         1d:10:21:08:89:18:4d:b8:60:ba:0d:79:6a:61:2e:49:8d:ee:
         f0:1c:92:04:90:19:39:df:c8:cf:b6:0a:a7:4e:65:0a:52:7f:
         1d:3b:99:e1:d4:db:b4:d0:b3:f6:c2:3d:93:5d:63:68:4c:6a:
         f9:8e:92:6c:34:6a:7e:31:12:ac:99:3a:d5:98:af:a9:1f:65:
         11:86:c0:18:ef:9f:98:c3:12:d4:1c:42:32:f2:7f:b9:2d:fd:
         8d:ed:f7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:22:20 2025 by rpki-client