Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/323830343a366239343a383030303a3a2f33332d3333203d3e20323730343039.roa
File:                     323830343a366239343a383030303a3a2f33332d3333203d3e20323730343039.roa (raw, json)
Hash identifier:          ZjQ1HlcrLVu7rtt5VWeT29W9ewJwNvJB8gqEln45wbU=
Subject key identifier:   86:1C:A9:8B:F5:A5:8B:33:E7:8E:A5:33:E1:18:2F:B8:71:26:D3:0E
Certificate issuer:       /CN=11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4
Certificate serial:       5B58FD81AA6385719BBE7695A2A218F4E790482A
Authority key identifier: 11:FE:E7:71:12:2E:6B:8B:AB:9E:5B:C2:56:6A:C9:18:DC:99:FA:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/323830343a366239343a383030303a3a2f33332d3333203d3e20323730343039.roa
Signing time:             Mon 16 Jun 2025 17:06:57 +0000
ROA not before:           Mon 16 Jun 2025 17:01:57 +0000
ROA not after:            Mon 15 Jun 2026 17:06:57 +0000
asID:                     270409
IP address blocks:        2804:6b94:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.crl
                          rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 20:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:58:fd:81:aa:63:85:71:9b:be:76:95:a2:a2:18:f4:e7:90:48:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4
        Validity
            Not Before: Jun 16 17:01:57 2025 GMT
            Not After : Jun 15 17:06:57 2026 GMT
        Subject: CN=861CA98BF5A58B33E78EA533E1182FB87126D30E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:79:d1:73:56:83:21:12:d9:92:8a:83:73:
                    60:a3:f9:81:29:3b:9d:54:71:91:26:c7:52:55:96:
                    8d:03:f1:86:1f:a6:1e:2e:4f:91:91:11:a6:fb:9e:
                    c7:c3:78:00:6b:83:6f:8a:8c:39:c2:1c:8a:55:20:
                    00:7e:1b:d8:d6:af:d2:a7:ab:ab:8f:de:b4:e0:41:
                    96:55:2b:95:48:9a:b4:a5:e5:d1:09:7e:ab:d1:cc:
                    7c:0f:2c:83:72:62:cb:eb:fa:9b:8f:a3:15:f7:e4:
                    a4:b1:ba:23:64:18:97:95:4d:d3:b2:e4:4b:2c:12:
                    f5:7a:74:c6:87:f9:19:ab:00:14:28:70:19:ff:73:
                    9f:7c:bf:93:4c:6b:07:b1:05:7b:0e:17:5e:0b:c2:
                    ad:94:e2:f1:c7:6f:d4:43:a6:ac:f3:1f:61:1d:7d:
                    b3:1a:90:14:07:80:0a:93:73:55:d8:6d:4f:27:66:
                    2b:f7:7b:e1:db:a9:bf:c1:0d:75:2c:ef:9e:64:75:
                    51:16:ba:32:75:6c:ab:20:ed:fc:09:98:c7:75:d4:
                    a7:56:06:9e:f1:c1:cb:c7:20:d3:56:ca:5c:32:04:
                    b0:bd:10:74:df:9b:42:fc:67:e8:8b:4f:df:54:08:
                    14:4d:a7:ca:13:10:5f:ae:5f:c6:10:11:4b:b2:c4:
                    47:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1C:A9:8B:F5:A5:8B:33:E7:8E:A5:33:E1:18:2F:B8:71:26:D3:0E
            X509v3 Authority Key Identifier:
                keyid:11:FE:E7:71:12:2E:6B:8B:AB:9E:5B:C2:56:6A:C9:18:DC:99:FA:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/323830343a366239343a383030303a3a2f33332d3333203d3e20323730343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b94:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         25:53:10:35:9a:63:d1:e4:af:81:c5:2e:cd:29:65:f5:85:f1:
         3d:a4:1d:b3:13:a0:9f:96:eb:02:2f:d4:a0:c3:cf:4c:4a:05:
         44:68:b2:38:c0:f0:18:24:25:4d:31:28:d8:d5:b3:a3:19:5a:
         6d:b4:d5:dd:5a:91:43:d3:15:e8:1c:71:e5:5f:0a:22:70:c2:
         e5:b2:c3:ea:83:c1:24:1c:79:e7:43:b3:3a:12:0b:2d:73:99:
         b3:80:73:d6:4d:fc:ba:ed:e7:83:07:18:c0:a2:f9:e1:77:92:
         a8:57:77:44:9f:62:a3:24:31:36:95:57:53:f4:37:fa:71:25:
         92:23:26:dc:31:47:2d:24:00:96:e4:b2:80:b8:d9:33:96:cc:
         a8:a5:dc:51:04:d9:e6:cc:30:6c:6c:1c:71:f3:7d:c6:e2:e4:
         02:82:58:9b:4a:06:8d:d6:dd:d3:12:77:21:b2:ab:4d:ba:80:
         bb:19:df:5c:39:ee:84:a7:4d:d1:91:bd:a3:07:13:45:c3:63:
         30:31:39:84:47:57:5f:f6:14:8e:de:61:ec:43:71:cf:ee:61:
         d2:91:af:70:60:af:b0:30:d0:74:59:12:39:e6:13:8c:6b:3c:
         e0:33:77:d6:45:34:d1:4c:14:c8:04:98:bf:e0:42:60:c8:51:
         02:e7:6b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:30:44 2025 by rpki-client