Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/323830343a353363343a3a2f33322d313238203d3e20323638363035.roa
File:                     323830343a353363343a3a2f33322d313238203d3e20323638363035.roa (raw, json)
Hash identifier:          QrH4UgAYIsD8qfQhO6oUP8Rm2GCWZRVLlOdGgvB2hAM=
Subject key identifier:   90:6E:C9:6E:C0:15:ED:DD:04:F9:24:DA:84:CB:54:48:DC:01:49:A4
Certificate issuer:       /CN=55BE69C7855FAA300563BBE83751D75FA7BCCD8F
Certificate serial:       649C52CBDD898ED1B51BE9C232A379904904BB14
Authority key identifier: 55:BE:69:C7:85:5F:AA:30:05:63:BB:E8:37:51:D7:5F:A7:BC:CD:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55BE69C7855FAA300563BBE83751D75FA7BCCD8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/323830343a353363343a3a2f33322d313238203d3e20323638363035.roa
Signing time:             Mon 23 Jun 2025 14:20:33 +0000
ROA not before:           Mon 23 Jun 2025 14:15:33 +0000
ROA not after:            Mon 22 Jun 2026 14:20:33 +0000
asID:                     268605
IP address blocks:        2804:53c4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/55BE69C7855FAA300563BBE83751D75FA7BCCD8F.crl
                          rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/55BE69C7855FAA300563BBE83751D75FA7BCCD8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55BE69C7855FAA300563BBE83751D75FA7BCCD8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 07:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9c:52:cb:dd:89:8e:d1:b5:1b:e9:c2:32:a3:79:90:49:04:bb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55BE69C7855FAA300563BBE83751D75FA7BCCD8F
        Validity
            Not Before: Jun 23 14:15:33 2025 GMT
            Not After : Jun 22 14:20:33 2026 GMT
        Subject: CN=906EC96EC015EDDD04F924DA84CB5448DC0149A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:e4:07:c9:85:6e:51:43:64:52:34:82:48:
                    da:21:37:dc:0a:cb:f6:aa:54:6a:d0:44:d6:02:10:
                    d3:07:67:a1:41:7e:07:e5:e7:6d:84:d1:f3:e1:8e:
                    a7:e8:73:ce:c4:07:0f:e9:ac:dd:ff:4a:22:25:c7:
                    0c:6e:78:e3:92:cb:51:48:d1:26:5e:33:c4:03:47:
                    b4:e8:de:ed:0d:11:f4:07:0f:c7:f8:01:38:16:5b:
                    42:9f:ea:98:a8:86:48:66:7f:bf:33:03:fd:54:27:
                    f1:dc:6b:23:4a:52:3e:f0:52:7c:2d:05:07:8a:50:
                    71:c2:a6:b0:18:e0:9d:6f:5d:33:5b:23:49:f4:67:
                    72:1d:bb:f7:c1:20:6c:dc:5b:59:13:10:6c:d7:1e:
                    2e:c6:a7:c8:89:90:66:d8:ee:7f:8f:3d:d4:f3:97:
                    91:7e:fe:e0:0e:2f:d2:39:9b:28:54:2c:04:f5:7c:
                    d4:fb:82:af:b7:06:35:2f:27:38:b0:ce:29:35:e1:
                    42:04:37:28:2e:59:57:50:09:9e:2f:dc:3c:21:79:
                    4d:77:2d:e2:dc:d7:a4:80:25:a5:82:24:44:bc:97:
                    98:77:be:10:00:1b:e5:b2:93:e0:de:4c:c2:b2:a5:
                    e3:a0:81:3a:a8:44:4b:04:77:75:a5:1c:a9:6e:03:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6E:C9:6E:C0:15:ED:DD:04:F9:24:DA:84:CB:54:48:DC:01:49:A4
            X509v3 Authority Key Identifier:
                keyid:55:BE:69:C7:85:5F:AA:30:05:63:BB:E8:37:51:D7:5F:A7:BC:CD:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/55BE69C7855FAA300563BBE83751D75FA7BCCD8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55BE69C7855FAA300563BBE83751D75FA7BCCD8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/323830343a353363343a3a2f33322d313238203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:8c:82:ed:cb:cd:1e:4f:19:9a:36:32:64:f2:fe:99:e9:94:
         a8:35:63:8b:fe:5c:29:8b:c3:ec:b0:d1:94:fc:74:1c:9d:5d:
         ee:18:69:ca:a6:95:13:6f:1f:d4:14:1e:96:75:74:8a:32:f8:
         e7:25:cc:ec:8d:69:5d:6a:bf:72:bf:c3:e7:8a:70:69:2b:4d:
         5c:8d:77:33:ad:bd:ed:6f:d7:f7:6a:11:78:6e:a5:68:b0:a2:
         1e:fb:28:bd:cb:b7:e4:a6:8d:af:fb:ec:10:0e:b9:ba:1d:a8:
         82:82:34:91:d8:ff:c0:66:7e:72:2f:68:d9:72:6b:86:13:c7:
         bf:10:25:cb:bb:12:33:4c:25:45:be:6b:9b:d2:26:f1:bb:c4:
         2e:70:ff:08:8f:2e:81:9a:9c:53:a0:7c:bb:53:b8:fe:5b:e6:
         c9:80:98:17:07:61:67:69:ac:c9:5f:7d:48:e8:58:8d:2e:78:
         9c:3c:0d:61:4d:54:29:4e:36:9a:9e:a0:83:78:21:a5:98:49:
         28:8a:94:5c:91:f7:f8:e4:de:a8:57:4a:37:12:05:43:37:4d:
         17:10:b2:bf:3c:fd:c1:c9:ca:46:9c:5d:fa:1e:a7:8d:7b:c4:
         79:6c:84:cf:b7:11:45:e1:49:6a:6b:bb:0f:b9:2a:e1:f0:e0:
         67:31:ab:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:43:47 2025 by rpki-client