Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a393030303a3a2f33362d3336203d3e20323633363038.roa
File:                     323830343a6664633a393030303a3a2f33362d3336203d3e20323633363038.roa (raw, json)
Hash identifier:          05VwKJDNHoB5yqkEryw9U49Xh148iYOWZJY5pAD1Yso=
Subject key identifier:   63:9E:B7:1B:5E:90:FF:0C:42:5D:35:B7:F8:63:4E:BA:47:C7:28:E8
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       0F6BCEBD8AEBFB00E4A3E5B6F2B9C503E13787FE
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a393030303a3a2f33362d3336203d3e20323633363038.roa
Signing time:             Tue 06 May 2025 20:14:35 +0000
ROA not before:           Tue 06 May 2025 20:09:35 +0000
ROA not after:            Tue 05 May 2026 20:14:35 +0000
asID:                     263608
IP address blocks:        2804:fdc:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
                          rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 14:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6b:ce:bd:8a:eb:fb:00:e4:a3:e5:b6:f2:b9:c5:03:e1:37:87:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: May  6 20:09:35 2025 GMT
            Not After : May  5 20:14:35 2026 GMT
        Subject: CN=639EB71B5E90FF0C425D35B7F8634EBA47C728E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:50:e7:65:4e:e4:23:7c:54:ae:0e:b7:0f:8d:
                    41:51:b2:10:f2:01:50:af:f7:7f:1a:86:d6:b2:8c:
                    e8:f4:4a:80:28:9d:f1:77:1c:4f:6a:a3:19:66:57:
                    4a:3e:38:b0:01:eb:8f:cc:52:e5:51:fa:6d:9c:89:
                    5a:fb:ca:02:78:ae:f3:29:08:0e:96:69:ca:88:50:
                    e8:46:63:c8:f3:a9:f9:3a:00:ef:9e:2d:d6:fa:3d:
                    3c:bd:3a:ef:a8:2b:0a:f7:54:0b:d4:f1:b1:0d:ee:
                    ef:8a:7c:0e:46:fe:ee:a3:ee:0e:d0:99:53:80:69:
                    ac:a0:c2:21:c4:8a:22:47:fe:1f:08:64:bf:b8:aa:
                    81:2e:21:cb:14:ed:36:f3:2a:6c:5f:71:f9:e1:15:
                    d6:fa:02:17:1c:c7:12:cc:d8:a1:0f:6f:ea:fe:26:
                    d2:43:ba:61:73:be:3c:2d:70:30:b2:80:f5:39:d7:
                    e2:c7:31:d8:88:94:33:76:43:47:e5:c4:75:b4:d1:
                    ca:ca:c5:cb:1a:cb:d8:99:08:ac:4a:a9:4b:66:d0:
                    e9:2c:94:26:ef:29:3a:2d:c5:e5:a4:3a:4c:79:30:
                    50:f7:c5:2b:f0:a1:46:89:1d:d4:ea:01:c0:34:07:
                    4c:2d:6d:bd:84:3b:e9:0c:dd:0d:73:bf:00:c3:58:
                    d8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9E:B7:1B:5E:90:FF:0C:42:5D:35:B7:F8:63:4E:BA:47:C7:28:E8
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a393030303a3a2f33362d3336203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fdc:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:b2:cf:5e:6c:c7:d0:99:1d:0e:a1:5b:79:24:cf:b2:59:a5:
         fe:95:2a:bd:dd:b8:bb:96:08:b1:83:9b:09:1f:b7:90:fb:0b:
         f2:1c:28:a0:8d:9f:9c:a9:9c:71:10:db:96:4b:63:7f:ee:6e:
         ab:93:3a:43:7c:95:e4:ca:48:f3:ab:4f:ed:de:bf:b0:47:fb:
         16:1c:a4:a6:44:f3:0f:6b:ec:5a:93:09:a4:5d:1d:c0:3c:fc:
         68:77:23:e1:5e:6d:90:c4:92:4c:88:d7:a2:b6:2c:e5:84:22:
         18:f8:9f:66:01:61:7a:1b:2e:1c:54:a4:4a:e0:70:bd:ba:c2:
         4f:e3:78:a6:56:11:e8:05:40:b0:af:aa:aa:eb:95:cf:19:dc:
         be:47:b0:60:96:dd:7b:5f:8e:9f:94:79:80:ee:52:b0:87:0a:
         9e:66:ed:09:74:55:60:27:e9:45:54:91:ef:14:63:64:fc:6f:
         f4:2a:b7:73:b5:73:ae:8d:37:f2:bc:40:ce:95:30:6d:2c:fe:
         f5:79:e6:37:41:8e:5b:03:55:0b:47:f0:42:71:b0:bf:64:4a:
         cf:18:a6:90:0a:30:de:61:64:56:de:7a:96:28:27:8f:d6:19:
         c9:d9:bb:f5:86:e6:a3:2e:5d:db:80:ce:f8:85:82:2c:cb:39:
         4a:4f:cd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:24:31 2025 by rpki-client