Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/323830343a373465383a3a2f33322d313238203d3e20323731303131.roa
File:                     323830343a373465383a3a2f33322d313238203d3e20323731303131.roa (raw, json)
Hash identifier:          c2iyUtTl4G/VPwCpGxX/7ZeNij/fFUA4qeCASIyOomk=
Subject key identifier:   8A:2E:B5:B8:8C:A7:A6:B9:5D:B3:FF:13:21:7F:D1:C8:53:F0:CD:00
Certificate issuer:       /CN=5BE031F9039E5869F085380D95A8CA8E48367CB5
Certificate serial:       18EC1833E1C4CDF971F9027661C80F8107D0E591
Authority key identifier: 5B:E0:31:F9:03:9E:58:69:F0:85:38:0D:95:A8:CA:8E:48:36:7C:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE031F9039E5869F085380D95A8CA8E48367CB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/323830343a373465383a3a2f33322d313238203d3e20323731303131.roa
Signing time:             Thu 26 Jun 2025 17:26:09 +0000
ROA not before:           Thu 26 Jun 2025 17:21:09 +0000
ROA not after:            Thu 25 Jun 2026 17:26:09 +0000
asID:                     271011
IP address blocks:        2804:74e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/5BE031F9039E5869F085380D95A8CA8E48367CB5.crl
                          rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/5BE031F9039E5869F085380D95A8CA8E48367CB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE031F9039E5869F085380D95A8CA8E48367CB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 02:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ec:18:33:e1:c4:cd:f9:71:f9:02:76:61:c8:0f:81:07:d0:e5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE031F9039E5869F085380D95A8CA8E48367CB5
        Validity
            Not Before: Jun 26 17:21:09 2025 GMT
            Not After : Jun 25 17:26:09 2026 GMT
        Subject: CN=8A2EB5B88CA7A6B95DB3FF13217FD1C853F0CD00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:6b:85:94:03:e4:c0:de:90:1b:79:8a:60:
                    67:8b:bd:76:b3:7b:af:7b:be:d6:86:61:e7:71:76:
                    3a:f9:8e:3c:81:f0:74:ed:a0:92:0d:59:47:d4:cb:
                    10:78:d6:6d:3e:0e:65:84:f2:16:19:eb:02:13:7f:
                    e7:03:fb:08:70:32:32:7d:b0:41:e5:3f:2b:27:ba:
                    1f:c2:31:a6:70:e3:fd:17:df:37:d1:e8:2c:14:b8:
                    95:4f:45:b5:39:e1:95:a6:d9:36:fd:fe:a1:d9:d7:
                    8a:7e:6d:1d:50:fa:04:44:82:85:6d:f0:d4:4d:34:
                    00:2b:7b:7c:14:35:21:fb:a2:d5:c3:8b:d3:eb:23:
                    25:b0:1f:7e:ab:cc:4a:de:16:00:44:54:96:41:99:
                    66:5f:04:8d:05:c4:9a:f3:0e:8d:22:c8:e9:3b:aa:
                    bb:0f:80:64:b0:22:f6:f7:ec:8c:55:47:e5:ae:20:
                    2f:f8:4d:d7:70:48:c6:22:aa:a3:49:37:2d:2e:86:
                    fa:6d:47:98:f2:9d:8d:fe:6b:3e:fc:b6:03:d9:84:
                    c8:87:1f:5f:44:59:11:b1:1f:97:68:42:32:53:2e:
                    b7:18:30:60:f0:5b:22:6b:cc:27:87:28:df:0a:ef:
                    c3:36:d6:f5:cf:b1:70:63:fc:60:b1:ca:af:5a:d8:
                    15:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2E:B5:B8:8C:A7:A6:B9:5D:B3:FF:13:21:7F:D1:C8:53:F0:CD:00
            X509v3 Authority Key Identifier:
                keyid:5B:E0:31:F9:03:9E:58:69:F0:85:38:0D:95:A8:CA:8E:48:36:7C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/5BE031F9039E5869F085380D95A8CA8E48367CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE031F9039E5869F085380D95A8CA8E48367CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/323830343a373465383a3a2f33322d313238203d3e20323731303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:41:1e:02:48:36:11:12:88:b3:93:b7:1e:52:7e:25:ba:0a:
         82:39:fb:7c:78:23:ac:9b:a1:59:c4:da:bb:70:a1:2f:2e:df:
         3d:4d:b6:0e:51:da:ee:8a:08:d7:76:2b:8b:fa:c5:34:bc:65:
         72:ea:21:3b:90:d2:31:de:04:e9:c5:5b:b3:f6:a1:03:c5:d2:
         1d:f5:60:76:31:c3:76:fb:06:d5:bd:42:2c:92:00:53:58:74:
         17:6e:82:25:e7:a8:6a:61:6a:a4:d2:ba:40:9a:b2:00:b1:2c:
         36:05:9c:b7:74:39:b9:23:a4:e1:36:f9:e5:7e:4a:03:48:71:
         69:21:75:38:4c:3d:00:02:c2:cd:54:7c:ae:90:27:f1:3f:56:
         8d:67:ef:08:21:dd:2e:2e:9e:b0:f2:64:ad:22:c3:42:e8:fc:
         2e:cd:c8:6d:d1:6b:fe:47:4d:39:ea:bf:28:55:c5:51:54:23:
         8f:3e:2b:49:47:30:c3:14:9b:97:b8:4d:47:29:a0:a7:88:e3:
         68:4f:77:cb:ef:2a:bf:63:e0:84:c9:ba:a1:6d:1a:bb:17:f8:
         f3:3f:d5:72:ef:c7:31:cd:81:f4:35:aa:6e:c3:0c:e8:60:33:
         ef:0f:6e:73:c1:e9:66:9f:6a:be:63:46:2d:45:b4:42:04:31:
         95:6c:4d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:14:00 2025 by rpki-client