Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/323830343a3565633a3a2f33322d313238203d3e203238313433.roa
File:                     323830343a3565633a3a2f33322d313238203d3e203238313433.roa (raw, json)
Hash identifier:          KuMjv5YqoTOnK8glkulkMn80mICeQ7OSDDzlcBOg/x4=
Subject key identifier:   5D:38:CE:A5:71:71:ED:36:71:10:96:6C:39:2B:3D:E2:5C:E3:4D:CE
Certificate issuer:       /CN=3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472
Certificate serial:       56BC4E8C772BBDC640A6519D559037C2A1A35F8C
Authority key identifier: 3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/323830343a3565633a3a2f33322d313238203d3e203238313433.roa
Signing time:             Fri 20 Jun 2025 14:41:59 +0000
ROA not before:           Fri 20 Jun 2025 14:36:59 +0000
ROA not after:            Fri 19 Jun 2026 14:41:59 +0000
asID:                     28143
IP address blocks:        2804:5ec::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.crl
                          rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bc:4e:8c:77:2b:bd:c6:40:a6:51:9d:55:90:37:c2:a1:a3:5f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472
        Validity
            Not Before: Jun 20 14:36:59 2025 GMT
            Not After : Jun 19 14:41:59 2026 GMT
        Subject: CN=5D38CEA57171ED367110966C392B3DE25CE34DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:52:40:62:9f:5d:06:fc:12:d3:42:51:05:e2:
                    53:d9:ce:c8:59:12:28:a4:68:9a:90:b9:36:4c:1e:
                    91:fb:8c:f7:92:19:8c:2e:76:46:bd:9b:ea:57:b4:
                    22:b2:43:34:43:c7:45:16:0d:1e:e2:e1:b8:04:0d:
                    6f:3b:47:71:b9:09:cd:1a:46:8f:17:4a:62:a2:21:
                    5e:f1:ed:a5:66:af:c1:76:30:6a:1f:c6:21:57:31:
                    bd:6f:96:3a:e6:4c:ab:63:d0:40:da:6f:5c:bd:7e:
                    5e:59:62:c8:de:aa:9e:17:34:13:f6:5d:f3:4b:a2:
                    d5:73:d2:2e:6c:c3:6e:26:11:08:80:cd:15:b8:29:
                    51:11:27:f1:1d:fc:f8:14:ce:70:08:b2:38:ab:10:
                    c5:4a:40:c2:4a:ba:c6:17:95:ca:3d:e5:d4:82:29:
                    6b:b3:3a:48:3b:4d:67:b8:e0:5d:e9:97:25:2e:a6:
                    8f:e5:09:eb:16:ad:89:1c:81:66:1d:34:dc:09:8d:
                    3d:85:63:8b:86:f1:68:fb:b8:ba:72:96:78:fd:03:
                    62:c7:75:3a:0e:45:eb:68:01:2a:1b:02:b2:f1:6b:
                    2f:33:00:12:2d:ae:25:7c:b6:74:4e:6b:05:73:ed:
                    b5:16:5a:e2:8a:64:16:6e:f9:72:c4:0a:15:87:85:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:38:CE:A5:71:71:ED:36:71:10:96:6C:39:2B:3D:E2:5C:E3:4D:CE
            X509v3 Authority Key Identifier:
                keyid:3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/323830343a3565633a3a2f33322d313238203d3e203238313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:6b:b3:5c:e3:8d:da:b6:03:a4:b1:53:f9:0b:0e:19:b2:cf:
         28:73:7e:51:0b:69:d3:07:79:8a:d7:67:a5:e9:36:75:81:02:
         44:a2:25:0c:00:89:99:13:39:fa:25:42:2e:52:cc:38:11:b6:
         0c:5b:36:6c:32:f1:5a:0d:fb:fc:ff:1a:ec:60:4e:0d:c0:c4:
         e2:f6:9b:ac:61:8f:a5:76:95:55:b8:a3:18:bd:b7:b3:30:37:
         a1:e2:f3:c7:05:ca:25:e4:22:4e:22:71:bf:5a:cc:77:9a:9d:
         6c:fe:1e:0e:40:0b:68:5e:29:1f:f6:a6:0d:d2:7a:02:da:7b:
         cc:dc:34:67:ac:e4:e9:25:43:e2:7e:b5:80:88:3f:5a:c3:6a:
         34:3c:98:f6:f2:68:01:55:96:54:29:04:01:9e:7d:98:fc:e8:
         0d:d3:3e:b3:25:3a:a1:13:61:a1:38:5c:af:3e:22:70:8f:20:
         c0:75:ae:78:18:46:d8:6f:52:e1:2b:6a:ff:9a:03:17:92:1c:
         e0:cd:c7:f3:2f:f6:51:b1:7d:3c:e7:b7:73:16:a8:03:ab:ef:
         4b:1e:19:8b:a3:52:f7:ae:cb:6c:32:70:92:41:67:68:e2:41:
         d3:36:35:7a:69:86:8e:11:e6:d1:7d:2d:8c:01:5e:c4:c1:ef:
         be:64:0b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:17:55 2025 by rpki-client