Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a356630303a3a2f34302d3430203d3e20323635353030.roa
File:                     323830343a333531383a356630303a3a2f34302d3430203d3e20323635353030.roa (raw, json)
Hash identifier:          pPLJG6y9hMXsCatliZmCwMWb653eXAsjERGytY6Sai4=
Subject key identifier:   41:31:8F:79:4E:21:E3:23:88:66:28:A6:B1:C0:21:28:2D:D8:D3:5F
Certificate issuer:       /CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
Certificate serial:       569BA469463C9087FE45189E23EB4D1AA59BF09A
Authority key identifier: 11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a356630303a3a2f34302d3430203d3e20323635353030.roa
Signing time:             Wed 25 Jun 2025 22:55:32 +0000
ROA not before:           Wed 25 Jun 2025 22:50:32 +0000
ROA not after:            Wed 24 Jun 2026 22:55:32 +0000
asID:                     265500
IP address blocks:        2804:3518:5f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 07:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9b:a4:69:46:3c:90:87:fe:45:18:9e:23:eb:4d:1a:a5:9b:f0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
        Validity
            Not Before: Jun 25 22:50:32 2025 GMT
            Not After : Jun 24 22:55:32 2026 GMT
        Subject: CN=41318F794E21E323886628A6B1C021282DD8D35F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:20:5a:ff:d4:33:9d:85:aa:bd:ae:a1:32:e3:
                    23:1f:1b:e0:8b:27:c9:a1:d1:fd:f0:81:23:b2:57:
                    4a:49:65:05:22:8a:66:62:fa:75:5b:d9:0d:98:e3:
                    30:bb:49:fd:ca:0e:2a:5d:4a:f4:a8:3c:11:64:78:
                    7d:3b:99:31:2a:c5:0d:18:78:aa:50:7a:2f:55:9f:
                    c8:24:de:23:b4:65:fd:ff:b1:89:2d:bb:86:91:5d:
                    a5:69:89:fd:cc:0c:39:0e:ef:a6:f6:1a:1c:47:09:
                    e1:e3:d0:74:7b:1b:c6:0d:0a:00:0d:c1:7d:7d:0b:
                    8f:dc:f9:10:0d:31:14:e5:a7:82:5a:a0:0f:15:f8:
                    75:8b:1a:ce:e8:5b:d7:fe:c3:1a:f5:7f:ab:63:43:
                    d7:b8:b8:84:6d:e2:0b:6d:75:95:ce:a3:67:92:e3:
                    29:af:7b:15:10:29:ae:fe:e2:88:a5:b4:a5:d2:6d:
                    4e:f9:53:03:44:13:4d:a5:f8:c4:c5:6d:fe:24:6f:
                    b3:84:e1:ed:24:2e:72:a4:2f:92:85:67:be:fc:89:
                    4f:d9:22:18:ef:f2:e1:ed:0b:1b:01:c5:7a:19:4e:
                    e5:2a:ea:99:9c:22:b9:7b:5b:ef:6f:2f:bf:f4:53:
                    04:0a:97:38:f6:89:da:8d:60:7a:04:81:43:f4:cf:
                    c3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:31:8F:79:4E:21:E3:23:88:66:28:A6:B1:C0:21:28:2D:D8:D3:5F
            X509v3 Authority Key Identifier:
                keyid:11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a356630303a3a2f34302d3430203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518:5f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:d9:f0:53:f3:ed:41:ac:3a:66:ba:e3:d7:02:52:ab:46:2a:
         28:6a:ad:91:13:e5:ec:33:1e:8e:5c:34:4b:0f:68:cb:f2:1b:
         f4:64:85:35:8b:bc:9b:f2:16:04:75:22:a4:50:60:61:49:f1:
         4f:af:89:df:f8:7d:ef:9e:77:aa:ae:65:90:15:fb:d2:28:11:
         66:7a:96:bf:33:ec:ee:53:a3:2d:7c:32:3a:99:78:da:40:a1:
         f7:59:11:3e:6d:8d:39:26:ba:06:b9:55:08:9d:0c:69:f8:ab:
         8a:a0:96:d5:c5:7b:4c:ff:80:fe:d6:65:82:f3:96:94:d4:ae:
         5b:cf:7c:24:be:22:e9:67:8d:d8:ad:4f:2e:65:8b:3e:07:5e:
         61:1a:64:6c:82:7e:f4:45:d5:59:c4:8e:b8:b1:87:90:35:72:
         8b:5d:57:ef:0b:49:0a:37:72:a1:c5:4c:03:3b:f8:85:6b:15:
         a8:0a:a1:fc:ba:bb:e4:9c:77:f8:6c:ff:fc:ef:dd:81:4d:7b:
         4e:0e:ea:be:79:9e:43:e4:f3:54:fb:ec:07:c6:5d:be:39:0c:
         0d:ac:8b:0b:dc:9c:99:5d:23:97:b4:d9:2e:28:3e:39:73:ce:
         8c:0d:73:01:74:c3:d9:d0:38:bf:01:bc:99:44:1a:fb:14:8e:
         5a:c8:2c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:04:10 2025 by rpki-client