Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33322d3332203d3e20323638343430.roa
File:                     323830343a353134303a3a2f33322d3332203d3e20323638343430.roa (raw, json)
Hash identifier:          Ao0EsEig+/8ZKPF2h2+0ufCy2wcs7r1BA0Yiht3pPyc=
Subject key identifier:   3B:18:CC:6E:11:F7:5F:14:CF:C0:71:48:D2:2F:E1:9A:69:66:10:4F
Certificate issuer:       /CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
Certificate serial:       6D8E60B82CF630B24687D52E83E02695CC52B657
Authority key identifier: 3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33322d3332203d3e20323638343430.roa
Signing time:             Mon 05 May 2025 20:58:38 +0000
ROA not before:           Mon 05 May 2025 20:53:38 +0000
ROA not after:            Mon 04 May 2026 20:58:38 +0000
asID:                     268440
IP address blocks:        2804:5140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 16:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8e:60:b8:2c:f6:30:b2:46:87:d5:2e:83:e0:26:95:cc:52:b6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
        Validity
            Not Before: May  5 20:53:38 2025 GMT
            Not After : May  4 20:58:38 2026 GMT
        Subject: CN=3B18CC6E11F75F14CFC07148D22FE19A6966104F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:d4:0a:d7:36:62:a7:89:64:8a:7c:fb:1c:
                    9c:95:9c:b4:78:93:47:c2:8b:49:1f:d6:60:3f:96:
                    5a:70:40:84:22:ca:e2:95:3e:f3:2a:aa:65:92:8c:
                    ed:90:08:54:a2:95:77:aa:bc:60:7c:36:8d:f3:28:
                    4b:e0:6e:fc:5b:7a:d3:66:d5:14:d2:c0:4f:1f:1f:
                    1b:66:c3:08:9a:dc:c5:60:82:9b:73:d1:b7:2b:88:
                    5f:6a:cb:c3:33:9e:23:e0:b0:76:28:b5:5f:54:f9:
                    74:ec:e3:bf:c2:aa:66:e2:42:c2:1f:5b:be:b3:8b:
                    84:8e:ce:3f:b6:2b:15:81:81:41:da:aa:35:71:aa:
                    f3:62:81:c2:59:e2:22:21:52:12:79:ce:ed:44:10:
                    a8:8d:b8:c4:99:7f:dc:6d:ac:e3:f7:f0:f0:58:b1:
                    1a:c2:1c:38:6a:4f:a8:5c:b4:b4:49:b7:c0:59:af:
                    f7:17:62:05:83:9e:bd:e0:6b:1c:99:c2:e1:11:e0:
                    aa:cd:f3:9b:f6:be:ff:de:01:65:44:ae:a6:e2:7f:
                    e3:83:f9:06:f7:6b:10:ed:1d:64:83:a9:c1:7e:e5:
                    62:17:cd:05:38:0e:05:ba:aa:d2:34:2e:5e:fa:70:
                    09:ba:f8:5f:af:46:c9:39:00:ad:4d:90:4a:46:ff:
                    3c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:18:CC:6E:11:F7:5F:14:CF:C0:71:48:D2:2F:E1:9A:69:66:10:4F
            X509v3 Authority Key Identifier:
                keyid:3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33322d3332203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5140::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:1d:66:ce:2a:88:47:2d:43:fe:93:fc:77:35:7d:9f:87:aa:
         97:a0:02:b8:ff:ad:65:cf:f2:79:e6:75:fe:6c:0f:9c:d3:a8:
         d5:c9:a4:ff:d1:c8:d7:9f:f1:c6:f9:4c:77:18:5e:d7:23:6a:
         18:80:84:60:6c:b9:0f:07:3a:3e:6b:57:ac:f2:23:96:f1:0b:
         6a:ec:5c:df:0c:00:f2:aa:b0:05:6f:62:a8:ee:f0:10:24:0b:
         8a:56:a5:8c:97:b1:f7:5f:70:70:9e:92:11:4b:03:b3:fd:58:
         bd:82:7d:5f:2a:9a:b0:de:4f:ce:82:31:bf:89:4c:05:49:fe:
         93:f9:9d:0e:70:b7:a6:bf:f8:33:14:04:6d:60:c3:98:53:32:
         41:f6:8b:0c:d8:23:26:4e:3c:af:10:71:55:c2:ce:29:5e:eb:
         20:e4:35:62:21:84:d1:a4:cc:f9:44:0c:66:cb:db:e9:6a:4f:
         c6:aa:80:21:b9:b0:22:b7:e0:c8:d9:7b:14:48:1d:01:9f:60:
         de:1c:51:eb:6e:a9:f6:db:4f:84:90:7f:60:39:a3:c3:7a:67:
         2a:10:99:dd:da:6e:68:50:ba:c4:87:5f:da:c6:b5:4e:f9:45:
         5b:56:63:dd:2e:8a:6f:f4:4f:2f:ba:4f:f4:36:2d:c6:87:f2:
         13:60:28:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:26:35 2025 by rpki-client