Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hjo6vbpGxuZcffmuXNDRgnkMZSMF25Xt2YHj6QYGxCF4/0/323830343a386333303a3a2f33322d313238203d3e20323733373835.roa
File:                     323830343a386333303a3a2f33322d313238203d3e20323733373835.roa (raw, json)
Hash identifier:          vM9A60AF0/I66a+95TbDErjsEtrxt+HVMvxlsfjEIDM=
Subject key identifier:   11:FA:F4:20:00:FF:83:67:16:D0:2C:41:3F:CD:9B:55:F9:C5:D3:D9
Certificate issuer:       /CN=93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC
Certificate serial:       51B811D3CBC983320BD49059CFA8041DCA2CA332
Authority key identifier: 93:AC:07:F5:B1:95:1B:87:56:BD:4D:26:2D:82:C5:EC:D3:7F:D0:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hjo6vbpGxuZcffmuXNDRgnkMZSMF25Xt2YHj6QYGxCF4/0/323830343a386333303a3a2f33322d313238203d3e20323733373835.roa
Signing time:             Wed 30 Apr 2025 02:15:29 +0000
ROA not before:           Wed 30 Apr 2025 02:10:29 +0000
ROA not after:            Wed 29 Apr 2026 02:15:29 +0000
asID:                     273785
IP address blocks:        2804:8c30::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hjo6vbpGxuZcffmuXNDRgnkMZSMF25Xt2YHj6QYGxCF4/0/93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC.crl
                          rsync://rpki-repo.registro.br/repo/Hjo6vbpGxuZcffmuXNDRgnkMZSMF25Xt2YHj6QYGxCF4/0/93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 18:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b8:11:d3:cb:c9:83:32:0b:d4:90:59:cf:a8:04:1d:ca:2c:a3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC
        Validity
            Not Before: Apr 30 02:10:29 2025 GMT
            Not After : Apr 29 02:15:29 2026 GMT
        Subject: CN=11FAF42000FF836716D02C413FCD9B55F9C5D3D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:98:74:b9:51:58:db:8b:ba:25:c9:09:9a:
                    24:e6:d0:10:29:29:82:b5:fe:c0:f0:fd:16:3b:19:
                    f2:e5:cd:45:0c:f5:a1:2b:44:4e:8e:d8:9a:6b:87:
                    77:aa:c3:b6:8e:f0:46:1e:21:76:76:c5:33:66:73:
                    1e:ee:a7:a3:d8:42:a7:fe:dd:06:91:8d:fd:2a:19:
                    60:8b:c6:f4:aa:a9:58:82:e9:a0:1f:01:8b:57:12:
                    e1:ec:ce:e3:80:78:ac:5e:8c:18:22:2e:4e:31:f1:
                    e5:ac:69:33:9d:e1:d6:a5:46:e5:08:5b:52:67:4f:
                    ac:89:d1:4c:04:74:45:47:2b:2c:35:33:ad:56:92:
                    ef:0c:c5:46:b0:67:f0:24:2f:0e:57:fc:1c:c1:61:
                    ed:cf:ec:04:b9:a5:1f:2d:d2:cf:77:a9:e1:38:32:
                    82:54:d6:0b:f0:60:32:fa:1b:03:0b:89:9b:30:2a:
                    c1:a1:64:ce:dc:b8:f7:f4:ec:41:92:88:95:1b:f7:
                    4f:f1:22:cd:8c:01:ab:d6:53:94:3f:fd:cf:18:0b:
                    f9:7c:64:6d:fe:c5:82:7f:05:e0:34:1b:10:26:c1:
                    ab:a1:68:d5:f7:5e:ce:91:e3:27:44:1a:fd:32:59:
                    ca:8a:d0:1a:7f:ca:f4:c8:a5:4c:e1:9f:ff:38:c2:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FA:F4:20:00:FF:83:67:16:D0:2C:41:3F:CD:9B:55:F9:C5:D3:D9
            X509v3 Authority Key Identifier:
                keyid:93:AC:07:F5:B1:95:1B:87:56:BD:4D:26:2D:82:C5:EC:D3:7F:D0:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hjo6vbpGxuZcffmuXNDRgnkMZSMF25Xt2YHj6QYGxCF4/0/93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hjo6vbpGxuZcffmuXNDRgnkMZSMF25Xt2YHj6QYGxCF4/0/323830343a386333303a3a2f33322d313238203d3e20323733373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:3f:f5:bc:02:bf:d5:8b:c3:88:8a:e2:44:85:60:ff:99:5f:
         a7:9b:7f:28:fc:c0:48:97:61:58:1f:15:65:78:6b:5b:7c:71:
         88:80:ec:f1:fc:2a:93:fa:c5:f5:9c:d9:29:2b:65:6c:2f:29:
         1a:c0:6d:d6:b7:90:c3:7c:24:40:c1:01:53:02:34:2f:3d:6f:
         77:43:f7:03:9c:3f:06:b6:7e:fb:57:65:04:eb:6c:74:90:23:
         be:f5:31:d8:da:32:5b:12:7b:23:8a:9f:fa:30:5d:a5:5a:d0:
         fb:4b:4b:17:d9:18:0e:6b:52:da:55:e4:e1:93:90:bc:57:38:
         1b:6d:e0:97:89:2d:dc:b1:06:c9:d7:8a:34:99:86:52:88:36:
         4e:b2:5c:0f:2f:80:04:a2:3b:02:e6:d6:a1:16:29:45:38:97:
         90:e7:a4:f3:ce:37:e3:8e:47:10:84:d9:6e:1b:af:3f:58:c4:
         c2:18:17:71:be:07:31:20:30:75:69:d3:d9:4a:a4:f4:76:f6:
         68:8a:43:87:f0:02:89:e4:4d:79:12:7f:92:12:35:68:c8:97:
         ad:33:8f:1d:c6:14:6d:da:3d:10:1a:4a:2f:8a:81:5a:e3:cc:
         d2:61:2c:7e:f5:c6:30:e8:2a:a5:39:0e:35:60:7a:62:8a:4f:
         e0:8d:66:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:53:35 2025 by rpki-client