Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a3a2f33322d3332203d3e203631363032.roa
File:                     323830343a373030343a3a2f33322d3332203d3e203631363032.roa (raw, json)
Hash identifier:          1wqoIi9huv0pIM6PZeli2bWkIParoB+JHoMWE2fUZNw=
Subject key identifier:   08:DB:2F:5B:16:87:17:55:DD:D0:B5:29:8A:6C:67:AF:F4:EC:91:2B
Certificate issuer:       /CN=C6D32F231785FEA26541B55E3CF768D365266570
Certificate serial:       02D24E44AE531BB6E2F4DE9C48DF92A499E092F6
Authority key identifier: C6:D3:2F:23:17:85:FE:A2:65:41:B5:5E:3C:F7:68:D3:65:26:65:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D32F231785FEA26541B55E3CF768D365266570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a3a2f33322d3332203d3e203631363032.roa
Signing time:             Fri 25 Apr 2025 08:41:30 +0000
ROA not before:           Fri 25 Apr 2025 08:36:30 +0000
ROA not after:            Fri 24 Apr 2026 08:41:30 +0000
asID:                     61602
IP address blocks:        2804:7004::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D32F231785FEA26541B55E3CF768D365266570.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d2:4e:44:ae:53:1b:b6:e2:f4:de:9c:48:df:92:a4:99:e0:92:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D32F231785FEA26541B55E3CF768D365266570
        Validity
            Not Before: Apr 25 08:36:30 2025 GMT
            Not After : Apr 24 08:41:30 2026 GMT
        Subject: CN=08DB2F5B16871755DDD0B5298A6C67AFF4EC912B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:e6:bb:72:af:ea:7a:13:8e:82:50:9e:6e:
                    2a:10:66:93:f6:a8:e8:7c:b7:18:7c:5a:2a:07:ca:
                    d6:e4:ed:77:d3:f8:04:a1:87:56:ca:fe:6e:ab:2d:
                    73:af:43:0d:1f:8a:8c:f8:15:e1:49:0a:2f:f9:33:
                    14:70:cc:37:db:f5:76:1d:f1:2c:cd:99:fb:9a:79:
                    3a:89:27:14:48:94:61:d2:64:f7:35:81:5a:e1:b1:
                    1e:d4:35:9a:8d:34:3a:ba:53:44:65:38:35:36:f0:
                    9e:b5:33:e3:90:22:f8:39:d0:83:ed:fd:19:60:62:
                    96:fc:89:10:c2:f8:48:76:c1:5f:19:2a:e7:da:d2:
                    1d:04:f7:af:1d:f2:a8:48:38:70:8d:2c:d4:99:63:
                    82:c5:22:db:0b:8d:f8:61:91:45:f5:96:9c:d7:e4:
                    24:9a:68:16:05:cf:eb:6b:f7:68:c8:50:07:75:69:
                    ec:f7:ef:d3:83:d2:1d:b9:78:bb:89:be:d6:fa:f5:
                    21:66:89:5c:f2:52:54:5b:67:b0:7e:52:3f:d7:6a:
                    d9:f3:6e:00:ec:01:75:59:b2:1a:1e:f0:66:af:fc:
                    03:f4:e2:9b:8a:58:76:b1:c4:51:17:f3:4d:07:b8:
                    61:c4:07:12:b6:78:a5:0e:97:eb:bf:83:26:95:df:
                    7e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DB:2F:5B:16:87:17:55:DD:D0:B5:29:8A:6C:67:AF:F4:EC:91:2B
            X509v3 Authority Key Identifier:
                keyid:C6:D3:2F:23:17:85:FE:A2:65:41:B5:5E:3C:F7:68:D3:65:26:65:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D32F231785FEA26541B55E3CF768D365266570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a3a2f33322d3332203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7004::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:e0:53:4a:1e:75:ba:27:47:e9:60:c8:dc:b8:17:e1:12:b5:
         39:e5:e5:bb:fd:7a:4a:e6:34:fa:a1:c9:21:5d:01:78:d3:82:
         96:2f:0a:7c:9d:4f:7e:12:9f:93:e5:22:16:09:f5:9d:2e:7b:
         a9:1c:06:e7:dd:f7:5a:a9:eb:54:bc:78:74:64:5d:a1:bf:13:
         a8:2c:d4:94:22:0a:15:4b:25:19:68:f4:4f:fe:1d:23:1c:ec:
         65:9d:a2:ec:5f:24:6a:ac:84:6a:c8:47:61:fe:cb:27:5a:7c:
         c2:fa:db:61:04:f3:0f:7c:0c:0b:83:45:16:60:59:6f:1d:94:
         00:03:53:a3:5d:2c:69:bc:55:df:a3:bf:21:34:f2:e0:d2:d5:
         24:ff:8d:a6:3a:02:8e:56:a3:78:76:bf:7b:06:ad:08:f0:63:
         4c:cf:15:74:a4:b9:78:20:2f:ab:4e:ba:17:50:a1:4e:a7:83:
         e0:e6:58:77:2e:6a:34:25:54:a6:cd:3b:40:f2:f7:1c:0d:dd:
         b7:51:9a:a8:40:34:84:79:57:7b:8e:04:39:bd:58:23:66:d9:
         2f:fc:c1:99:64:b7:fb:13:8c:f6:6a:be:3e:bb:cd:4a:14:81:
         6a:70:fa:2f:c4:38:a9:e6:d3:85:b7:7e:e4:d4:5e:8a:2f:3a:
         6b:cb:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:24 2025 by rpki-client on console.sobornost.net