Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a616161613a3a2f34382d3438203d3e20323635333834.roa
File:                     323830343a333334303a616161613a3a2f34382d3438203d3e20323635333834.roa (raw, json)
Hash identifier:          CIJa7mf8FndUfmNr9ttE78g8UiYImIP8SIR3k8s5Azc=
Subject key identifier:   98:70:6B:B5:BC:6D:14:00:29:0C:F0:77:15:0C:9A:50:EA:F2:02:AF
Certificate issuer:       /CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
Certificate serial:       0760986B3055401CA0BF53CF2553095BA62E4195
Authority key identifier: 1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a616161613a3a2f34382d3438203d3e20323635333834.roa
Signing time:             Tue 29 Jul 2025 15:14:37 +0000
ROA not before:           Tue 29 Jul 2025 15:09:37 +0000
ROA not after:            Tue 28 Jul 2026 15:14:37 +0000
asID:                     265384
IP address blocks:        2804:3340:aaaa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 13:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:60:98:6b:30:55:40:1c:a0:bf:53:cf:25:53:09:5b:a6:2e:41:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
        Validity
            Not Before: Jul 29 15:09:37 2025 GMT
            Not After : Jul 28 15:14:37 2026 GMT
        Subject: CN=98706BB5BC6D1400290CF077150C9A50EAF202AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:47:8a:dc:c4:a9:de:39:8d:c4:4d:84:e0:
                    52:0a:73:91:66:97:80:80:11:39:d2:e4:f0:87:c5:
                    6f:e9:0d:71:0e:e0:79:92:10:79:fa:7b:91:de:1a:
                    b9:a6:8e:0e:75:3d:57:18:d2:29:e5:d2:fa:68:eb:
                    55:cb:44:93:98:90:5b:ef:2a:04:37:df:40:b8:15:
                    56:05:f5:3d:41:44:9e:12:37:3d:df:dd:ae:38:7a:
                    b5:6c:1e:7c:42:0d:72:d1:0c:67:fb:d7:6c:58:d4:
                    4a:db:2a:c7:98:62:43:0b:cb:0f:7b:92:04:2f:22:
                    5f:d1:77:46:d7:c9:20:c3:61:70:d0:1f:5d:50:0a:
                    69:bf:5f:02:a0:f9:b1:b1:0f:cd:e0:1e:33:24:9c:
                    79:48:81:db:7b:70:c8:65:ea:00:fd:76:02:14:a9:
                    23:70:db:79:a0:b9:1d:ac:67:d7:8e:78:4f:04:a9:
                    2a:02:89:64:30:33:f3:60:2a:36:37:7e:1e:cd:80:
                    aa:9a:08:6f:fc:1f:78:3e:43:e4:d8:a9:b8:fd:fc:
                    a5:b1:71:6e:e3:a6:3b:0e:30:86:71:f1:a4:ff:d0:
                    0b:34:6c:69:58:ac:06:a4:af:1b:9e:b9:6a:aa:45:
                    6d:e1:f1:07:95:44:8f:78:ef:c3:f6:07:80:34:be:
                    a0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:70:6B:B5:BC:6D:14:00:29:0C:F0:77:15:0C:9A:50:EA:F2:02:AF
            X509v3 Authority Key Identifier:
                keyid:1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a616161613a3a2f34382d3438203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3340:aaaa::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:30:b7:51:e6:87:71:1d:05:03:5b:9d:fc:b8:17:08:2b:69:
         b4:17:76:1b:e3:a9:03:76:39:2d:24:bd:cf:dc:0b:70:b8:b7:
         83:05:8f:22:1d:ba:e8:96:04:4c:c9:5a:ce:ac:8d:9c:4c:2f:
         7c:a8:51:e1:7e:bd:3a:2a:64:96:d9:c4:29:35:bb:f7:1a:11:
         77:5c:fd:4a:68:d7:2e:01:42:0c:b1:fb:00:4b:ba:fb:05:54:
         79:b6:2c:32:1a:e7:70:ba:df:3d:81:60:8e:a5:2e:cf:6c:89:
         89:5c:f0:d8:42:94:d1:bd:65:0b:da:50:20:2f:41:bf:67:2f:
         6c:69:58:de:e1:96:35:63:25:51:be:1f:9a:6e:8a:12:69:e1:
         b7:14:f1:fb:69:c8:4a:a5:82:3d:4c:ed:61:e0:a0:7c:ce:65:
         59:5e:73:21:dd:cc:db:f3:c2:3b:1e:55:93:f4:4d:e1:80:d9:
         0b:29:74:5d:d1:8a:2d:71:d2:26:85:a5:25:cf:44:76:17:bb:
         41:37:a8:38:fc:58:89:3d:f4:43:14:ca:fb:f6:91:69:7c:68:
         88:dd:45:36:b9:29:2f:4a:1d:0a:67:47:a8:35:5a:5a:6e:78:
         ab:6a:ba:2e:f7:f6:22:14:dd:84:57:fd:16:9d:d7:f5:fb:3f:
         95:51:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:20:11 2025 by rpki-client