Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/323830343a343261383a3a2f33322d313238203d3e20323637353137.roa
File:                     323830343a343261383a3a2f33322d313238203d3e20323637353137.roa (raw, json)
Hash identifier:          HB6Yp4XB9O0q+zuNYgQNYAxN11WotDvrHDod1zn1jFw=
Subject key identifier:   52:E3:3C:24:5A:14:91:D3:40:43:D6:53:13:24:22:0A:DC:63:71:F5
Certificate issuer:       /CN=790C9628ED14224C863D38B11F70DADA38D3E260
Certificate serial:       5F704776C1142C9A9D9E99175619CE2EE40009C0
Authority key identifier: 79:0C:96:28:ED:14:22:4C:86:3D:38:B1:1F:70:DA:DA:38:D3:E2:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790C9628ED14224C863D38B11F70DADA38D3E260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/323830343a343261383a3a2f33322d313238203d3e20323637353137.roa
Signing time:             Tue 29 Jul 2025 17:08:43 +0000
ROA not before:           Tue 29 Jul 2025 17:03:43 +0000
ROA not after:            Tue 28 Jul 2026 17:08:43 +0000
asID:                     267517
IP address blocks:        2804:42a8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/790C9628ED14224C863D38B11F70DADA38D3E260.crl
                          rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/790C9628ED14224C863D38B11F70DADA38D3E260.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790C9628ED14224C863D38B11F70DADA38D3E260.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 05:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:70:47:76:c1:14:2c:9a:9d:9e:99:17:56:19:ce:2e:e4:00:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790C9628ED14224C863D38B11F70DADA38D3E260
        Validity
            Not Before: Jul 29 17:03:43 2025 GMT
            Not After : Jul 28 17:08:43 2026 GMT
        Subject: CN=52E33C245A1491D34043D6531324220ADC6371F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:79:fd:15:8a:2d:12:ab:3a:f8:f2:aa:ce:
                    87:b8:9a:6b:0b:48:b5:8d:75:98:a2:13:fa:1d:98:
                    46:62:e9:15:3e:b2:c6:99:f1:8f:ec:7d:df:4a:fe:
                    18:db:86:61:7f:71:a5:6c:59:44:07:64:80:4a:bc:
                    94:2f:2c:2f:19:c4:d4:c3:ac:59:1b:ea:4f:7c:0b:
                    c5:f0:9c:26:9e:bd:8b:70:9b:1e:6a:a9:5d:bc:d8:
                    f7:18:15:c6:77:78:be:ee:d8:d8:41:08:54:c7:50:
                    4b:19:47:cc:fa:ba:00:fb:30:be:04:1f:65:cf:89:
                    1c:52:75:a4:33:2d:0d:4d:4a:97:24:a7:85:5d:1b:
                    df:c4:ae:5d:f8:70:0d:42:fb:93:c2:63:41:60:f4:
                    1f:8b:17:94:6a:07:07:42:b1:15:84:21:1f:0d:28:
                    58:dc:2c:24:7c:be:ce:d6:ea:a0:c5:74:0a:ed:fd:
                    b0:f0:10:eb:9a:10:8d:01:22:37:d2:83:79:f6:47:
                    55:72:8b:cf:9a:86:7f:ec:ef:06:e2:1f:50:7a:99:
                    99:4f:83:5b:8c:32:63:29:2c:7b:b3:34:f4:8a:3a:
                    49:d1:4b:57:98:b5:ee:e1:80:55:f1:8b:31:c4:7a:
                    c8:61:71:ed:62:48:eb:d8:43:84:b1:14:5c:42:44:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:3C:24:5A:14:91:D3:40:43:D6:53:13:24:22:0A:DC:63:71:F5
            X509v3 Authority Key Identifier:
                keyid:79:0C:96:28:ED:14:22:4C:86:3D:38:B1:1F:70:DA:DA:38:D3:E2:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/790C9628ED14224C863D38B11F70DADA38D3E260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790C9628ED14224C863D38B11F70DADA38D3E260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/323830343a343261383a3a2f33322d313238203d3e20323637353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:1a:b7:cf:d9:51:97:44:2e:a5:7d:17:27:eb:ce:74:7f:ef:
         33:77:85:7c:5a:34:62:5d:1d:71:70:fc:06:8a:92:13:57:30:
         6f:94:66:fa:a0:09:bd:1d:0e:0b:e4:0b:df:bd:aa:15:6c:66:
         6f:7a:a8:82:46:a1:54:ac:e0:15:be:3e:14:84:28:4f:b2:4c:
         18:0f:f3:31:d7:d5:4e:e8:cc:9b:b3:00:08:20:fd:1d:cc:67:
         9a:83:9f:47:40:78:de:28:68:4b:10:51:e4:27:f8:b1:0c:e0:
         5f:85:e6:12:d1:bf:81:c6:19:76:3c:c7:8d:74:d1:ba:d3:0c:
         bb:6b:26:fc:54:5b:9c:47:ab:67:03:d6:49:34:6b:a5:ab:03:
         cc:c3:ad:76:95:86:49:4b:8d:00:8e:bf:20:d7:4e:b6:20:3b:
         c3:8a:25:c2:61:a0:b8:06:bd:49:57:b0:e6:ff:42:34:e4:78:
         11:9d:08:11:e4:50:e3:7a:0b:e8:79:e0:99:18:74:59:c1:66:
         e2:8f:32:70:4f:5e:d7:67:2b:8e:5a:18:a9:75:d8:39:22:fd:
         3a:20:3e:4c:60:92:2e:25:a8:00:0f:cc:15:79:1d:5d:5e:58:
         31:04:03:64:13:3b:4d:29:6d:49:0e:8f:7c:f8:7b:36:5e:cf:
         7b:8f:6d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:13:51 2025 by rpki-client