Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/323830343a353436303a3a2f33322d3438203d3e20323638363436.roa
File:                     323830343a353436303a3a2f33322d3438203d3e20323638363436.roa (raw, json)
Hash identifier:          fA//cYPveXbF/NXF/BFPXK9j4bwz+maHAZqc3t4LsNc=
Subject key identifier:   E8:8C:8E:1D:13:32:05:DE:EE:0A:DC:E8:3B:76:6A:20:6F:0F:27:3B
Certificate issuer:       /CN=0F78626D3BF8B07214C737318E62EE73094347B3
Certificate serial:       38B8CCBED2F1CD2B43653495D7456AF729ED231C
Authority key identifier: 0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/323830343a353436303a3a2f33322d3438203d3e20323638363436.roa
Signing time:             Fri 18 Jul 2025 01:32:53 +0000
ROA not before:           Fri 18 Jul 2025 01:27:53 +0000
ROA not after:            Fri 17 Jul 2026 01:32:53 +0000
asID:                     268646
IP address blocks:        2804:5460::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.crl
                          rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 21:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b8:cc:be:d2:f1:cd:2b:43:65:34:95:d7:45:6a:f7:29:ed:23:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F78626D3BF8B07214C737318E62EE73094347B3
        Validity
            Not Before: Jul 18 01:27:53 2025 GMT
            Not After : Jul 17 01:32:53 2026 GMT
        Subject: CN=E88C8E1D133205DEEE0ADCE83B766A206F0F273B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8e:42:81:0a:69:b0:92:a9:c1:cf:db:e3:c3:
                    b4:d8:b8:b6:39:06:a5:6d:a9:8c:d0:a6:5c:14:ee:
                    7a:74:f1:7d:78:19:3f:5d:b1:fd:94:0b:aa:98:9c:
                    71:58:94:2d:28:1b:82:1d:ca:69:25:d3:9a:03:19:
                    6b:62:93:34:7d:3f:e3:ef:d8:59:92:7f:76:e5:dc:
                    ec:7e:6f:38:bd:10:92:24:ee:af:0a:c8:1c:11:41:
                    b3:24:a0:23:ed:aa:32:85:b8:c4:84:d0:2a:34:05:
                    f9:ac:7c:25:e0:e8:32:54:e3:37:ab:e3:6b:b1:f6:
                    f5:c5:3a:88:f1:18:37:4c:e1:a4:92:a0:9c:99:d7:
                    d6:84:6e:de:54:13:46:96:13:7e:eb:cb:49:96:05:
                    00:e1:db:38:4c:0a:3a:ef:96:15:e2:fd:24:44:b8:
                    34:91:e5:24:cb:29:95:21:f2:53:b3:af:b3:aa:17:
                    8c:1f:d8:a3:6c:a8:78:29:fb:7b:91:4f:74:6a:a0:
                    97:2a:a5:09:8f:fd:f9:4f:7c:00:dd:b6:0a:61:3f:
                    2d:42:53:48:d9:0d:39:46:d1:b9:93:12:d2:9b:1b:
                    8e:f1:c4:23:82:1f:bd:99:3a:4c:3e:5a:e9:a8:49:
                    d0:f3:a4:03:e5:63:4e:af:b5:3c:f0:f1:ca:98:72:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8C:8E:1D:13:32:05:DE:EE:0A:DC:E8:3B:76:6A:20:6F:0F:27:3B
            X509v3 Authority Key Identifier:
                keyid:0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/323830343a353436303a3a2f33322d3438203d3e20323638363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5460::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:31:22:29:86:96:e0:1c:4a:33:9e:1a:80:b6:99:b9:85:1c:
         b4:28:09:25:8b:4b:e7:65:d3:51:bc:32:72:22:11:f4:8d:3c:
         2b:90:d7:a1:da:d5:57:dc:57:a2:e0:86:d7:94:d3:20:98:c4:
         70:ae:ef:b6:c1:d9:b8:22:81:39:b1:87:8a:c3:66:d1:87:7f:
         a0:16:fe:45:dd:48:b7:57:da:0b:e4:f9:ad:b9:40:1f:12:12:
         97:bc:44:06:88:d2:34:24:6e:d3:4f:22:2f:be:49:70:ca:31:
         68:b6:73:9e:32:89:92:f3:e0:e0:10:cf:a1:74:62:c4:29:86:
         3c:cb:d7:7d:74:05:9d:1f:6a:dc:25:05:fa:2a:b9:b9:bb:1a:
         74:7d:4f:22:e5:21:ea:26:31:18:4b:34:3e:b2:e9:64:0e:2c:
         3f:6f:e3:b5:e8:c0:ce:37:de:29:3c:12:c0:19:07:5e:08:60:
         06:8a:67:46:a8:e8:3e:84:0e:b9:9f:92:2d:f8:74:a1:7a:f9:
         5a:a9:25:76:45:a0:3e:76:89:8d:80:f7:06:a3:3a:6d:26:a2:
         f5:78:cb:01:ba:8e:1d:d9:48:fa:d9:58:f1:03:2f:e3:fa:b8:
         dd:aa:c3:68:ea:76:bf:09:7a:d8:45:1a:a2:ad:f7:5a:4d:e4:
         8e:ec:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:57 2025 by rpki-client