Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a613030303a3a2f33352d3335203d3e20323639303938.roa
File:                     323830343a356636633a613030303a3a2f33352d3335203d3e20323639303938.roa (raw, json)
Hash identifier:          WDlB37mpssRJEmm5CbIPfaSHd/7MxTtfvV3AZZEy9kY=
Subject key identifier:   C5:A4:A8:92:D6:E5:D9:E2:41:CC:0C:CA:A3:4F:2F:56:FB:0C:EF:A2
Certificate issuer:       /CN=73777C12CA4BD8733B75D3010D997C91E776937F
Certificate serial:       18866CDB9829BCB5C89F0AF9C03043F85AC6DF28
Authority key identifier: 73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a613030303a3a2f33352d3335203d3e20323639303938.roa
Signing time:             Fri 11 Jul 2025 20:05:50 +0000
ROA not before:           Fri 11 Jul 2025 20:00:50 +0000
ROA not after:            Fri 10 Jul 2026 20:05:50 +0000
asID:                     269098
IP address blocks:        2804:5f6c:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl
                          rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 08:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:86:6c:db:98:29:bc:b5:c8:9f:0a:f9:c0:30:43:f8:5a:c6:df:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73777C12CA4BD8733B75D3010D997C91E776937F
        Validity
            Not Before: Jul 11 20:00:50 2025 GMT
            Not After : Jul 10 20:05:50 2026 GMT
        Subject: CN=C5A4A892D6E5D9E241CC0CCAA34F2F56FB0CEFA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:11:67:e4:ee:72:04:e8:8c:c7:2c:a9:6a:0f:
                    40:5b:fc:6e:97:d8:fa:20:78:ca:76:ac:d1:e3:2f:
                    97:ba:21:5b:40:d7:c5:8d:72:12:14:b0:1e:13:b2:
                    3b:15:69:d4:38:b9:0e:2a:00:99:76:7d:ce:06:b3:
                    db:2d:ef:cc:d6:4a:93:98:0d:d8:ad:91:a2:94:96:
                    41:50:27:6e:43:4a:61:54:4f:ed:90:1d:0a:c7:69:
                    10:ff:21:00:8c:79:72:35:6e:54:8f:c0:c5:26:31:
                    58:2e:40:61:1c:04:75:97:86:f5:bf:51:8d:80:b1:
                    88:a0:39:59:06:8f:89:a7:68:56:83:d7:fc:09:83:
                    89:4b:56:f3:af:56:b8:ef:c6:c3:c5:78:e1:4d:29:
                    b0:53:51:54:0e:3d:86:e5:b8:4b:69:95:68:13:6a:
                    09:1c:45:10:30:f5:71:9d:a3:8c:4c:21:4a:75:f7:
                    15:40:16:b5:87:c2:90:65:41:0d:90:4f:20:3c:d4:
                    d4:ba:26:7e:b0:54:59:17:ea:35:ca:8f:45:86:83:
                    55:6a:0a:f5:33:1c:52:4d:64:7a:aa:4a:93:42:d7:
                    c1:0f:b7:13:3e:2a:29:88:63:cd:f3:9b:09:fe:ac:
                    3d:c0:c8:0d:6a:1c:3f:4f:8c:fc:74:8a:39:cc:59:
                    6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A4:A8:92:D6:E5:D9:E2:41:CC:0C:CA:A3:4F:2F:56:FB:0C:EF:A2
            X509v3 Authority Key Identifier:
                keyid:73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a613030303a3a2f33352d3335203d3e20323639303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f6c:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1c:fb:ec:27:81:6d:85:b2:10:2d:f9:08:55:58:20:ce:18:93:
         49:61:1c:a3:64:2b:35:e3:14:53:52:59:fc:6a:ce:ae:c4:89:
         34:fc:4c:5f:82:71:c8:bf:f8:b8:c7:30:01:a7:37:29:69:8e:
         c2:24:d6:a1:94:b0:f4:f3:31:25:44:b2:07:2b:79:23:17:5f:
         b8:2b:79:7d:70:2b:1b:bc:5c:0f:43:a7:52:56:7b:35:08:fe:
         02:5f:db:23:60:d6:63:a4:da:cd:6c:74:aa:b2:94:57:3f:95:
         65:59:b5:78:48:e9:ca:ba:c5:46:ab:78:19:31:c1:0a:a7:46:
         27:06:f4:8b:70:b0:f2:26:27:d0:5e:11:2d:ac:c2:5a:e1:0c:
         93:d2:f7:ce:f7:af:f0:fe:9a:42:91:37:b9:cb:1d:0c:89:85:
         19:3d:19:de:5f:c3:14:41:b5:76:4d:cf:b4:fa:70:bd:19:b0:
         81:cc:55:06:2b:b8:7e:00:8b:c8:98:7b:2a:6d:24:07:0f:32:
         28:e3:66:20:26:37:c1:90:c3:c4:f7:de:49:89:ec:06:b1:cf:
         37:77:e7:c9:cd:4e:59:a0:a9:5a:ee:72:86:8a:91:2e:6e:33:
         f4:cd:44:6b:fa:86:54:33:8f:77:3a:0b:2e:90:96:61:df:4b:
         52:63:ac:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:09:00 2025 by rpki-client