Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a3a2f33342d3334203d3e20323636393137.roa
File:                     323830343a343534633a3a2f33342d3334203d3e20323636393137.roa (raw, json)
Hash identifier:          knmO5zFFLLBU+TQqC7GFnfKeX962stNPEBB9nwffwjM=
Subject key identifier:   C6:DD:83:BA:A2:11:9E:7B:C9:D9:BF:53:E5:53:D0:31:11:9D:A2:F8
Certificate issuer:       /CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
Certificate serial:       41E70D64447A10359D07155CAAC16017C2C76291
Authority key identifier: D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a3a2f33342d3334203d3e20323636393137.roa
Signing time:             Tue 08 Jul 2025 15:39:50 +0000
ROA not before:           Tue 08 Jul 2025 15:34:50 +0000
ROA not after:            Tue 07 Jul 2026 15:39:50 +0000
asID:                     266917
IP address blocks:        2804:454c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl
                          rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 12:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e7:0d:64:44:7a:10:35:9d:07:15:5c:aa:c1:60:17:c2:c7:62:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
        Validity
            Not Before: Jul  8 15:34:50 2025 GMT
            Not After : Jul  7 15:39:50 2026 GMT
        Subject: CN=C6DD83BAA2119E7BC9D9BF53E553D031119DA2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:51:5c:52:f5:6a:2f:0c:e7:a0:d8:68:5d:8b:
                    e5:7f:92:f7:83:ab:85:eb:71:02:d9:d8:80:ad:cd:
                    5c:08:2d:d1:fd:5b:d5:a5:0b:9c:95:13:4a:d3:7c:
                    d5:8b:6a:0a:3e:d9:40:43:76:ca:40:98:97:91:e9:
                    fd:fd:4a:19:2f:84:25:80:60:96:98:a7:22:ec:63:
                    43:cc:26:19:f8:cd:0a:c0:77:1a:93:d6:cf:96:cf:
                    aa:f3:af:f3:3d:67:5f:3b:64:12:e6:6c:ea:ae:cd:
                    18:ac:0a:53:b5:60:8b:e5:c4:44:01:1a:1f:29:3a:
                    c9:60:06:b5:cf:f6:80:00:8d:bd:d0:7a:4c:67:d9:
                    59:59:1b:af:c4:37:96:10:8d:b1:64:22:cb:a5:3a:
                    5f:24:5e:07:bf:ce:63:38:fa:d7:b4:6f:06:93:3d:
                    ba:0c:ba:64:5d:15:55:58:fd:ab:a3:6b:68:f7:ac:
                    09:5c:cb:3d:d5:a0:e8:1e:65:a3:41:a1:2d:25:32:
                    b0:7d:38:66:b6:95:62:41:81:18:10:15:11:9b:3d:
                    e8:74:5f:c0:45:6f:9d:a2:2c:07:50:ab:75:37:9e:
                    b8:05:bf:43:84:07:dc:60:00:37:b6:46:19:e0:2e:
                    d0:3b:71:0a:e5:83:d1:0c:a5:41:89:41:88:c9:9a:
                    61:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DD:83:BA:A2:11:9E:7B:C9:D9:BF:53:E5:53:D0:31:11:9D:A2:F8
            X509v3 Authority Key Identifier:
                keyid:D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a3a2f33342d3334203d3e20323636393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:454c::/34

    Signature Algorithm: sha256WithRSAEncryption
         80:85:0a:ba:66:a0:9e:01:99:f9:6f:fb:b7:f3:15:f1:fb:39:
         2b:ff:29:7e:d7:7b:fd:98:05:4f:83:9a:aa:fe:05:36:dc:40:
         de:23:71:73:39:28:dc:83:10:88:ef:4d:3e:ed:ed:1c:ff:d4:
         36:07:8f:94:e4:d9:d9:c5:09:93:04:94:0a:5f:69:ee:3e:dd:
         21:f7:58:4e:30:6f:a4:ed:86:73:fc:74:07:19:ae:eb:7c:8a:
         9c:b0:28:59:57:ec:b2:26:6d:76:3b:7c:0d:d9:46:f2:e3:57:
         cf:ec:7a:6a:1c:01:90:7c:46:47:e5:e0:da:a9:83:cd:1a:70:
         ef:8b:b4:72:47:3f:95:1f:5d:fd:8d:6b:a4:6a:69:a8:70:12:
         df:52:cf:16:f3:51:d7:cb:e9:2c:1f:c2:c7:d4:5a:a3:9a:3d:
         d1:72:18:59:df:a3:2b:44:fe:e3:10:42:2a:01:ce:41:dd:14:
         e6:ef:d0:31:7b:18:20:37:c0:bd:e1:d5:a9:f9:21:e2:42:34:
         13:04:12:87:72:9d:b3:61:85:9a:87:08:af:a3:79:30:87:80:
         ab:ee:57:be:18:14:5c:2d:8b:c5:ea:a6:95:85:55:8f:69:9b:
         48:69:00:5e:87:68:77:07:15:e2:b1:9b:ee:71:df:3d:8f:70:
         6a:1e:bb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 16:35:37 2025 by rpki-client