Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a3a2f33322d3430203d3e20323634313230.roa
File:                     323830343a323263303a3a2f33322d3430203d3e20323634313230.roa (raw, json)
Hash identifier:          d/dDHA39Nu1q0bgvuw2F6HRvtau+Fjh+UiGSneZo8KE=
Subject key identifier:   AC:1A:92:68:2F:B8:B1:B2:4F:FF:DD:06:DC:06:70:C3:AC:2B:92:9B
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       7EB9FA95027DE767DD8AC56BD8A6B475606D0119
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a3a2f33322d3430203d3e20323634313230.roa
Signing time:             Wed 06 Aug 2025 13:51:26 +0000
ROA not before:           Wed 06 Aug 2025 13:46:26 +0000
ROA not after:            Wed 05 Aug 2026 13:51:26 +0000
asID:                     264120
IP address blocks:        2804:22c0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 15:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b9:fa:95:02:7d:e7:67:dd:8a:c5:6b:d8:a6:b4:75:60:6d:01:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Aug  6 13:46:26 2025 GMT
            Not After : Aug  5 13:51:26 2026 GMT
        Subject: CN=AC1A92682FB8B1B24FFFDD06DC0670C3AC2B929B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e7:15:42:25:6d:3e:d7:1e:90:e5:37:42:da:
                    20:22:ba:8a:a1:af:e6:76:45:b1:21:93:72:1b:31:
                    0b:b0:54:eb:54:31:fd:03:26:2e:54:34:6d:79:23:
                    6b:37:bb:91:39:09:99:19:bc:88:f3:ea:87:df:21:
                    ee:af:a8:82:3e:05:63:b9:4f:18:c6:b6:04:60:29:
                    fd:94:18:67:62:55:a3:d8:1d:96:9f:d5:61:86:d2:
                    8d:27:7d:53:1f:7f:9a:78:87:5e:87:61:9a:20:85:
                    5b:d4:41:8f:d9:c2:00:4b:54:af:a7:4d:d0:60:f0:
                    b0:f8:38:a8:f5:e1:9d:70:3e:af:e1:cd:41:36:97:
                    d2:a8:9e:85:7e:8c:9e:92:ce:5a:12:fc:04:cf:21:
                    1f:ba:69:b2:2a:e0:7c:8a:8e:e3:43:d7:bb:a8:f2:
                    96:e5:bf:86:39:8d:19:08:d9:ef:2b:6f:9d:86:87:
                    6e:18:57:01:be:d0:62:4f:df:cd:74:bc:cf:80:7a:
                    86:f3:eb:7d:2e:ca:ac:f3:f2:4c:5f:dc:65:54:36:
                    1e:de:14:e4:b1:4e:73:bd:3d:0d:1f:71:e3:1b:ee:
                    3b:40:a1:32:bb:c6:1d:45:4e:8c:04:12:b8:b4:5c:
                    44:65:ae:38:b9:b7:a4:2b:52:37:a6:0b:c8:5b:1f:
                    04:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1A:92:68:2F:B8:B1:B2:4F:FF:DD:06:DC:06:70:C3:AC:2B:92:9B
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a3a2f33322d3430203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:f8:d0:f4:e3:61:a1:d6:5e:21:81:0f:44:66:ba:52:a1:
         0f:4b:1c:61:3f:78:c4:ee:04:95:17:12:e5:08:8a:ba:cd:10:
         9c:e0:6d:00:65:58:87:a8:be:b0:0f:35:1c:00:76:13:1e:84:
         f5:f2:1f:27:8f:33:da:9d:49:9f:f4:21:2b:40:e2:58:1d:bf:
         b5:83:42:77:28:17:76:4e:58:07:e5:49:8c:b9:c1:e0:f4:5f:
         34:9e:1d:84:29:e1:dc:2a:6a:95:84:17:79:9c:41:35:08:03:
         43:4a:0b:62:22:d9:2b:26:e4:62:36:c1:46:e4:ce:46:73:a6:
         b3:b7:79:f1:cd:12:f2:66:60:af:fd:fd:a2:2a:a6:1e:d5:b5:
         b3:6d:58:d4:de:1e:91:b4:4b:69:55:76:14:ca:70:28:66:9f:
         2b:95:c9:75:6c:ce:0a:7b:70:48:7d:c6:f7:3a:47:b6:3b:9c:
         6f:26:ab:49:69:cd:59:2d:dd:3d:b3:ab:79:97:c6:c0:a4:f2:
         ab:67:35:97:72:41:5f:b6:b6:e9:f6:ed:f6:5f:4c:25:ad:fe:
         75:fc:ac:a1:ec:8e:bc:4b:21:4d:fe:2a:f4:6d:8d:2c:e0:67:
         c4:63:0e:74:45:18:23:1d:77:4b:de:b4:87:36:68:52:18:57:
         22:cc:51:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:08:18 2025 by rpki-client