Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/323830343a363233633a3a2f33322d313238203d3e20323639323835.roa
File:                     323830343a363233633a3a2f33322d313238203d3e20323639323835.roa (raw, json)
Hash identifier:          14FHE6zmhSnBphK8r9h/sTCvAXLmSQ2AOYVJqOdtMCU=
Subject key identifier:   E6:91:32:EA:61:3C:95:2C:53:8F:73:D4:F2:F1:28:4A:AE:51:62:5F
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       5540D837BDF0D12916932042F8F425B413E9C4D0
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/323830343a363233633a3a2f33322d313238203d3e20323639323835.roa
Signing time:             Wed 30 Jul 2025 18:02:30 +0000
ROA not before:           Wed 30 Jul 2025 17:57:30 +0000
ROA not after:            Wed 29 Jul 2026 18:02:30 +0000
asID:                     269285
IP address blocks:        2804:623c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 17:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:40:d8:37:bd:f0:d1:29:16:93:20:42:f8:f4:25:b4:13:e9:c4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Jul 30 17:57:30 2025 GMT
            Not After : Jul 29 18:02:30 2026 GMT
        Subject: CN=E69132EA613C952C538F73D4F2F1284AAE51625F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:08:f8:5f:e3:dd:9d:af:f7:c3:8e:22:d7:
                    5e:b8:2e:cf:bc:5d:3d:fc:4e:9f:4f:d0:25:2f:0c:
                    a6:53:08:04:3a:8d:30:08:2a:aa:a5:20:2b:bb:19:
                    ea:c8:82:68:60:ec:dc:18:a1:1b:b7:f9:ae:ce:12:
                    8f:99:52:5a:ae:c6:bc:94:b8:b6:84:fe:a1:df:23:
                    8b:90:60:4d:f3:99:55:48:1f:1b:23:c4:17:9c:66:
                    e6:68:b1:d7:2a:1e:31:4d:56:5f:75:73:0a:96:a6:
                    d0:7b:fb:50:fe:95:a9:b6:31:c7:27:f1:13:a5:ef:
                    c6:a0:f8:d9:fd:60:a0:c8:21:38:94:e5:61:35:d5:
                    5b:41:7f:56:ac:e4:5c:0e:19:11:03:94:56:3b:ae:
                    7b:00:ed:9e:d2:ef:a5:01:2d:6f:4b:c4:1c:03:3c:
                    17:ba:2f:32:e2:75:2b:9b:2d:7b:7b:c8:0c:5d:00:
                    16:9e:f4:e4:b6:a5:10:fe:9f:61:4f:fe:b4:b2:00:
                    3a:61:93:24:a6:24:73:e4:3d:70:9e:b9:b6:ef:ba:
                    39:68:c4:15:fc:1c:e3:e8:38:ca:c7:e7:ac:2e:f5:
                    a9:45:fd:48:99:0b:d4:bb:8e:1b:88:62:b4:7a:c1:
                    99:8f:b7:87:c6:67:fc:1f:4c:2a:94:a3:3a:61:4d:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:91:32:EA:61:3C:95:2C:53:8F:73:D4:F2:F1:28:4A:AE:51:62:5F
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/323830343a363233633a3a2f33322d313238203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:623c::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:45:17:ef:ef:aa:b5:ec:65:a1:8d:ce:3c:08:43:dd:a1:64:
         fa:27:c8:b6:15:7e:19:b4:cf:ed:ba:90:32:67:b6:6c:a5:dd:
         7e:59:60:d3:03:17:c4:a8:f6:97:9a:89:2c:f0:4e:38:a1:59:
         db:68:0c:0d:e6:3f:1e:71:d9:db:8c:eb:a7:5b:5a:bc:fc:c2:
         3e:9a:f4:5a:cb:93:96:f3:1d:1a:7d:de:e4:09:b3:6a:58:da:
         3b:a8:32:86:9a:5b:56:d8:1e:21:fe:7e:fc:d3:5f:11:3e:eb:
         99:a4:12:69:49:ac:33:46:2c:6b:e1:81:38:d0:92:68:00:cf:
         18:47:be:d3:ff:a3:19:cb:f8:9a:76:a9:b6:1c:a0:6e:d4:dd:
         b1:e2:48:64:72:52:7c:41:d5:fd:20:23:23:ba:5a:00:64:b5:
         6e:fe:b7:20:69:4a:24:f9:fa:c5:bf:76:46:a5:35:6a:9e:b4:
         ea:a8:09:99:ab:85:16:85:fb:f1:51:39:95:1e:74:bd:99:6f:
         0f:16:d8:c7:d2:42:d4:df:d1:cc:72:f0:e6:0b:cb:ee:bd:bf:
         9e:93:4c:d3:c5:67:35:a0:9f:14:60:62:c8:0a:52:34:af:39:
         76:2e:a1:f1:df:ad:1d:35:62:7e:69:6c:19:6a:0b:ea:a5:0e:
         90:91:bd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:54 2025 by rpki-client