Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/323830343a323162303a383030303a3a2f33332d3333203d3e20323634353637.roa
File:                     323830343a323162303a383030303a3a2f33332d3333203d3e20323634353637.roa (raw, json)
Hash identifier:          iW1PE9i4ZkEVkNyc+XB7mosHbHBEDzq2Ck0tcyP/rJQ=
Subject key identifier:   03:71:86:9C:3D:90:2B:47:C2:06:B5:65:FD:C1:7B:A5:D3:FA:83:70
Certificate issuer:       /CN=6B14EA342D84DC5B584613046E346F9A5722784F
Certificate serial:       15F94D5800768B5ECB8623BA0687159FE0DB835F
Authority key identifier: 6B:14:EA:34:2D:84:DC:5B:58:46:13:04:6E:34:6F:9A:57:22:78:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B14EA342D84DC5B584613046E346F9A5722784F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/323830343a323162303a383030303a3a2f33332d3333203d3e20323634353637.roa
Signing time:             Thu 24 Jul 2025 17:40:12 +0000
ROA not before:           Thu 24 Jul 2025 17:35:12 +0000
ROA not after:            Thu 23 Jul 2026 17:40:12 +0000
asID:                     264567
IP address blocks:        2804:21b0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B14EA342D84DC5B584613046E346F9A5722784F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f9:4d:58:00:76:8b:5e:cb:86:23:ba:06:87:15:9f:e0:db:83:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B14EA342D84DC5B584613046E346F9A5722784F
        Validity
            Not Before: Jul 24 17:35:12 2025 GMT
            Not After : Jul 23 17:40:12 2026 GMT
        Subject: CN=0371869C3D902B47C206B565FDC17BA5D3FA8370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:de:c7:ce:2b:61:e5:34:26:43:75:e1:cb:7c:
                    08:eb:88:a9:65:b0:2c:33:74:6a:f2:c1:ff:ee:0d:
                    13:33:59:d0:da:a4:d0:01:bf:94:20:72:1e:f3:fc:
                    db:bf:f9:70:cb:f0:71:96:ca:5d:81:f4:e8:a7:d8:
                    ab:01:54:fe:6f:17:22:8f:bc:ac:82:b4:6a:b7:71:
                    17:2c:78:43:2f:3b:4e:af:b4:eb:58:74:d0:7a:7e:
                    eb:90:fb:4e:da:6f:43:e6:2f:2f:ea:21:2e:4a:87:
                    73:96:6b:c2:d7:56:f1:b7:de:ca:b0:34:3a:13:4a:
                    76:e2:23:4b:81:44:78:d4:0d:8e:7c:bf:7c:ef:5c:
                    b1:33:27:a4:d5:27:01:27:42:93:bb:d3:ae:d0:8d:
                    8c:83:df:72:e9:e2:00:82:bc:fe:1d:c0:39:ea:8e:
                    52:fc:7c:92:66:b6:4d:a5:69:ce:a7:d3:c8:4a:67:
                    c1:c1:97:36:17:71:88:e4:1f:3d:21:a7:fb:5a:5a:
                    f6:18:2d:f6:b6:a4:05:e3:c2:b4:a9:39:83:c7:c2:
                    bc:12:ac:38:5d:1b:a1:f3:d9:d4:bb:90:93:da:0f:
                    53:e2:7a:a9:0c:7c:10:cf:20:1a:4f:86:34:38:58:
                    1a:17:9a:e4:d5:42:cc:68:b3:2c:18:3f:91:16:16:
                    15:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:71:86:9C:3D:90:2B:47:C2:06:B5:65:FD:C1:7B:A5:D3:FA:83:70
            X509v3 Authority Key Identifier:
                keyid:6B:14:EA:34:2D:84:DC:5B:58:46:13:04:6E:34:6F:9A:57:22:78:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B14EA342D84DC5B584613046E346F9A5722784F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/323830343a323162303a383030303a3a2f33332d3333203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21b0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b8:83:ba:16:b7:26:90:22:0b:9b:06:f6:8c:13:1c:d3:57:b2:
         4b:1f:d4:cb:ff:56:ec:1a:37:43:e6:c2:8c:eb:ce:7a:c7:18:
         aa:6d:3c:b3:85:c9:66:85:66:20:11:6b:d5:b9:99:03:53:7a:
         19:4d:28:69:35:ec:55:73:93:28:9b:c2:93:dc:fa:34:c3:67:
         2d:6a:1a:28:42:53:6d:df:dc:e4:a0:bc:cc:ae:64:2a:01:cc:
         8c:4d:11:80:48:42:f6:26:41:ec:42:08:30:48:93:8f:24:85:
         0b:5a:56:e3:8b:a6:e8:93:b7:b1:f9:17:b3:a0:99:ec:d3:63:
         2c:a6:4e:34:59:e4:95:5b:29:54:ed:f3:67:d9:54:18:2f:e4:
         4b:8f:7c:42:17:62:b8:11:52:55:51:f7:f4:c9:b2:b6:63:73:
         48:36:34:1b:0c:1d:8c:ee:17:db:8e:0f:ab:c0:f1:f2:ab:79:
         8f:89:78:e4:af:6c:d2:03:ec:51:27:64:65:e4:e0:7c:7d:4d:
         3e:f7:40:e5:60:06:98:87:80:ad:1c:e4:71:88:32:32:ec:92:
         b4:62:00:f2:9b:d9:9a:d3:a9:c2:7c:23:f1:9c:7c:dd:bd:ed:
         a0:0f:50:00:3a:e6:5a:1f:8d:ab:52:41:34:04:7f:cf:60:7f:
         f0:e8:a3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:37:29 2025 by rpki-client