Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/323830343a326131343a3a2f33322d313238203d3e20323634303535.roa
File:                     323830343a326131343a3a2f33322d313238203d3e20323634303535.roa (raw, json)
Hash identifier:          hchUyYuVejSIRt2jUE56ZQlwhgTlS1SRZB8lyFeHT2s=
Subject key identifier:   81:05:09:1D:37:0D:A6:9E:B0:1B:FA:02:BA:B7:37:F4:0E:A1:7C:BE
Certificate issuer:       /CN=63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F
Certificate serial:       6F3D5692CE64804F759AA6042994EF61C9636105
Authority key identifier: 63:D4:F7:7B:FC:AF:BD:91:41:4D:4F:D4:F3:F4:26:D7:97:B8:AF:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/323830343a326131343a3a2f33322d313238203d3e20323634303535.roa
Signing time:             Mon 21 Jul 2025 16:37:49 +0000
ROA not before:           Mon 21 Jul 2025 16:32:49 +0000
ROA not after:            Mon 20 Jul 2026 16:37:49 +0000
asID:                     264055
IP address blocks:        2804:2a14::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.crl
                          rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 11:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3d:56:92:ce:64:80:4f:75:9a:a6:04:29:94:ef:61:c9:63:61:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F
        Validity
            Not Before: Jul 21 16:32:49 2025 GMT
            Not After : Jul 20 16:37:49 2026 GMT
        Subject: CN=8105091D370DA69EB01BFA02BAB737F40EA17CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:51:ce:b5:c0:ec:3c:f1:a3:39:46:d0:2f:
                    28:e3:83:9a:d7:02:5e:fc:bd:d6:4f:40:ad:cd:5b:
                    02:36:c9:6f:ea:2c:ab:f3:85:89:42:8f:db:43:b6:
                    eb:50:a7:b6:3b:5f:b8:f4:63:1e:73:a5:8f:f8:b1:
                    82:6c:eb:d9:1b:e2:ef:de:6c:7b:bb:df:8c:cd:2d:
                    fd:25:7d:bf:f7:bf:90:0a:32:64:9e:42:d2:fc:d3:
                    33:1d:08:08:a3:3e:fa:c2:00:d1:35:a2:80:19:8d:
                    33:30:9c:c7:3e:13:21:ac:b3:16:c4:a7:85:75:a1:
                    eb:cb:64:04:ce:e5:b6:a1:63:38:60:be:5c:8a:30:
                    ce:ec:96:60:e7:cf:cd:c9:10:3f:39:ef:91:6c:e8:
                    e0:c0:94:84:82:1c:8b:4d:65:eb:20:8f:da:fb:01:
                    c0:b7:27:13:d2:01:c5:9c:23:b8:22:36:ce:59:49:
                    38:f7:a6:ef:76:4c:db:d2:43:5e:60:4e:1c:50:ad:
                    f8:08:d5:28:9a:88:b4:b2:0c:4d:b4:20:0e:29:34:
                    78:c4:11:bd:aa:1d:c5:1a:6d:e9:60:f6:19:a7:9e:
                    a0:51:81:58:6e:47:b3:ff:8e:12:4b:a0:b5:7b:2e:
                    87:c8:0a:46:b1:2e:1c:3e:22:8b:b2:03:81:3d:1a:
                    84:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:05:09:1D:37:0D:A6:9E:B0:1B:FA:02:BA:B7:37:F4:0E:A1:7C:BE
            X509v3 Authority Key Identifier:
                keyid:63:D4:F7:7B:FC:AF:BD:91:41:4D:4F:D4:F3:F4:26:D7:97:B8:AF:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D4F77BFCAFBD91414D4FD4F3F426D797B8AF0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/323830343a326131343a3a2f33322d313238203d3e20323634303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a14::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:52:99:97:70:29:4c:70:b4:a0:78:c1:30:ba:a1:8f:37:27:
         3d:d3:e5:a3:f8:4a:62:92:da:71:93:6c:86:9c:61:07:50:ca:
         4f:66:77:66:c4:a0:df:1c:cd:d9:92:14:ee:31:c9:d2:52:fb:
         ed:e1:b1:de:67:79:5a:6b:93:9e:cc:75:8d:d2:a7:6b:41:a2:
         8a:8d:13:d0:3e:4f:16:9a:df:c4:84:da:55:3c:cf:3f:4e:a2:
         b2:c8:87:02:62:a9:d8:51:83:ce:ef:1a:d9:3f:e2:39:67:1f:
         90:37:2e:0a:a6:eb:53:10:8f:e1:bf:34:0c:b8:7d:4d:53:75:
         68:4d:cf:d2:ae:c5:11:6e:59:c5:6a:ac:ae:cb:ae:6f:2b:41:
         36:29:09:9e:f9:b2:8c:5f:7b:48:13:8a:b6:c8:52:bc:17:41:
         7a:8c:7a:52:e5:55:2c:ff:07:ba:1d:57:a7:09:f1:a3:d4:3f:
         90:e0:80:a9:b5:f5:4e:15:73:20:35:df:00:3b:2c:af:64:a2:
         aa:e4:0a:57:05:75:3e:e3:ab:1d:a3:46:c1:c7:f7:d7:05:e6:
         2f:f9:63:ed:0b:a3:c7:51:1d:df:da:cc:f4:82:9c:de:90:46:
         98:aa:b3:e3:ea:50:23:5f:8f:d4:2c:2a:74:26:82:a1:ba:f1:
         f3:f6:13:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:14:37 2025 by rpki-client