Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/323830343a333634383a343030303a3a2f33342d3334203d3e20323636333339.roa
File:                     323830343a333634383a343030303a3a2f33342d3334203d3e20323636333339.roa (raw, json)
Hash identifier:          kU4jd9jz/GKBEbHBRo2p/nXCv+Xtt1IFqA9Lh8Rkar8=
Subject key identifier:   EC:0B:54:06:24:45:09:3D:19:88:25:5B:5B:07:5A:0A:57:09:72:29
Certificate issuer:       /CN=578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3
Certificate serial:       4AFA1163F88C3C08D59EF64EA8526A444A3FC709
Authority key identifier: 57:8F:AC:A4:5E:AA:D1:DB:7C:7E:BA:86:A0:75:0F:BF:7D:83:4B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/323830343a333634383a343030303a3a2f33342d3334203d3e20323636333339.roa
Signing time:             Mon 07 Jul 2025 17:44:06 +0000
ROA not before:           Mon 07 Jul 2025 17:39:06 +0000
ROA not after:            Mon 06 Jul 2026 17:44:06 +0000
asID:                     266339
IP address blocks:        2804:3648:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.crl
                          rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fa:11:63:f8:8c:3c:08:d5:9e:f6:4e:a8:52:6a:44:4a:3f:c7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3
        Validity
            Not Before: Jul  7 17:39:06 2025 GMT
            Not After : Jul  6 17:44:06 2026 GMT
        Subject: CN=EC0B54062445093D1988255B5B075A0A57097229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:5b:94:3d:58:1b:32:53:47:d8:0f:09:9c:
                    c2:e8:30:af:ed:96:06:37:1e:86:55:e4:95:fc:cf:
                    62:b8:a7:92:bf:20:89:ef:1c:83:32:b3:28:a6:1d:
                    57:81:82:3c:6a:56:26:c4:8d:f9:16:ea:f5:94:88:
                    eb:bd:2b:be:c9:8c:26:7d:b0:56:0b:c8:e2:6e:85:
                    14:c3:c2:66:f0:22:5b:17:1b:cb:e6:3f:00:1a:9e:
                    e8:95:51:50:86:cb:65:88:d6:96:77:a8:81:52:37:
                    75:78:1f:59:d1:ad:33:e3:78:ce:cd:7d:ab:6c:03:
                    5d:1f:23:c0:5a:49:8c:16:a7:96:48:71:0e:e2:a0:
                    f8:51:2b:e1:60:f1:49:a0:aa:43:c2:93:f0:e5:1b:
                    3f:33:02:80:69:44:1e:46:7f:d1:6b:84:14:3e:c3:
                    1a:a6:7b:12:d4:e0:9e:ef:f7:a7:b1:94:49:b6:bc:
                    09:b8:73:69:61:77:92:4e:1d:75:15:f7:43:10:a1:
                    55:af:71:07:6c:f8:6d:d1:31:b6:00:69:eb:91:58:
                    33:95:0f:c5:4c:91:7a:23:d2:83:d1:a4:ea:91:18:
                    cc:75:ae:36:1b:f9:c0:48:7a:4b:f1:ec:22:1c:3f:
                    d6:5b:7c:63:cf:4a:06:da:6d:cb:4d:6a:1e:1e:3f:
                    70:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0B:54:06:24:45:09:3D:19:88:25:5B:5B:07:5A:0A:57:09:72:29
            X509v3 Authority Key Identifier:
                keyid:57:8F:AC:A4:5E:AA:D1:DB:7C:7E:BA:86:A0:75:0F:BF:7D:83:4B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/323830343a333634383a343030303a3a2f33342d3334203d3e20323636333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3648:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         be:a4:64:ff:c1:53:39:eb:70:2c:95:89:21:fe:58:ea:4f:e1:
         4a:d5:34:4d:cf:fa:ad:53:03:81:35:74:f5:84:81:2b:91:04:
         52:22:24:45:0d:ca:f5:72:39:2c:b0:53:eb:7b:08:6c:f0:f5:
         5f:51:12:95:49:06:04:f8:96:d1:dd:ca:f8:ae:05:c3:95:ac:
         be:ec:7a:d8:84:8f:1b:37:a7:db:55:2d:d8:ce:37:23:7a:5c:
         d1:75:81:84:ac:ef:82:c4:7e:b5:ac:60:aa:11:e9:bd:1c:4e:
         86:39:ba:aa:7e:14:1f:d3:22:2e:7a:35:9d:70:10:05:ab:89:
         5e:b5:08:40:4e:84:ea:05:3e:a8:57:01:9c:4b:d3:ee:6c:ce:
         db:44:bf:73:30:57:43:24:67:21:5f:e9:e2:00:15:ab:ce:d2:
         68:d8:39:a0:7d:75:d2:62:ae:c1:7c:95:12:0f:a1:da:87:14:
         c5:68:2d:5e:de:86:13:19:f7:7f:b6:45:51:91:0d:b6:55:08:
         ee:47:1b:c2:92:f9:81:58:98:b5:35:88:7e:a5:2c:da:74:13:
         96:85:7e:a7:b1:9d:f7:23:dd:88:1a:e2:7c:8d:55:4a:13:f6:
         99:33:2b:4f:e3:35:71:4f:d6:4b:c2:87:79:9d:81:04:db:eb:
         6a:fe:a0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:11:47 2025 by rpki-client