Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31303a3a2f34382d3438203d3e20323634343039.roa
File:                     323830343a316532303a31303a3a2f34382d3438203d3e20323634343039.roa (raw, json)
Hash identifier:          pmll8JwwDn1459gdjphY71LUI8ZS66RATIZ9pgVlIsA=
Subject key identifier:   60:25:5A:15:B4:F3:A6:3A:25:74:55:B4:9D:4F:55:63:2A:2F:B6:98
Certificate issuer:       /CN=1067154D7B30C41A8514DBD5BE78C166941715B0
Certificate serial:       1F0216E30BE341078A12FF6EDFD511FE36881BD5
Authority key identifier: 10:67:15:4D:7B:30:C4:1A:85:14:DB:D5:BE:78:C1:66:94:17:15:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1067154D7B30C41A8514DBD5BE78C166941715B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31303a3a2f34382d3438203d3e20323634343039.roa
Signing time:             Thu 31 Jul 2025 14:48:59 +0000
ROA not before:           Thu 31 Jul 2025 14:43:59 +0000
ROA not after:            Thu 30 Jul 2026 14:48:59 +0000
asID:                     264409
IP address blocks:        2804:1e20:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.crl
                          rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1067154D7B30C41A8514DBD5BE78C166941715B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:02:16:e3:0b:e3:41:07:8a:12:ff:6e:df:d5:11:fe:36:88:1b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1067154D7B30C41A8514DBD5BE78C166941715B0
        Validity
            Not Before: Jul 31 14:43:59 2025 GMT
            Not After : Jul 30 14:48:59 2026 GMT
        Subject: CN=60255A15B4F3A63A257455B49D4F55632A2FB698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2f:c3:fa:e8:d8:ec:67:aa:1e:d6:0d:b3:e1:
                    d3:6c:9b:8f:56:f3:1c:c7:60:be:82:59:43:cd:f7:
                    d7:b1:d1:14:90:c8:bc:cd:f3:96:c8:16:4b:be:da:
                    5b:98:3d:f6:cd:18:ba:e6:d1:5b:21:4f:10:d4:50:
                    0c:0f:9d:6f:27:c6:22:72:3b:42:75:3b:04:9b:08:
                    57:80:b3:f6:5e:8a:23:0d:8c:8a:97:36:73:4c:08:
                    ab:a5:92:bd:bd:85:8f:da:8d:cf:c9:07:3c:a6:12:
                    e5:6c:0b:d8:4e:dd:47:95:a6:0e:00:b8:91:1e:9d:
                    3d:71:31:45:75:31:a7:a0:54:07:1f:90:01:39:fa:
                    c9:6b:4d:21:95:0b:aa:67:9a:71:6f:42:23:47:8d:
                    55:32:d3:c0:00:96:8a:33:02:e0:42:a9:5d:0f:2f:
                    a5:34:a9:a6:e3:c8:c5:ab:70:d7:90:95:c5:05:0c:
                    38:60:26:c5:7a:62:23:88:e9:b7:e6:1a:f0:49:b2:
                    8a:0b:d1:4d:35:47:71:35:af:0d:8d:dc:cd:9a:83:
                    94:83:24:2b:56:98:b4:84:82:92:9a:e2:4e:0a:5e:
                    3a:54:aa:e0:3e:d1:3a:08:bf:22:b0:a4:a6:8c:7b:
                    0a:6f:70:d7:17:ba:38:8b:58:a1:17:25:ad:d5:b6:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:25:5A:15:B4:F3:A6:3A:25:74:55:B4:9D:4F:55:63:2A:2F:B6:98
            X509v3 Authority Key Identifier:
                keyid:10:67:15:4D:7B:30:C4:1A:85:14:DB:D5:BE:78:C1:66:94:17:15:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1067154D7B30C41A8514DBD5BE78C166941715B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31303a3a2f34382d3438203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e20:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:fc:f5:bf:e9:20:a0:c6:79:eb:1c:f3:99:88:03:7f:81:c6:
         8b:4d:41:c1:5c:b5:07:ad:9d:78:45:43:c2:c2:1d:67:0d:f2:
         c8:fb:8f:5e:52:3d:94:e5:ad:40:44:37:a8:c2:00:95:cc:be:
         63:a4:26:2d:42:4b:86:e0:f5:57:76:1f:9a:01:ad:22:ba:b3:
         e4:f0:10:11:3b:dc:04:e6:d7:4a:26:d2:cd:4c:8b:a3:62:69:
         ab:30:a3:b5:fc:4d:ec:3b:47:d9:c1:27:9b:f5:40:3a:a3:ed:
         18:0b:7e:ef:a4:d9:ff:cf:06:5d:37:ba:21:b5:c2:b1:88:f3:
         26:c0:91:83:15:a8:c5:23:fa:d3:0b:bb:82:6e:44:60:b3:43:
         da:0b:d5:db:d9:f3:e3:e5:21:3a:23:8e:9f:23:03:fd:ae:bd:
         f3:de:ca:1d:f8:f1:ee:f6:8c:c8:83:e5:98:bb:2e:50:94:59:
         1b:15:9a:cd:32:fd:33:53:fd:f7:9a:dd:64:63:bb:1d:21:81:
         af:0b:f1:6e:91:ea:55:20:db:50:e2:0f:ec:b2:de:cd:6b:b4:
         83:b1:5b:d9:ab:fc:0a:6d:0b:ab:5a:65:c8:11:9d:6d:3d:1d:
         28:b4:c2:db:e1:83:63:88:08:df:d8:69:6e:24:1f:35:ff:3f:
         3f:11:dd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:56:18 2025 by rpki-client