Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31343a3a2f34382d3438203d3e20323634343039.roa
File:                     323830343a316532303a31343a3a2f34382d3438203d3e20323634343039.roa (raw, json)
Hash identifier:          b/9w/8jUn3l8W/e74uiUH/7oyHgy7Frg0z3L6oNajyU=
Subject key identifier:   CD:82:DF:D2:BE:AD:E0:39:DB:F9:5E:44:C5:0D:8F:9D:7D:30:25:8F
Certificate issuer:       /CN=1067154D7B30C41A8514DBD5BE78C166941715B0
Certificate serial:       068242285C47359097748172838FF2E42B79BD4B
Authority key identifier: 10:67:15:4D:7B:30:C4:1A:85:14:DB:D5:BE:78:C1:66:94:17:15:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1067154D7B30C41A8514DBD5BE78C166941715B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31343a3a2f34382d3438203d3e20323634343039.roa
Signing time:             Thu 31 Jul 2025 14:49:10 +0000
ROA not before:           Thu 31 Jul 2025 14:44:10 +0000
ROA not after:            Thu 30 Jul 2026 14:49:10 +0000
asID:                     264409
IP address blocks:        2804:1e20:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.crl
                          rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1067154D7B30C41A8514DBD5BE78C166941715B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:82:42:28:5c:47:35:90:97:74:81:72:83:8f:f2:e4:2b:79:bd:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1067154D7B30C41A8514DBD5BE78C166941715B0
        Validity
            Not Before: Jul 31 14:44:10 2025 GMT
            Not After : Jul 30 14:49:10 2026 GMT
        Subject: CN=CD82DFD2BEADE039DBF95E44C50D8F9D7D30258F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:65:2d:5c:5c:81:55:60:b6:0f:36:91:11:
                    86:43:ff:84:ac:10:ef:3e:f8:cb:77:38:e0:77:e9:
                    9e:67:b8:cc:ff:f2:a3:f5:33:14:5b:52:74:1a:c6:
                    db:7e:ea:9f:8c:44:91:21:da:e5:0e:e2:f6:bd:29:
                    91:b1:24:91:27:de:24:1b:aa:1b:b1:d7:b7:51:ca:
                    3a:c1:e2:cd:61:c6:10:23:dc:e9:eb:96:fd:4b:8a:
                    56:52:4d:f0:69:c4:2f:ba:c9:30:ec:f3:8a:d0:2e:
                    f1:75:57:81:42:fb:2d:42:f6:cb:89:66:63:99:05:
                    86:d3:99:5d:2a:27:3b:2a:8b:de:aa:49:9f:6e:39:
                    34:29:2b:14:7b:83:47:4b:ef:79:ea:09:b3:ac:f6:
                    38:96:27:7a:c5:11:ad:b3:0e:9c:f1:69:4c:e2:34:
                    85:33:f6:f7:e5:0f:8f:fc:0f:5f:30:b3:c3:5c:7f:
                    bd:1c:86:6e:a8:ff:dd:12:ae:b6:fb:8d:35:a6:59:
                    12:50:fe:b4:6f:bc:9f:d9:31:cc:18:08:12:2e:d0:
                    98:a8:89:15:08:98:08:9d:d8:2c:f8:04:a9:0e:87:
                    dc:c0:8e:92:e7:5f:7f:e8:1f:71:6a:23:75:9a:64:
                    8c:f3:9f:bb:33:cf:bd:80:81:d8:ab:56:44:53:ad:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:82:DF:D2:BE:AD:E0:39:DB:F9:5E:44:C5:0D:8F:9D:7D:30:25:8F
            X509v3 Authority Key Identifier:
                keyid:10:67:15:4D:7B:30:C4:1A:85:14:DB:D5:BE:78:C1:66:94:17:15:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1067154D7B30C41A8514DBD5BE78C166941715B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31343a3a2f34382d3438203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e20:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:fb:ba:7b:e8:85:2b:f7:17:41:35:ca:d3:43:13:47:9f:b9:
         84:5d:c7:c3:d5:fc:cb:e0:68:2c:69:83:52:91:ac:68:3f:0a:
         44:d0:03:ed:8d:d1:09:ce:61:01:f8:ee:85:c3:bc:c6:0b:34:
         5b:fc:2f:49:76:2e:04:22:7e:25:ce:9c:ee:06:7f:30:e0:ff:
         6a:3f:3d:1c:c2:d3:5e:6b:fe:0f:34:2b:c8:78:25:c6:43:c6:
         9c:fc:fa:64:f1:c7:78:0c:4d:66:6b:1f:88:55:5d:00:1d:69:
         1b:f2:92:be:9c:35:f3:f1:6e:50:54:38:b5:46:a4:7a:dd:2e:
         91:f8:67:24:19:4d:e2:7a:b7:9b:8c:c9:77:84:6b:e5:19:2e:
         fb:f1:a6:44:c9:54:5d:f7:1e:ef:39:9a:c8:35:b4:46:fe:0d:
         ff:8f:c5:47:a9:a4:9f:40:30:e3:0b:6d:93:5a:40:d3:ca:6c:
         46:fd:c7:ec:84:a0:8b:c2:09:14:98:48:02:a0:b9:7f:f7:90:
         f7:07:5c:63:34:eb:86:2a:6b:0b:a4:f5:15:df:c0:36:1f:79:
         3b:c0:c8:7f:08:bd:74:59:1d:9c:fb:42:6a:36:d1:c8:01:2e:
         93:60:13:c5:e3:d6:6c:93:7e:37:d6:6a:aa:65:40:eb:7d:20:
         6a:8d:42:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:11:14 2025 by rpki-client