Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a343030303a3a2f33372d3337203d3e20323636353531.roa
File:                     323830343a336463303a343030303a3a2f33372d3337203d3e20323636353531.roa (raw, json)
Hash identifier:          eqz/7eau26A0Ha5CFYDNG3uuxx45k7zWDJVPJ45k570=
Subject key identifier:   F8:E6:37:86:2B:C6:C2:1B:8D:1C:86:C1:3C:BC:E5:C7:4B:F5:25:8C
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       15B559A43DD952C1D1A82574371D0939AD2B33F0
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a343030303a3a2f33372d3337203d3e20323636353531.roa
Signing time:             Thu 17 Jul 2025 18:00:01 +0000
ROA not before:           Thu 17 Jul 2025 17:55:01 +0000
ROA not after:            Thu 16 Jul 2026 18:00:01 +0000
asID:                     266551
IP address blocks:        2804:3dc0:4000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 10:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b5:59:a4:3d:d9:52:c1:d1:a8:25:74:37:1d:09:39:ad:2b:33:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Jul 17 17:55:01 2025 GMT
            Not After : Jul 16 18:00:01 2026 GMT
        Subject: CN=F8E637862BC6C21B8D1C86C13CBCE5C74BF5258C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:f2:eb:a3:d4:b5:8a:cd:74:5d:f6:67:1f:
                    41:e4:0d:d7:78:8b:b6:b2:cf:86:cd:d2:19:60:69:
                    83:e4:da:aa:51:a7:3b:7f:ca:e0:91:31:5e:ca:b3:
                    c2:25:c8:d5:26:67:9f:48:2f:88:29:8e:b0:44:61:
                    4c:b8:a2:fe:10:cd:00:94:14:e6:3b:5c:4c:21:fd:
                    a7:24:3f:9c:d2:19:4a:e0:24:13:6a:64:6e:f9:07:
                    d9:8e:4b:86:a5:0b:04:d9:1c:90:47:b8:22:1c:b8:
                    6c:6e:eb:c1:5f:33:6b:d2:cd:4f:40:f5:70:7a:8a:
                    85:36:ad:d1:96:c1:df:f6:51:14:ac:67:7c:d3:09:
                    0c:b7:79:c5:c9:c6:96:1a:ee:91:2e:e8:e7:4c:5a:
                    d4:5f:17:0d:da:e8:3c:2c:6c:4d:c8:99:5a:23:21:
                    19:a4:79:21:43:76:9e:20:ba:cf:68:42:99:d0:ce:
                    0d:c0:7b:31:0e:1e:3b:6d:2b:ff:45:ee:e9:e8:50:
                    04:96:d6:98:36:a8:89:2c:2e:d9:c6:3a:1e:23:3a:
                    54:ad:5a:bc:ac:5e:bc:86:31:72:78:46:29:a5:ef:
                    f1:a9:a1:b8:55:fa:33:e1:96:14:4b:40:3c:cd:b9:
                    5c:b9:1a:a4:b5:66:f8:54:82:c4:c3:03:75:72:68:
                    56:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E6:37:86:2B:C6:C2:1B:8D:1C:86:C1:3C:BC:E5:C7:4B:F5:25:8C
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a343030303a3a2f33372d3337203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         08:bc:b8:9f:47:8e:23:8b:23:5e:59:e2:8a:6e:39:b3:1d:9d:
         24:82:56:0f:15:4c:ce:51:f1:5c:7b:09:28:7f:93:f1:26:d8:
         4b:39:d6:48:bf:1b:40:29:cc:81:58:1f:6b:e6:94:b3:9f:10:
         94:81:d8:9c:a7:00:1c:f5:fd:1e:d1:fc:60:a3:a1:5e:39:51:
         4b:4a:99:40:ca:17:e7:63:91:f9:1c:5a:06:6c:29:68:a0:14:
         46:ea:22:cb:bf:0e:42:0c:db:1d:50:7a:92:dc:62:10:1e:43:
         27:f4:0e:a8:6f:4c:22:d4:95:e9:66:8e:35:14:32:62:0f:e6:
         bf:59:03:22:e7:80:2c:11:3b:cd:16:69:07:d1:fb:0b:28:5a:
         4b:be:60:cf:0f:ab:71:72:f9:13:4b:e4:fd:1c:d5:4e:f2:3e:
         81:d0:09:d3:1a:96:4f:98:cb:23:df:10:2b:7a:b9:49:97:ba:
         5e:da:e7:c6:45:f6:0f:32:eb:22:1e:9a:bf:6f:ff:df:a5:90:
         8d:37:37:f8:8c:1b:eb:db:6c:06:c6:64:64:d3:5b:53:f5:60:
         2d:10:91:a4:3e:38:b6:74:cb:7c:38:19:a6:84:e2:3d:0e:ea:
         2a:f2:a0:c3:a3:97:f0:f6:0b:3d:be:c3:90:ef:7c:70:8a:1f:
         89:57:80:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:37 2025 by rpki-client