Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a313931383a3a2f33322d3438203d3e203532383632.roa
File:                     323830343a313931383a3a2f33322d3438203d3e203532383632.roa (raw, json)
Hash identifier:          GFEbB1O4VGY0deHjXOErsNGi4lp23RM4t0mdeD8AsNg=
Subject key identifier:   F8:0F:5B:E0:05:83:6C:9D:0F:D8:1A:76:D8:06:08:54:01:30:2F:6E
Certificate issuer:       /CN=E4D2287A592D8B7C6149FCA020C2BE650D327DBC
Certificate serial:       62049D9344B36E1EE4927C9C7DC7D00C889153B3
Authority key identifier: E4:D2:28:7A:59:2D:8B:7C:61:49:FC:A0:20:C2:BE:65:0D:32:7D:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a313931383a3a2f33322d3438203d3e203532383632.roa
Signing time:             Thu 07 Aug 2025 15:09:04 +0000
ROA not before:           Thu 07 Aug 2025 15:04:04 +0000
ROA not after:            Thu 06 Aug 2026 15:09:04 +0000
asID:                     52862
IP address blocks:        2804:1918::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.crl
                          rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:04:9d:93:44:b3:6e:1e:e4:92:7c:9c:7d:c7:d0:0c:88:91:53:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D2287A592D8B7C6149FCA020C2BE650D327DBC
        Validity
            Not Before: Aug  7 15:04:04 2025 GMT
            Not After : Aug  6 15:09:04 2026 GMT
        Subject: CN=F80F5BE005836C9D0FD81A76D806085401302F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:0b:fd:e8:84:9a:33:72:ac:4b:d8:e8:9b:
                    0a:70:30:10:5e:e8:00:61:d1:23:21:23:f4:09:88:
                    74:b1:51:cb:50:3b:cd:75:4e:63:1b:e0:96:7d:0d:
                    cd:5d:a9:c0:b0:be:31:07:b1:1a:ea:f1:57:28:7f:
                    46:ca:78:67:cf:4f:2c:e8:28:c0:03:6e:be:36:4a:
                    cc:e9:47:2e:94:4f:6b:76:34:60:56:7d:28:ff:fb:
                    54:90:bb:31:22:ae:5d:71:c6:72:11:da:6b:ea:0d:
                    91:82:88:5a:8b:15:4a:a4:4a:61:7d:f2:fa:d2:e3:
                    68:a1:fe:c2:38:ae:8f:c6:ac:99:ec:b8:f5:8e:51:
                    57:ea:cf:63:00:21:d9:1c:b2:bd:cc:8c:16:80:76:
                    38:b0:89:05:73:7b:c1:6a:f9:aa:4a:d4:ef:a9:1e:
                    e0:ea:c6:91:36:05:9f:a3:b6:19:85:1c:f3:8d:cc:
                    70:28:83:3f:29:8e:25:cd:13:70:26:af:59:bd:1e:
                    8b:5e:48:f0:93:1e:71:59:71:4c:a5:d5:04:c7:d8:
                    9c:6a:fe:e8:d5:57:96:cf:74:20:89:d8:52:7e:30:
                    b5:b9:36:2d:01:35:33:ce:f9:d8:31:fe:7d:75:35:
                    2e:5f:82:64:df:4f:b3:5a:76:84:21:95:bb:a0:09:
                    50:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0F:5B:E0:05:83:6C:9D:0F:D8:1A:76:D8:06:08:54:01:30:2F:6E
            X509v3 Authority Key Identifier:
                keyid:E4:D2:28:7A:59:2D:8B:7C:61:49:FC:A0:20:C2:BE:65:0D:32:7D:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a313931383a3a2f33322d3438203d3e203532383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1918::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:10:b1:52:60:96:01:68:34:b2:76:4a:9c:e9:89:64:75:05:
         89:8c:57:38:64:fa:ad:c7:d8:a0:e6:17:fb:a7:ad:6e:22:c7:
         72:0d:f9:2c:53:ce:61:93:23:25:63:34:6f:e4:43:90:cf:15:
         59:37:bf:90:1a:a7:c4:3c:06:f5:b4:8e:79:a4:d1:72:25:e2:
         26:42:ed:0b:e5:51:f2:d3:2c:15:84:66:18:f9:14:71:a3:37:
         91:50:1b:81:fa:22:e3:13:eb:83:c9:cd:91:b1:99:47:04:d9:
         ae:43:ca:54:27:e4:c4:1e:74:52:d9:85:cc:79:34:5a:b4:b5:
         68:71:08:47:19:78:4c:3f:69:11:77:bc:8a:61:92:81:bc:5d:
         37:83:6c:0d:a8:10:09:87:48:71:e6:bd:4a:24:a1:17:e4:24:
         15:13:81:79:ad:fd:26:9b:43:a5:d8:24:3f:2b:20:c3:08:11:
         27:ff:b4:31:36:4b:2f:a3:11:57:2b:87:f4:76:61:80:c5:78:
         4e:ea:3f:d5:c9:6e:2a:5d:bd:b5:bc:18:75:e0:6e:fd:0c:f5:
         00:56:20:e0:bd:ca:5c:a4:00:d8:87:84:a7:59:f2:19:d4:05:
         78:cd:42:c5:02:52:33:c8:11:2f:0c:17:04:10:65:c9:d3:b1:
         19:1d:fe:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:21:23 2025 by rpki-client