Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a336366633a3a2f33322d3438203d3e20323636323436.roa
File:                     323830343a336366633a3a2f33322d3438203d3e20323636323436.roa (raw, json)
Hash identifier:          4dKczSo57jAIR30TgtMl4agLQinzHxPgjCA5WbQGImE=
Subject key identifier:   B9:82:45:90:28:52:A9:4C:78:D5:C7:95:FF:8E:3D:30:40:D7:0D:64
Certificate issuer:       /CN=E4D2287A592D8B7C6149FCA020C2BE650D327DBC
Certificate serial:       46C41D1E32C386066782856D68C74FF78FC15E88
Authority key identifier: E4:D2:28:7A:59:2D:8B:7C:61:49:FC:A0:20:C2:BE:65:0D:32:7D:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a336366633a3a2f33322d3438203d3e20323636323436.roa
Signing time:             Thu 07 Aug 2025 15:12:22 +0000
ROA not before:           Thu 07 Aug 2025 15:07:22 +0000
ROA not after:            Thu 06 Aug 2026 15:12:22 +0000
asID:                     266246
IP address blocks:        2804:3cfc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.crl
                          rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c4:1d:1e:32:c3:86:06:67:82:85:6d:68:c7:4f:f7:8f:c1:5e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D2287A592D8B7C6149FCA020C2BE650D327DBC
        Validity
            Not Before: Aug  7 15:07:22 2025 GMT
            Not After : Aug  6 15:12:22 2026 GMT
        Subject: CN=B98245902852A94C78D5C795FF8E3D3040D70D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:30:03:04:9e:1a:79:90:1d:2d:2a:e1:dd:
                    b5:e4:49:81:45:de:ec:55:90:85:de:ee:e8:02:2e:
                    43:b5:06:be:2f:00:dc:8f:64:97:89:32:61:ca:5d:
                    74:8b:14:33:74:f5:11:eb:1c:e9:bd:a4:db:c0:7a:
                    8e:cf:c1:4a:68:f8:06:dc:75:3f:84:21:0d:da:8f:
                    1f:ae:71:b1:62:54:da:d5:cf:f1:58:bc:a8:7c:82:
                    e2:0f:25:e2:a4:a4:ea:0f:d4:49:21:31:c2:b8:98:
                    b7:e7:7b:a2:fd:cf:0f:59:cb:2e:2f:9d:75:e3:e8:
                    e6:02:de:60:6d:bf:50:37:4f:be:f6:96:e2:a3:06:
                    b2:32:a5:ab:cc:50:05:62:63:f9:3e:86:6f:cb:60:
                    e0:78:37:12:bb:d5:23:18:3c:99:35:42:fd:dd:f9:
                    0e:ee:32:3d:62:f2:ab:e8:f5:87:c2:0d:c1:b9:16:
                    df:1a:63:20:c4:48:5f:cb:f6:59:78:92:b4:9f:61:
                    70:61:bc:52:79:e0:e6:06:a5:be:b4:6e:1d:ee:91:
                    2f:eb:83:a0:7d:10:a3:0d:de:80:e4:4d:08:36:c0:
                    74:f2:a5:e4:3c:84:e8:a2:a6:d1:18:79:9a:d1:8f:
                    c6:cd:21:ec:ff:41:79:ff:dd:74:69:fa:60:0b:f4:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:82:45:90:28:52:A9:4C:78:D5:C7:95:FF:8E:3D:30:40:D7:0D:64
            X509v3 Authority Key Identifier:
                keyid:E4:D2:28:7A:59:2D:8B:7C:61:49:FC:A0:20:C2:BE:65:0D:32:7D:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a336366633a3a2f33322d3438203d3e20323636323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3cfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:a7:c6:64:82:52:cb:81:f4:ab:5b:63:bd:e2:43:0d:32:0e:
         9b:5a:91:af:09:33:63:91:cc:b8:76:b2:dd:f7:e3:df:03:9a:
         5e:4b:0c:16:54:59:89:d4:ea:65:a9:ae:b8:6a:8b:f6:18:7c:
         66:df:9a:4b:dd:d9:eb:5b:f6:cd:cd:60:79:27:4a:60:34:0e:
         71:9a:a0:fd:99:f1:13:59:dc:c2:6c:6f:84:f1:eb:13:ca:b3:
         8b:33:41:61:60:32:16:47:11:2a:3b:b2:39:76:29:8a:d0:61:
         32:ff:4b:7f:7e:4d:28:8f:0e:18:29:5f:71:20:83:8a:87:4d:
         29:c6:23:66:de:c2:0a:41:35:bd:1d:f4:92:32:83:3d:4e:aa:
         3c:86:3c:a1:15:b7:a8:72:90:38:b1:c9:8a:99:ab:8a:6e:ec:
         40:61:f6:1f:3f:3e:4c:80:40:e2:b4:87:bf:9a:68:62:a8:01:
         25:0b:4c:4f:ea:87:c7:e5:c0:04:5d:d0:6b:72:0d:18:4d:44:
         dd:f1:b9:86:2b:6c:ff:1c:b9:7d:22:87:30:8a:87:b5:fa:73:
         94:77:ad:26:e6:ec:88:5e:aa:d6:65:f8:63:06:9d:44:c0:c4:
         e6:a5:16:70:cc:88:86:16:fc:bc:58:f2:43:86:3d:2e:78:50:
         a1:e4:c9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:13:16 2025 by rpki-client