Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3430313a3a2f34382d3438203d3e203631363839.roa
File:                     323830343a316430343a3430313a3a2f34382d3438203d3e203631363839.roa (raw, json)
Hash identifier:          YVF7zdhIXJcUp9rSmOQKpkaLT6VxvxEyIUMD0aWNrQQ=
Subject key identifier:   F1:60:DC:1D:4D:00:67:4C:0D:15:65:0B:2E:AA:30:2F:93:46:4C:1E
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       22328CFF3FEDF5D1A8394FEB2EA6A9DF7A7D0E74
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3430313a3a2f34382d3438203d3e203631363839.roa
Signing time:             Fri 25 Jul 2025 20:48:39 +0000
ROA not before:           Fri 25 Jul 2025 20:43:39 +0000
ROA not after:            Fri 24 Jul 2026 20:48:39 +0000
asID:                     61689
IP address blocks:        2804:1d04:401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:32:8c:ff:3f:ed:f5:d1:a8:39:4f:eb:2e:a6:a9:df:7a:7d:0e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Jul 25 20:43:39 2025 GMT
            Not After : Jul 24 20:48:39 2026 GMT
        Subject: CN=F160DC1D4D00674C0D15650B2EAA302F93464C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:b1:c9:51:a1:c4:30:35:79:9c:fc:ec:d8:
                    25:a6:b0:89:0f:78:c5:4c:2d:0c:8f:96:a1:3f:5a:
                    58:03:b0:4e:f9:45:f3:22:20:c8:07:0c:99:08:91:
                    0d:19:4d:4f:e1:66:27:87:12:9e:14:6f:04:ec:28:
                    2e:25:5a:e5:4d:81:22:97:5c:4f:65:da:20:f9:67:
                    a8:32:a9:17:e4:0e:de:3f:3b:a5:49:45:be:7a:96:
                    24:ff:f1:a9:b4:e3:2d:26:4c:80:46:33:03:13:36:
                    a3:8c:ed:a9:a2:92:c9:4a:6f:a8:74:a7:98:cc:47:
                    b1:b6:97:1c:26:22:5b:05:4a:af:f1:43:aa:d7:d6:
                    56:f7:75:02:dd:f8:d3:06:2d:ac:38:a4:a6:80:87:
                    81:79:04:70:dc:69:73:a6:f0:2b:7a:23:e1:e4:06:
                    7e:97:f0:7e:70:37:76:6d:a0:c6:d6:bc:b5:f8:b2:
                    a1:6c:83:b6:5c:fb:d3:63:c0:25:70:a0:aa:5e:35:
                    14:ce:1e:3f:70:03:ac:cb:e7:5b:cd:c7:89:18:1d:
                    7b:29:0c:ce:bd:db:44:04:02:f7:01:1d:42:f6:4f:
                    db:ce:2e:03:e1:b2:b1:6a:bf:59:67:66:2f:10:91:
                    e9:bf:95:3f:86:0a:75:5e:3d:fe:ab:e9:2e:cd:45:
                    b3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:60:DC:1D:4D:00:67:4C:0D:15:65:0B:2E:AA:30:2F:93:46:4C:1E
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3430313a3a2f34382d3438203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d04:401::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:7e:9b:6f:4e:02:a0:43:06:db:ed:58:ab:91:4f:19:81:1a:
         72:66:24:ee:c5:17:37:72:0f:01:7f:d3:46:6c:02:38:48:a0:
         c6:b0:37:47:0b:f2:5a:4f:d0:89:ea:13:b3:8d:8b:61:44:10:
         74:c8:bf:28:ca:44:ed:f9:58:01:c4:5f:63:7b:b6:f9:59:7e:
         b3:10:c6:de:3b:ce:3e:56:0f:23:2d:ac:8c:3b:ef:18:9f:82:
         2d:41:8e:bb:4d:35:39:cf:36:76:30:18:df:bd:b4:eb:99:6b:
         88:8c:e4:28:c7:48:7a:66:b0:5d:16:d8:5e:89:e2:e4:a5:43:
         ae:bd:af:00:95:1a:97:72:2e:41:a6:fc:99:7d:56:a4:91:5b:
         81:f0:f8:4e:b9:63:a8:f2:61:0f:c0:04:c0:ea:92:06:fe:26:
         14:ef:4e:95:e1:ed:1a:fc:5f:c0:3c:5e:6b:52:a4:e3:34:07:
         35:40:ce:26:8f:5d:46:a3:3c:ea:d6:0d:ad:c4:68:80:6e:d8:
         4d:7c:7e:14:c7:9a:30:aa:60:25:75:e0:70:cf:b3:70:ab:a9:
         91:8a:04:a7:7f:37:6f:a9:43:95:f6:57:ca:16:d7:c0:f1:96:
         e1:a3:2f:c0:5d:27:da:30:58:a6:e7:9c:fd:41:c8:71:0c:7a:
         83:1b:cd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:24:19 2025 by rpki-client