Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/323830343a333066343a3a2f33322d313238203d3e20323634393833.roa
File:                     323830343a333066343a3a2f33322d313238203d3e20323634393833.roa (raw, json)
Hash identifier:          rmINUH2L3XsN98Ltf2VvnudBvFSVHSsczx84mnZrk1c=
Subject key identifier:   26:BC:34:A9:DD:DB:8B:E3:29:09:97:94:65:51:FE:C9:E1:3E:17:92
Certificate issuer:       /CN=06A5E6AE0F7D7AEC46F6F05A70112B5203F77F70
Certificate serial:       39DB743DBA3FD4D11695221E8B9CC48BDF18B4AB
Authority key identifier: 06:A5:E6:AE:0F:7D:7A:EC:46:F6:F0:5A:70:11:2B:52:03:F7:7F:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A5E6AE0F7D7AEC46F6F05A70112B5203F77F70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/323830343a333066343a3a2f33322d313238203d3e20323634393833.roa
Signing time:             Mon 14 Jul 2025 18:39:35 +0000
ROA not before:           Mon 14 Jul 2025 18:34:35 +0000
ROA not after:            Mon 13 Jul 2026 18:39:35 +0000
asID:                     264983
IP address blocks:        2804:30f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/06A5E6AE0F7D7AEC46F6F05A70112B5203F77F70.crl
                          rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/06A5E6AE0F7D7AEC46F6F05A70112B5203F77F70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A5E6AE0F7D7AEC46F6F05A70112B5203F77F70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 13:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:db:74:3d:ba:3f:d4:d1:16:95:22:1e:8b:9c:c4:8b:df:18:b4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A5E6AE0F7D7AEC46F6F05A70112B5203F77F70
        Validity
            Not Before: Jul 14 18:34:35 2025 GMT
            Not After : Jul 13 18:39:35 2026 GMT
        Subject: CN=26BC34A9DDDB8BE3290997946551FEC9E13E1792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:7f:0a:0f:60:89:b8:11:be:91:9f:70:90:
                    29:b0:42:60:7d:43:52:93:24:db:62:3e:18:09:76:
                    24:89:f3:01:2e:5c:cc:26:eb:29:99:ec:67:18:6f:
                    1d:9f:6b:95:ff:24:b5:1c:83:39:db:0f:7b:66:29:
                    c1:b2:d2:95:7c:38:b1:0c:88:d9:27:b1:32:f0:5d:
                    ee:e8:da:eb:f7:c3:ad:ca:5b:f4:a8:b1:96:72:c2:
                    ae:8b:07:55:ac:c3:30:22:a2:6b:ac:56:1f:dc:e2:
                    e6:99:a0:c3:75:79:a0:62:ca:9a:8c:7d:e7:85:ec:
                    f0:54:c8:12:17:2d:40:85:4b:e4:34:85:51:46:da:
                    e7:2a:d6:5e:0f:fa:0d:06:e1:67:fd:3b:0a:e5:f0:
                    36:fb:ca:10:08:30:53:61:e0:4f:a7:be:74:0e:4c:
                    98:87:18:6f:71:35:eb:d6:e6:ed:32:be:48:3c:28:
                    02:15:c5:fc:d9:bc:ce:55:f9:f1:d0:00:1b:94:61:
                    0c:bd:f3:5f:4a:2b:a1:0b:fb:47:85:06:a7:f4:bc:
                    98:20:6b:cd:7f:11:be:54:2d:60:97:1d:29:fa:39:
                    90:8b:de:b9:bd:69:1b:fe:c6:fb:40:98:73:49:35:
                    32:8f:b1:1f:7d:81:b2:9d:93:b8:28:cf:de:6e:a8:
                    a9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BC:34:A9:DD:DB:8B:E3:29:09:97:94:65:51:FE:C9:E1:3E:17:92
            X509v3 Authority Key Identifier:
                keyid:06:A5:E6:AE:0F:7D:7A:EC:46:F6:F0:5A:70:11:2B:52:03:F7:7F:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/06A5E6AE0F7D7AEC46F6F05A70112B5203F77F70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A5E6AE0F7D7AEC46F6F05A70112B5203F77F70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/323830343a333066343a3a2f33322d313238203d3e20323634393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:f4:5f:61:8a:4c:ce:9c:e8:cc:56:3b:eb:fd:b2:de:f5:e3:
         b6:7a:bb:98:e6:35:28:1e:2f:72:80:69:53:5c:7b:2d:d9:30:
         b4:81:7e:9d:91:93:1a:d5:76:c3:1b:e1:15:8c:b3:80:88:13:
         2f:24:61:29:cf:2e:93:c3:84:b0:52:9e:58:12:be:89:06:be:
         bd:e0:b5:55:4d:83:84:26:c7:01:1c:ab:8a:ed:66:1a:4e:eb:
         9f:ba:d9:5e:97:d7:1b:95:35:7a:20:4f:63:ad:41:c3:e5:18:
         3a:f6:90:58:c2:0c:28:f4:d0:af:dd:fc:66:32:f9:97:78:1a:
         20:87:8f:1a:98:41:c2:97:af:d8:89:11:88:88:65:c5:6b:9e:
         74:15:72:72:99:3a:36:b7:88:f5:37:9c:cc:cd:73:3f:0c:f5:
         75:51:9e:57:9a:5c:60:15:0a:ad:de:d7:1c:df:69:c3:4d:87:
         d9:58:74:1b:7f:e0:76:33:70:a5:55:40:d8:0e:44:42:ec:1a:
         eb:35:42:97:63:70:6f:d4:4a:cc:06:d6:e6:bd:6b:45:3d:d6:
         b0:80:3d:60:06:ef:23:b3:0a:62:ca:b9:d4:55:9d:ae:10:d4:
         90:ea:fd:5e:a7:f9:f8:46:36:e8:fb:de:16:2a:60:0d:76:0b:
         2a:af:fa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:11:05 2025 by rpki-client