Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/323830343a363235383a3a2f33322d3334203d3e20323639323931.roa
File:                     323830343a363235383a3a2f33322d3334203d3e20323639323931.roa (raw, json)
Hash identifier:          4i35/DDK212Z4khUOosAUbxmpZ/wFg45Y7cXSY+E8/w=
Subject key identifier:   22:5C:4D:90:55:A6:5B:B8:DA:89:CA:E5:F1:F2:52:FF:2F:F3:C2:DA
Certificate issuer:       /CN=24DF93832FF71F76C53D63DCFDF3B5BB6879ED76
Certificate serial:       63468F3C4F0F9746DC5001CCF5AAEB9F6FF2997F
Authority key identifier: 24:DF:93:83:2F:F7:1F:76:C5:3D:63:DC:FD:F3:B5:BB:68:79:ED:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/323830343a363235383a3a2f33322d3334203d3e20323639323931.roa
Signing time:             Thu 10 Jul 2025 18:20:25 +0000
ROA not before:           Thu 10 Jul 2025 18:15:25 +0000
ROA not after:            Thu 09 Jul 2026 18:20:25 +0000
asID:                     269291
IP address blocks:        2804:6258::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl
                          rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 09:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:46:8f:3c:4f:0f:97:46:dc:50:01:cc:f5:aa:eb:9f:6f:f2:99:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24DF93832FF71F76C53D63DCFDF3B5BB6879ED76
        Validity
            Not Before: Jul 10 18:15:25 2025 GMT
            Not After : Jul  9 18:20:25 2026 GMT
        Subject: CN=225C4D9055A65BB8DA89CAE5F1F252FF2FF3C2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:10:b4:83:02:c4:ca:ca:96:00:f1:66:82:
                    9a:9f:a6:97:7a:f8:2b:89:f1:9c:5d:a8:6d:9d:f1:
                    dd:f7:32:ca:97:39:c8:97:ef:4a:e3:06:b2:76:7e:
                    68:4f:c1:c1:8b:ca:f3:d3:47:ad:18:c0:4f:88:75:
                    90:ef:21:f9:52:26:17:d8:87:90:4f:39:4a:d8:0d:
                    87:74:cc:d4:6f:3a:ea:84:b6:9a:b6:b6:cd:b0:f9:
                    a0:e9:00:b1:11:1f:6a:a8:1c:7d:3d:7e:41:31:38:
                    3c:28:fe:f3:7a:63:a5:ce:f6:1b:50:15:9f:28:73:
                    6b:8f:b1:4f:a0:80:50:19:7f:7d:ca:1f:b4:26:5d:
                    7d:d8:d1:70:3f:78:6b:32:49:49:5e:fb:a5:cb:2c:
                    ca:59:4a:0a:7a:23:f7:f2:49:06:08:9b:26:3b:b1:
                    93:a9:2e:68:b5:e6:8a:0e:3c:b6:c3:e0:04:81:3e:
                    f4:a8:8d:31:c8:29:3d:b2:d9:89:e4:60:98:1e:17:
                    12:f8:17:68:24:b7:ed:9a:5b:37:27:ce:69:ae:0e:
                    83:cc:55:21:c6:80:2b:1a:5e:64:e8:ec:cf:54:49:
                    14:aa:12:cb:07:92:e8:6f:86:63:34:11:bd:c9:89:
                    0e:fc:a4:f3:45:da:f0:3c:2a:52:26:bb:27:f3:ee:
                    f6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5C:4D:90:55:A6:5B:B8:DA:89:CA:E5:F1:F2:52:FF:2F:F3:C2:DA
            X509v3 Authority Key Identifier:
                keyid:24:DF:93:83:2F:F7:1F:76:C5:3D:63:DC:FD:F3:B5:BB:68:79:ED:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/323830343a363235383a3a2f33322d3334203d3e20323639323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6258::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:59:d2:d6:e0:fe:fe:d6:8e:60:bc:5e:27:08:86:cc:b2:3d:
         54:58:06:af:38:21:c2:25:46:06:d8:ae:46:32:f0:7a:30:69:
         ea:6d:92:bf:c9:d9:84:8c:c8:74:70:4b:33:81:67:c4:92:9e:
         5a:e4:17:b0:41:73:13:61:01:f4:d3:40:52:cb:bf:f7:c9:d6:
         50:a9:68:cb:d0:3f:d4:76:be:62:01:db:2a:3e:45:0e:2e:78:
         6c:a6:56:a3:b2:b7:97:e6:b1:ec:51:67:e7:a5:fd:51:ca:07:
         70:8f:15:18:86:95:f9:69:ea:67:95:76:b1:af:05:35:04:fa:
         01:e4:42:6e:90:27:30:4d:66:a1:09:da:11:06:8a:04:76:64:
         cf:15:89:4f:b1:54:b7:07:59:64:29:05:46:4f:13:80:8f:5e:
         60:55:00:a6:18:ee:58:9b:0d:13:b1:51:38:dd:59:c8:ff:90:
         6d:c9:c6:2d:97:47:7b:ee:c2:7a:28:bb:1c:7c:ea:63:47:ce:
         98:87:a4:92:34:d3:75:ef:54:71:63:ca:b0:36:0e:73:39:25:
         a9:c4:2b:90:7f:fa:24:26:fa:2c:40:23:20:b0:8d:68:e6:e8:
         28:e2:88:de:bf:47:90:bb:e3:74:7a:c4:29:63:47:61:f6:80:
         36:0f:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:04:46 2025 by rpki-client