Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/323830343a393462383a3a2f33322d3438203d3e20323734343736.roa
File:                     323830343a393462383a3a2f33322d3438203d3e20323734343736.roa (raw, json)
Hash identifier:          nxxaSm6ijnAlHiDlW+pF2qez4T+Ed89O37FeulJZ94w=
Subject key identifier:   D7:11:29:4E:D4:E8:F7:01:61:8F:FF:E6:9C:57:70:4A:3C:21:17:D6
Certificate issuer:       /CN=97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958
Certificate serial:       57EEDF4BBDF63FE6D6A4B66E76D1C418F0700157
Authority key identifier: 97:CC:C2:E8:ED:2C:45:CB:A6:D5:90:F1:1C:C3:B7:82:E1:FD:C9:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/323830343a393462383a3a2f33322d3438203d3e20323734343736.roa
Signing time:             Fri 25 Jul 2025 13:42:41 +0000
ROA not before:           Fri 25 Jul 2025 13:37:41 +0000
ROA not after:            Fri 24 Jul 2026 13:42:41 +0000
asID:                     274476
IP address blocks:        2804:94b8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.crl
                          rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ee:df:4b:bd:f6:3f:e6:d6:a4:b6:6e:76:d1:c4:18:f0:70:01:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958
        Validity
            Not Before: Jul 25 13:37:41 2025 GMT
            Not After : Jul 24 13:42:41 2026 GMT
        Subject: CN=D711294ED4E8F701618FFFE69C57704A3C2117D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:ec:7d:83:c3:5f:e3:1b:23:65:82:65:94:
                    4e:7a:45:dd:42:d0:10:af:bd:05:b9:71:f0:37:69:
                    14:73:4c:7a:3b:2b:ad:df:87:2a:fa:43:9d:88:37:
                    f7:49:71:1a:e4:43:ed:80:be:0d:7d:99:37:89:0d:
                    fc:28:5a:f3:52:f8:e8:83:44:68:a5:75:bb:a0:df:
                    5b:27:11:9b:70:5f:15:02:37:72:13:2b:98:f4:46:
                    c0:5e:c2:55:9c:3d:34:5e:e7:1c:79:28:38:77:6d:
                    ff:70:cf:bc:53:7b:d6:6a:96:11:73:2d:eb:66:f3:
                    6f:54:48:7b:83:05:0e:e1:8c:5c:78:7f:99:71:4d:
                    65:4b:b1:d0:41:ce:3a:ed:fb:4b:0b:83:0d:67:ab:
                    b4:dc:33:ff:6e:54:51:17:aa:4d:ae:6b:d8:ba:ee:
                    d6:7e:2b:7a:2b:66:1f:47:18:eb:59:ea:d1:f4:46:
                    ca:ca:ed:d7:92:0b:78:67:ad:dc:70:bc:36:72:36:
                    a9:03:a1:3d:cf:9d:37:10:99:6c:0f:c2:3c:b6:9f:
                    34:ed:5a:e7:24:c6:1d:cd:4a:f3:11:cf:20:6c:9f:
                    7f:b2:09:7e:12:86:0e:bd:82:dc:29:0b:63:e7:91:
                    13:3f:56:e1:bf:d9:c1:91:6b:84:7b:b5:27:09:cd:
                    b8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:11:29:4E:D4:E8:F7:01:61:8F:FF:E6:9C:57:70:4A:3C:21:17:D6
            X509v3 Authority Key Identifier:
                keyid:97:CC:C2:E8:ED:2C:45:CB:A6:D5:90:F1:1C:C3:B7:82:E1:FD:C9:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/323830343a393462383a3a2f33322d3438203d3e20323734343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:94b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:36:7f:06:84:ba:37:f7:22:67:50:59:4e:af:55:a5:24:27:
         1c:61:fc:1e:be:b8:a6:50:87:ef:2d:e2:e0:5b:fd:ec:18:a8:
         5f:3d:91:e6:71:56:a5:f2:db:c4:01:a1:a3:7a:ab:e1:f3:28:
         3c:c8:44:4d:ee:3f:9f:0e:47:0e:1c:91:8d:d2:ae:a1:be:fd:
         88:9b:f7:08:ff:23:04:5d:b3:b1:9e:d1:b9:de:83:43:e9:6b:
         e3:36:95:2e:0b:22:b5:9d:3d:d8:79:33:e4:a9:27:ca:26:89:
         3e:3b:92:97:07:d7:6d:1d:ce:44:56:ea:6c:9e:80:1e:92:d1:
         4f:31:3a:c0:2f:f7:2f:c1:40:64:39:fb:64:d6:51:0f:48:ed:
         cc:d2:e2:16:ee:e2:1f:14:cf:97:50:c7:fb:ee:c7:80:bc:3d:
         f6:ae:f7:fa:26:39:8c:23:cf:bf:32:12:bd:2f:b6:ef:9a:28:
         83:d9:35:40:69:23:3f:28:93:3a:f5:4a:03:2f:82:70:95:34:
         4a:6b:0c:9b:42:aa:1a:6a:09:62:7c:5f:90:ab:b3:b0:d9:96:
         9b:c2:9e:f6:63:c1:09:24:f3:4f:49:4e:51:9d:8d:32:57:72:
         13:3a:28:a9:25:d7:9d:0b:41:c6:81:d5:9d:92:ae:b0:e0:b8:
         74:79:a3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:48:14 2025 by rpki-client