Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/323830343a323565383a3a2f33322d3336203d3e20323634333130.roa
File:                     323830343a323565383a3a2f33322d3336203d3e20323634333130.roa (raw, json)
Hash identifier:          KIWkOqb286BS+K6ocIsAVM/Nq3MouxlHvvL1LQBbLJ4=
Subject key identifier:   C2:FC:3D:06:BA:42:B0:A0:71:9B:2A:42:FB:A4:FB:A1:FA:DB:2E:37
Certificate issuer:       /CN=ADBBDC22DFFC572346705DC21FD364B79726B65C
Certificate serial:       7AB2618753A30D580C4EE996AFE86F5C0EBAAB9B
Authority key identifier: AD:BB:DC:22:DF:FC:57:23:46:70:5D:C2:1F:D3:64:B7:97:26:B6:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADBBDC22DFFC572346705DC21FD364B79726B65C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/323830343a323565383a3a2f33322d3336203d3e20323634333130.roa
Signing time:             Wed 09 Jul 2025 17:18:23 +0000
ROA not before:           Wed 09 Jul 2025 17:13:23 +0000
ROA not after:            Wed 08 Jul 2026 17:18:23 +0000
asID:                     264310
IP address blocks:        2804:25e8::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/ADBBDC22DFFC572346705DC21FD364B79726B65C.crl
                          rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/ADBBDC22DFFC572346705DC21FD364B79726B65C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADBBDC22DFFC572346705DC21FD364B79726B65C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 06:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b2:61:87:53:a3:0d:58:0c:4e:e9:96:af:e8:6f:5c:0e:ba:ab:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADBBDC22DFFC572346705DC21FD364B79726B65C
        Validity
            Not Before: Jul  9 17:13:23 2025 GMT
            Not After : Jul  8 17:18:23 2026 GMT
        Subject: CN=C2FC3D06BA42B0A0719B2A42FBA4FBA1FADB2E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:88:a3:81:5b:76:89:0d:f9:cd:42:b6:1d:
                    db:ca:2d:ae:d5:03:d6:f3:2e:d6:a4:5a:57:94:54:
                    45:82:32:45:54:a5:dd:3c:82:52:82:ca:cc:ab:ce:
                    84:f2:59:fd:84:3d:d4:b3:0a:3f:ff:cc:6d:72:bd:
                    a7:2a:8f:11:40:fd:11:a3:38:4f:7e:7f:55:d5:0f:
                    90:30:bb:50:b7:df:e7:74:ad:c6:e0:09:b9:81:c6:
                    62:4d:8f:64:d7:15:b6:e3:c4:5d:9f:d2:6f:c9:ec:
                    fa:1b:41:06:6f:d8:b3:a2:20:de:f5:3a:4b:fa:2c:
                    c7:bb:ca:08:4f:5a:50:72:29:cb:cf:be:4e:25:bd:
                    86:25:7c:32:e2:ed:63:7f:4c:2d:33:fb:f7:36:c4:
                    11:21:9c:ce:af:28:21:34:f6:fa:60:f6:ec:4b:da:
                    32:cd:74:8e:08:9f:db:f6:0e:b3:14:4b:5d:87:c0:
                    8d:10:13:51:13:7f:6a:b7:bc:e0:6b:d5:27:55:21:
                    ae:9d:fe:13:7b:49:03:cb:95:3f:e2:d0:a2:8a:a6:
                    42:5a:01:2a:78:af:43:79:5c:53:df:2e:79:df:ce:
                    d5:8c:97:26:43:e9:4e:2e:9d:63:1a:57:c1:1b:f8:
                    90:45:42:42:b4:42:0c:c1:39:99:92:7e:e2:3f:a7:
                    0d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FC:3D:06:BA:42:B0:A0:71:9B:2A:42:FB:A4:FB:A1:FA:DB:2E:37
            X509v3 Authority Key Identifier:
                keyid:AD:BB:DC:22:DF:FC:57:23:46:70:5D:C2:1F:D3:64:B7:97:26:B6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/ADBBDC22DFFC572346705DC21FD364B79726B65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADBBDC22DFFC572346705DC21FD364B79726B65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/323830343a323565383a3a2f33322d3336203d3e20323634333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:a1:d0:cf:6c:dc:b3:fa:27:db:97:0e:c7:6e:8b:ee:cd:6e:
         49:1f:52:6c:1f:4d:f2:27:77:f8:3d:a8:8e:ca:1d:2d:7b:ad:
         15:31:68:db:9c:09:74:ba:b7:b8:83:20:9c:f3:c0:bb:95:b6:
         a8:be:85:e6:1b:83:b6:d4:74:45:0e:f8:bc:e8:d3:28:63:55:
         c8:d9:33:01:a2:fd:55:37:13:f8:d5:25:46:8f:6c:59:e8:28:
         0c:b6:20:98:48:0b:d5:00:cb:27:23:fa:9f:de:78:1c:04:c9:
         72:a4:95:85:d7:bc:47:e2:75:d1:36:8a:26:af:bc:e0:6d:59:
         fb:b4:b6:30:1d:85:2a:33:ef:ef:5d:ca:f1:2a:f8:33:07:e6:
         71:d4:d2:e2:c1:bf:51:33:5a:69:44:d3:ff:3c:02:c4:d8:2d:
         6b:f5:b6:77:00:b8:53:e6:09:94:dc:f5:1f:f1:00:1a:3d:57:
         a3:57:b0:04:fe:e7:d4:a9:eb:1d:31:7c:c1:30:6e:c4:4c:85:
         45:3b:22:36:70:20:0d:fe:ac:1f:63:82:5f:58:07:81:04:49:
         99:f4:ce:ff:f4:13:6d:bc:32:99:a0:f7:f5:15:a4:b6:49:02:
         e7:58:aa:59:d2:ad:37:1b:75:89:5b:17:0e:09:fe:aa:07:0e:
         c8:09:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:25:04 2025 by rpki-client