Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a633030303a3a2f33342d3334203d3e20323636333032.roa
File:                     323830343a333562383a633030303a3a2f33342d3334203d3e20323636333032.roa (raw, json)
Hash identifier:          RbrWG3Jy3wrBdl4JtbR3Qgh2F0dz0ypaIDZRIOu6r6w=
Subject key identifier:   FE:BC:22:5B:77:02:89:60:2F:74:63:8D:44:92:53:55:71:3D:59:E2
Certificate issuer:       /CN=180D5A022BF9B64C2D3DB9A99B100E4173AF515C
Certificate serial:       09AA499A5944F2C86F5DBE389D206CA887E66DFB
Authority key identifier: 18:0D:5A:02:2B:F9:B6:4C:2D:3D:B9:A9:9B:10:0E:41:73:AF:51:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a633030303a3a2f33342d3334203d3e20323636333032.roa
Signing time:             Tue 08 Jul 2025 13:58:14 +0000
ROA not before:           Tue 08 Jul 2025 13:53:14 +0000
ROA not after:            Tue 07 Jul 2026 13:58:14 +0000
asID:                     266302
IP address blocks:        2804:35b8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.crl
                          rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:aa:49:9a:59:44:f2:c8:6f:5d:be:38:9d:20:6c:a8:87:e6:6d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=180D5A022BF9B64C2D3DB9A99B100E4173AF515C
        Validity
            Not Before: Jul  8 13:53:14 2025 GMT
            Not After : Jul  7 13:58:14 2026 GMT
        Subject: CN=FEBC225B770289602F74638D44925355713D59E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:6c:e7:4b:0d:20:0a:f8:9e:8a:53:31:32:
                    ee:2d:14:93:e3:88:ba:95:47:8d:e4:1f:1b:b9:00:
                    53:4e:18:f5:6f:e6:5c:ac:ac:d3:24:83:e6:d4:bc:
                    28:aa:4e:2d:80:0e:06:bb:f8:32:d7:bf:4d:ea:91:
                    c8:cc:e9:e2:2f:e3:0b:ac:c1:5a:80:b2:73:8f:bd:
                    32:57:f9:e5:0f:72:42:81:03:2d:c2:e6:e6:98:5a:
                    fe:3f:38:7d:8b:76:a0:f0:3c:38:25:f6:89:94:b1:
                    a5:b6:c0:93:ae:28:8c:1f:c6:a2:89:dc:11:ce:aa:
                    4d:e3:97:04:b2:e2:55:61:a7:ef:1e:f5:30:36:74:
                    be:e9:c7:af:b8:87:7d:28:34:85:23:67:fe:4c:c0:
                    1e:56:27:92:1a:c2:25:a9:47:72:1b:f2:a0:a8:2e:
                    aa:0b:6c:53:25:c1:ea:ae:c0:e0:51:53:9f:1b:1b:
                    a3:c8:ff:b9:e2:41:33:47:b2:9c:38:99:3c:13:06:
                    f0:fb:50:3b:f3:2a:61:a8:85:62:92:7e:95:25:33:
                    bd:fc:65:58:0e:9e:63:4a:9f:af:eb:dd:a5:6a:79:
                    49:a9:65:33:a0:ed:ff:48:ea:54:58:ad:5f:b0:86:
                    43:4d:ee:1d:e4:0f:cf:0d:16:ff:3d:db:ce:96:d4:
                    e9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BC:22:5B:77:02:89:60:2F:74:63:8D:44:92:53:55:71:3D:59:E2
            X509v3 Authority Key Identifier:
                keyid:18:0D:5A:02:2B:F9:B6:4C:2D:3D:B9:A9:9B:10:0E:41:73:AF:51:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a633030303a3a2f33342d3334203d3e20323636333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35b8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a2:08:0f:4d:dd:73:5d:c3:61:7d:88:71:3b:0e:c6:4b:3d:ea:
         83:b4:18:ec:78:32:07:c8:c0:08:45:72:dc:4b:ab:f6:1e:51:
         3b:52:23:72:06:2e:1a:61:0b:4d:07:4c:bd:b7:40:ae:c8:71:
         4b:f5:af:a5:88:e1:47:d6:a3:aa:fb:c5:9e:a3:ca:9a:93:fe:
         1b:74:cc:47:62:1f:bd:a6:4c:9c:cc:b8:78:c1:37:1c:50:2f:
         ea:af:d7:ea:0c:fc:68:96:91:35:c8:80:3b:ef:f0:0b:73:1a:
         bd:56:85:7d:5c:ac:4e:92:54:49:a1:10:69:79:d6:26:a5:40:
         05:76:66:68:6f:a4:7b:60:51:20:b7:ec:0e:7b:d4:10:5f:dc:
         39:4c:d4:ad:78:fd:05:bc:ba:7e:09:aa:2d:2e:0e:59:86:5e:
         3d:28:41:bc:86:f1:1e:eb:b0:fd:4b:59:24:b3:dd:48:c5:8b:
         94:a9:ec:0e:46:70:58:cc:5f:59:4c:c6:b1:b5:5d:fe:b4:88:
         06:2b:48:09:95:56:60:fe:40:30:fd:7e:e9:2b:ae:6a:db:7f:
         e9:93:c0:9c:99:6f:67:6d:c6:5c:2d:3b:4f:00:f5:44:2b:a1:
         99:3d:dd:3a:5c:0c:43:0e:db:2f:35:bb:9b:aa:72:c7:0a:06:
         ab:05:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:46:48 2025 by rpki-client