Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d313238203d3e20323634313935.roa
File:                     323830343a323430303a3a2f33322d313238203d3e20323634313935.roa (raw, json)
Hash identifier:          Q6xouIZuqaK3xSRzENUcoe0aYC9IDHCAvsXKbEOX8kc=
Subject key identifier:   39:EA:30:90:98:84:88:6C:95:AF:14:A7:A2:05:11:A7:C6:0F:D4:87
Certificate issuer:       /CN=6EE8FCD75FFFB8D9F7409631A6E3411524786230
Certificate serial:       1420FC7CE76DD8226A7489D70D00E5BC3BC488AD
Authority key identifier: 6E:E8:FC:D7:5F:FF:B8:D9:F7:40:96:31:A6:E3:41:15:24:78:62:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE8FCD75FFFB8D9F7409631A6E3411524786230.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d313238203d3e20323634313935.roa
Signing time:             Tue 05 Aug 2025 16:05:56 +0000
ROA not before:           Tue 05 Aug 2025 16:00:56 +0000
ROA not after:            Tue 04 Aug 2026 16:05:56 +0000
asID:                     264195
IP address blocks:        2804:2400::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/6EE8FCD75FFFB8D9F7409631A6E3411524786230.crl
                          rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/6EE8FCD75FFFB8D9F7409631A6E3411524786230.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE8FCD75FFFB8D9F7409631A6E3411524786230.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 16:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:20:fc:7c:e7:6d:d8:22:6a:74:89:d7:0d:00:e5:bc:3b:c4:88:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE8FCD75FFFB8D9F7409631A6E3411524786230
        Validity
            Not Before: Aug  5 16:00:56 2025 GMT
            Not After : Aug  4 16:05:56 2026 GMT
        Subject: CN=39EA30909884886C95AF14A7A20511A7C60FD487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3a:9f:74:d0:30:19:f2:90:4d:b4:5c:ec:eb:
                    fb:8e:04:5c:73:7a:68:94:cc:64:fa:85:69:4e:24:
                    f0:16:89:b2:c6:c3:1a:b2:9a:f3:83:e8:68:75:2a:
                    ca:52:04:3d:f9:6e:d3:51:5d:3f:81:5f:0e:c6:a3:
                    9b:62:a1:e3:27:99:38:08:e6:18:8f:c2:3d:af:d2:
                    58:d5:ce:9d:cd:10:b0:ab:8a:c1:5f:72:a9:71:e1:
                    fc:fa:83:1c:47:fa:5c:1d:d1:01:ed:e0:45:a9:e6:
                    0c:6a:80:03:3b:6d:45:8f:52:a0:b8:4b:78:0d:a2:
                    14:77:2f:e9:be:ea:14:d9:0c:00:e0:67:68:30:bb:
                    8c:43:7d:0c:e9:cb:4d:f4:a2:6e:bb:71:86:86:81:
                    ae:9c:4c:41:e8:7f:cb:b1:5a:e4:5e:55:a7:ff:fa:
                    77:8f:3b:97:ec:9d:03:f3:46:c8:af:3e:22:15:4a:
                    09:2c:3c:e8:96:23:6a:de:e9:8d:a5:19:5b:ce:37:
                    72:1d:21:00:65:c2:9a:8c:6a:d2:b5:a9:7d:30:9d:
                    a8:3d:3d:39:bd:fc:31:9a:02:b3:ed:d2:4e:8e:87:
                    6a:65:fa:fb:26:8b:7e:73:8e:d9:38:7c:eb:7e:59:
                    fa:21:38:9f:75:6e:0f:e4:9f:51:1b:1b:f3:02:13:
                    c7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EA:30:90:98:84:88:6C:95:AF:14:A7:A2:05:11:A7:C6:0F:D4:87
            X509v3 Authority Key Identifier:
                keyid:6E:E8:FC:D7:5F:FF:B8:D9:F7:40:96:31:A6:E3:41:15:24:78:62:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/6EE8FCD75FFFB8D9F7409631A6E3411524786230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE8FCD75FFFB8D9F7409631A6E3411524786230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d313238203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2400::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:81:0c:e6:c6:d0:24:b7:57:98:10:ba:68:65:72:13:08:a0:
         dc:44:de:32:bc:36:99:a2:30:9f:5b:71:c6:9e:36:fb:95:3d:
         f0:05:45:ab:02:27:80:c0:4f:55:d4:fb:bb:e2:bb:1d:bb:ce:
         77:24:e2:59:32:fa:73:04:a8:04:ae:69:57:98:ac:79:4a:6e:
         d8:f6:a5:1c:6a:00:2b:d7:99:23:d6:90:ed:56:80:43:cb:a5:
         0e:18:03:9f:59:c8:63:ce:4f:69:07:01:9e:b3:04:f5:0b:51:
         2b:5a:ce:6f:de:79:a3:d2:4e:67:61:67:5a:ed:45:38:5f:fd:
         f3:22:d0:0c:90:05:a7:55:07:6f:e1:d9:2f:c2:9c:5d:3d:0e:
         9f:4f:9b:07:51:85:a5:64:92:11:89:6d:f1:41:50:5e:fd:78:
         a1:f3:10:ff:47:66:9f:57:95:84:2b:4b:87:05:99:69:d9:a2:
         87:a7:a4:9f:81:95:d8:db:92:a6:a0:68:f2:18:8e:4e:1f:5d:
         d4:8c:16:82:f1:04:b8:c9:ea:cd:6b:78:cb:9a:44:19:16:63:
         23:62:14:6e:ab:5f:25:11:e5:51:2d:e0:7d:0f:85:dd:ca:b1:
         49:34:05:fa:5f:c3:04:13:67:25:72:c5:23:b2:b9:38:92:a0:
         59:3c:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:57:46 2025 by rpki-client