Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/323830343a336434383a3a2f33322d3438203d3e20323636323635.roa
File:                     323830343a336434383a3a2f33322d3438203d3e20323636323635.roa (raw, json)
Hash identifier:          7pe9zgviJUqtOa6vxaSjX4/wyaVKMC9jtGBCJeotchY=
Subject key identifier:   B0:DA:8D:35:7F:5A:D7:48:40:B1:8A:08:11:8B:C9:7D:E3:FD:4C:23
Certificate issuer:       /CN=61B932CD849CE672D7ADF5C35F76FC83A060268C
Certificate serial:       4C81FEAE4EC07E607F1CAB3341F6B03579E2AA5F
Authority key identifier: 61:B9:32:CD:84:9C:E6:72:D7:AD:F5:C3:5F:76:FC:83:A0:60:26:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/323830343a336434383a3a2f33322d3438203d3e20323636323635.roa
Signing time:             Thu 12 Jun 2025 13:05:00 +0000
ROA not before:           Thu 12 Jun 2025 13:00:00 +0000
ROA not after:            Thu 11 Jun 2026 13:05:00 +0000
asID:                     266265
IP address blocks:        2804:3d48::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.crl
                          rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 06:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:81:fe:ae:4e:c0:7e:60:7f:1c:ab:33:41:f6:b0:35:79:e2:aa:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B932CD849CE672D7ADF5C35F76FC83A060268C
        Validity
            Not Before: Jun 12 13:00:00 2025 GMT
            Not After : Jun 11 13:05:00 2026 GMT
        Subject: CN=B0DA8D357F5AD74840B18A08118BC97DE3FD4C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:04:98:77:e7:fd:82:3d:58:1c:3c:eb:ff:
                    3e:8f:66:b6:1c:30:7c:d1:0d:69:53:5d:54:82:fb:
                    84:46:c0:4e:e5:9e:8e:98:4f:84:3b:fa:2e:7d:02:
                    75:5e:1d:5d:d9:2c:34:10:32:04:dc:46:e3:bc:0f:
                    6d:6c:16:19:df:0d:53:e7:55:06:8c:3f:d9:e0:83:
                    e5:52:e1:1f:48:0f:a3:6c:55:a3:15:69:14:5d:6f:
                    33:48:bd:5b:56:9d:c4:24:9f:1a:1b:8f:a0:e1:75:
                    cd:60:05:33:6f:d3:f6:ec:80:49:a5:ca:ff:78:c3:
                    a2:20:6c:c4:a9:b3:35:91:b1:9a:b4:e3:d5:3e:bb:
                    af:62:77:bc:cc:9f:0a:6d:c9:32:88:cf:09:9d:8c:
                    f7:3f:28:40:13:c7:93:c6:6d:b2:ac:39:b4:b8:bb:
                    28:3e:94:6c:53:57:27:c1:73:7e:fa:ec:40:b1:9c:
                    6f:2a:4e:3e:5c:ce:20:0c:f6:3c:ff:d9:f0:d0:ef:
                    eb:9b:48:71:d5:be:39:0b:63:1f:3f:b4:1d:76:1e:
                    66:16:bc:4a:d6:38:5b:1c:6a:82:4c:7a:2e:3e:17:
                    dc:b3:85:4c:9d:57:09:b2:d7:cc:33:75:0b:fe:43:
                    48:5a:6e:22:2b:d0:c9:46:5c:fa:fe:47:c5:80:82:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DA:8D:35:7F:5A:D7:48:40:B1:8A:08:11:8B:C9:7D:E3:FD:4C:23
            X509v3 Authority Key Identifier:
                keyid:61:B9:32:CD:84:9C:E6:72:D7:AD:F5:C3:5F:76:FC:83:A0:60:26:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/323830343a336434383a3a2f33322d3438203d3e20323636323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d48::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:8d:52:38:8b:9e:b0:23:0f:bf:d6:d5:29:7b:1d:1b:12:1c:
         2f:20:2d:d3:e3:fc:67:44:59:63:8f:f6:a7:d7:90:16:14:ce:
         4a:88:ac:d4:57:db:7c:22:d4:5d:33:3c:5f:dc:8e:4b:6e:dd:
         72:ba:96:9e:80:db:d3:87:f0:50:ad:b9:98:0e:2f:7e:e1:5b:
         4d:bc:e7:5a:b5:21:b3:2e:18:97:70:d4:98:48:8e:68:d9:19:
         33:fb:e2:42:33:5a:16:1e:c1:4b:03:51:0d:c5:3f:fa:40:04:
         be:79:7e:f6:dd:6e:4f:15:45:bd:c8:ef:88:3a:97:53:5b:66:
         5c:04:a7:8b:98:1a:3a:f5:72:1a:99:90:86:52:b2:62:4f:1e:
         f6:67:c7:a6:45:9d:72:57:fe:dd:35:86:f5:3a:fb:ec:21:85:
         d2:5e:05:c6:44:9d:6b:04:19:f6:cd:40:2d:79:f3:0d:0b:a4:
         2c:2b:6a:39:d2:8c:3b:be:4e:0f:46:f5:9f:69:d0:fe:22:1c:
         38:a8:76:68:6e:76:70:a6:c4:bd:94:fa:42:26:15:50:5c:b8:
         8f:e2:03:75:04:92:5d:87:25:95:91:b4:59:b0:a5:ad:e9:10:
         9a:e0:b9:9e:5a:d5:23:03:ff:32:1e:a1:a0:9a:3d:91:6e:49:
         22:c6:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:38:52 2025 by rpki-client