Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/323830343a343761383a3a2f33322d313238203d3e20323637303639.roa
File:                     323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (raw, json)
Hash identifier:          Qm7ic9QbJbc/cY0emIrd6a/+a6SuLFQyAlceLdqHkM4=
Subject key identifier:   7E:1C:EF:C2:E8:8F:45:0B:FE:23:76:B0:E8:01:68:44:9F:24:65:66
Certificate issuer:       /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78
Certificate serial:       1F59AC9C3AC43F5BE5853736F6F3F278F38B9FF4
Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/323830343a343761383a3a2f33322d313238203d3e20323637303639.roa
Signing time:             Fri 01 Aug 2025 14:52:27 +0000
ROA not before:           Fri 01 Aug 2025 14:47:27 +0000
ROA not after:            Fri 31 Jul 2026 14:52:27 +0000
asID:                     267069
IP address blocks:        2804:47a8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl
                          rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 04:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:59:ac:9c:3a:c4:3f:5b:e5:85:37:36:f6:f3:f2:78:f3:8b:9f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78
        Validity
            Not Before: Aug  1 14:47:27 2025 GMT
            Not After : Jul 31 14:52:27 2026 GMT
        Subject: CN=7E1CEFC2E88F450BFE2376B0E80168449F246566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:f9:0f:55:92:35:42:b4:a5:7b:21:c5:67:
                    ca:84:97:03:1a:17:20:d6:b9:aa:a4:42:9d:9a:e4:
                    ad:62:ac:7e:a1:f4:fe:9c:d9:76:c7:88:cc:f7:4a:
                    7d:80:da:ab:e6:0b:1d:e1:1d:06:c0:96:34:ac:d0:
                    9b:a2:b0:d6:b8:d5:98:38:29:db:8a:07:47:96:46:
                    82:7b:54:0b:81:b7:85:7c:95:d7:5d:b2:d3:46:82:
                    e7:b5:0a:d3:6a:c8:b5:c7:32:2c:73:9f:b2:66:7b:
                    e5:e7:a0:d3:59:69:9a:ef:98:41:e8:94:b5:78:48:
                    4b:83:c7:78:6a:24:81:68:6f:1c:59:b8:40:df:bf:
                    71:9c:d7:08:4b:b8:b3:29:7d:3b:99:6c:fb:d8:2e:
                    61:b5:3d:ca:d1:0b:3c:1e:78:18:b6:d5:c4:38:c9:
                    f6:2f:b9:fc:81:ff:f2:79:ac:f3:b6:b8:04:c0:67:
                    68:1a:9f:21:2e:3b:99:f4:45:67:0a:15:0c:df:66:
                    55:0d:68:42:3d:07:64:d4:e6:b7:c3:55:12:4d:5e:
                    71:eb:7b:8c:7d:bd:44:dc:d5:7d:7b:ee:62:61:e8:
                    20:3b:0e:81:14:1d:a6:e0:2e:82:e0:5d:62:95:9f:
                    14:72:78:47:a3:e4:8d:96:4a:53:64:6c:5f:37:13:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1C:EF:C2:E8:8F:45:0B:FE:23:76:B0:E8:01:68:44:9F:24:65:66
            X509v3 Authority Key Identifier:
                keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/323830343a343761383a3a2f33322d313238203d3e20323637303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:8b:2c:25:9e:3c:c2:b4:42:87:99:49:1e:74:01:78:ce:8f:
         d4:93:64:07:07:e3:43:e5:9b:51:04:86:9c:1c:ee:28:3a:23:
         06:0f:51:8a:61:35:ee:dc:39:0e:5f:f9:1f:0e:48:36:7b:d7:
         60:1b:93:1b:dd:ba:df:e2:c8:b7:c1:98:f3:db:77:34:0d:93:
         ca:00:3d:a2:94:2a:72:ee:26:ed:83:ad:97:1a:15:e0:a6:c0:
         78:15:75:55:d0:dd:ad:a4:1d:90:91:f8:e8:f3:89:b5:82:6c:
         83:41:96:b7:15:48:fe:d7:6a:ca:40:98:db:9f:82:48:47:7e:
         f2:e4:93:61:12:f8:42:82:df:cf:65:82:4d:d0:12:58:f1:8a:
         68:1f:36:ab:e0:92:b0:78:c4:48:9b:c1:4b:08:6d:ab:45:24:
         32:21:d7:d0:56:61:6c:aa:d6:71:eb:98:7c:f8:88:29:34:a0:
         52:eb:2f:f3:18:0f:bf:25:5d:8b:7e:ef:15:e6:36:ea:23:84:
         b1:21:53:17:85:e9:37:09:19:3b:1b:fd:42:ec:ea:26:ec:18:
         97:3a:0e:66:78:69:5e:3b:78:f9:6a:94:10:07:18:20:3a:69:
         24:85:09:29:56:ec:f3:de:b3:63:56:7b:82:25:29:83:de:40:
         93:64:55:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:56:07 2025 by rpki-client