Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d3332203d3e203631373536.roa
File:                     323830343a316265383a3a2f33322d3332203d3e203631373536.roa (raw, json)
Hash identifier:          gjYR3lWRGiJJxuwH/+0i6Q87/18K+L4o4fePaKBOJ1w=
Subject key identifier:   7B:02:9D:2C:EA:96:69:25:C8:1A:FC:F5:1B:46:3F:AC:2D:C8:5A:7A
Certificate issuer:       /CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
Certificate serial:       0AD82D902D1C642C1FF70B63DAFE164EBD7C3B25
Authority key identifier: 06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d3332203d3e203631373536.roa
Signing time:             Thu 12 Jun 2025 20:44:40 +0000
ROA not before:           Thu 12 Jun 2025 20:39:40 +0000
ROA not after:            Thu 11 Jun 2026 20:44:40 +0000
asID:                     61756
IP address blocks:        2804:1be8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 08:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d8:2d:90:2d:1c:64:2c:1f:f7:0b:63:da:fe:16:4e:bd:7c:3b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
        Validity
            Not Before: Jun 12 20:39:40 2025 GMT
            Not After : Jun 11 20:44:40 2026 GMT
        Subject: CN=7B029D2CEA966925C81AFCF51B463FAC2DC85A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:5d:f2:24:78:bb:13:12:6d:0d:4c:47:cd:
                    64:52:1b:cb:ac:89:c8:7c:ec:86:6f:66:45:19:34:
                    a3:b6:a8:23:61:22:7b:e4:8d:dc:f0:99:15:02:a3:
                    be:68:fb:61:73:cf:61:af:f2:c7:02:e5:34:81:7a:
                    e7:c3:fd:5b:57:82:70:61:51:be:37:08:16:87:90:
                    69:d8:89:c5:99:ba:e1:24:8d:70:12:d4:98:c9:be:
                    4e:56:b2:a8:10:c9:bf:ad:7a:d2:6e:c0:86:f4:e3:
                    1b:51:6d:45:ac:54:8e:37:27:5e:3a:60:97:3e:10:
                    dc:67:9c:a4:ac:53:05:48:49:e2:13:30:04:8f:c4:
                    43:64:7b:dc:5f:ac:97:e4:ff:74:7b:10:db:7d:59:
                    ea:47:84:71:d7:38:ed:46:8e:7a:f6:0a:6a:87:14:
                    50:25:24:12:13:ec:eb:d5:f2:dc:d0:3c:bd:7f:52:
                    5d:1c:d9:1b:0d:fc:b3:c8:75:be:0a:66:02:4d:4d:
                    fd:2d:f6:2c:71:d9:e3:d4:8e:5f:e0:d2:1d:34:15:
                    d9:9d:87:56:ac:07:5a:f8:9e:14:6f:6a:61:91:9e:
                    fa:bb:6b:4d:24:91:1e:6f:b1:7f:4d:ae:fc:bf:8c:
                    a1:f7:98:1c:18:cf:77:90:e4:1d:d9:b0:a2:83:e2:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:02:9D:2C:EA:96:69:25:C8:1A:FC:F5:1B:46:3F:AC:2D:C8:5A:7A
            X509v3 Authority Key Identifier:
                keyid:06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d3332203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1be8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:05:4e:0a:81:23:99:9d:a1:ab:90:38:56:7d:95:07:7c:53:
         1d:f8:76:2b:94:41:0d:f9:d8:d2:15:63:7e:28:72:32:8d:49:
         24:51:e6:e4:1a:1a:18:a8:91:72:43:dc:b8:8b:b7:26:8c:d7:
         7d:07:6b:41:00:35:f0:3c:c1:0a:d8:19:24:1a:92:52:a1:d7:
         97:8b:70:6d:d0:3b:7b:42:75:e0:3b:ba:4e:d0:3b:73:96:f3:
         f7:0c:57:fd:36:80:23:90:90:d8:1a:c9:20:20:ef:e2:e3:76:
         02:b0:b2:86:cd:24:e0:27:f3:ef:28:71:39:76:b1:22:93:14:
         3a:34:a7:c5:dc:4a:28:cb:41:62:e7:af:1b:fe:9b:30:4f:b0:
         13:35:14:26:65:93:b2:e3:03:d7:f8:7c:63:a9:45:ff:0e:ae:
         cf:7f:ca:fd:06:ba:c0:27:b7:ef:94:d1:7b:dc:d2:0b:c4:9b:
         1b:bc:08:ab:71:c6:fc:72:99:e3:33:19:d3:23:39:db:79:a2:
         ef:75:54:be:be:2e:fe:c1:d6:01:bf:07:78:f2:b1:9d:d1:cf:
         53:d1:63:3f:8b:48:4f:08:1d:f7:26:6c:49:41:a5:80:bf:7b:
         b9:2a:ef:53:d4:aa:a8:21:9d:a4:ef:f5:d2:af:f4:a1:ac:40:
         7a:b3:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:08:20 2025 by rpki-client