Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/323830343a3236383a3a2f33322d3332203d3e20323632383132.roa
File:                     323830343a3236383a3a2f33322d3332203d3e20323632383132.roa (raw, json)
Hash identifier:          jDE2twTN1WPyt9CWalCGJSAdPyP8iczQatZ9rDqrfLk=
Subject key identifier:   49:66:BC:03:ED:39:A4:36:4B:DF:A8:D7:A4:DE:80:A8:FD:D1:51:E5
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       74DD428542234EB00D7CC13FB1F1D30102EFCDA6
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/323830343a3236383a3a2f33322d3332203d3e20323632383132.roa
Signing time:             Mon 14 Jul 2025 15:31:12 +0000
ROA not before:           Mon 14 Jul 2025 15:26:12 +0000
ROA not after:            Mon 13 Jul 2026 15:31:12 +0000
asID:                     262812
IP address blocks:        2804:268::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:dd:42:85:42:23:4e:b0:0d:7c:c1:3f:b1:f1:d3:01:02:ef:cd:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Jul 14 15:26:12 2025 GMT
            Not After : Jul 13 15:31:12 2026 GMT
        Subject: CN=4966BC03ED39A4364BDFA8D7A4DE80A8FDD151E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:7b:3f:dd:9f:24:e7:8f:d3:bb:1f:c8:94:
                    97:64:4d:84:6d:5b:0a:43:b4:f6:71:1f:fc:cf:fa:
                    a2:5c:e9:45:62:f1:a5:49:81:6d:1a:b8:1d:69:56:
                    32:1c:fa:22:c3:ee:d8:a9:74:07:52:1d:da:04:44:
                    a4:19:f6:32:1a:b8:49:4f:04:6b:3d:ff:3b:76:89:
                    c0:cf:07:af:ef:65:5a:77:3a:83:4f:86:69:0b:4a:
                    35:1e:a3:62:bc:32:fa:9c:96:a4:24:0d:4d:1a:ea:
                    57:f6:f4:22:69:79:45:e8:fb:65:18:77:9c:af:71:
                    0f:dc:27:77:3d:e8:5a:f4:6d:42:23:94:7d:1d:da:
                    cc:b0:b2:44:4f:7e:6c:73:6e:cf:d6:79:06:8a:fc:
                    a2:7d:15:b3:60:b3:9b:cd:72:f2:f9:45:3a:83:2c:
                    3d:2b:a1:ff:38:48:50:da:3c:75:5e:91:6c:4b:4d:
                    fe:a6:7f:ad:bb:26:64:1a:05:55:e4:f3:fc:2f:21:
                    a6:83:1b:d5:66:a8:2a:2f:4b:af:6c:46:9f:4b:47:
                    a1:cc:e4:b0:e7:d7:b8:d8:11:65:ac:44:30:65:c9:
                    21:e9:94:2c:a5:68:a7:fc:91:6c:cd:9f:37:30:9d:
                    4e:ff:0e:bd:f9:71:c1:78:49:1e:59:51:2f:cb:90:
                    89:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:66:BC:03:ED:39:A4:36:4B:DF:A8:D7:A4:DE:80:A8:FD:D1:51:E5
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/323830343a3236383a3a2f33322d3332203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:268::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:21:d4:11:5e:e2:79:64:19:89:7e:fc:14:3f:35:c6:12:6f:
         f9:ee:6b:55:ac:4b:2e:6b:ae:38:8d:dd:57:ec:3a:e8:c6:32:
         ff:2b:c5:20:2f:68:fc:f0:da:d9:11:2d:56:01:46:cc:d7:d4:
         5f:dc:28:c8:8c:26:70:85:dd:85:49:8f:d2:fd:23:8e:9e:da:
         8f:20:c2:fd:65:01:a2:c3:d3:4d:f5:bd:a1:17:3a:fe:bd:b2:
         77:f0:19:b7:44:09:8d:4b:9e:f6:a2:eb:71:ea:f7:68:1f:7e:
         d6:0d:3d:77:54:54:8c:a3:d3:1d:c2:9d:60:ba:f0:0d:b3:e8:
         b8:2e:3f:b3:0e:de:82:0e:71:f3:fb:26:fc:b5:5a:a3:81:29:
         97:cd:56:60:77:ea:9f:ab:cd:96:f2:5f:1b:4f:bb:be:31:cf:
         5d:1f:a4:22:47:35:3f:9d:f8:a1:8b:3b:b3:30:fe:49:6e:8c:
         28:42:6e:c1:64:5b:7e:a6:6b:a4:21:b1:a3:45:f5:d0:20:88:
         c2:ec:17:c9:ed:64:a7:90:b3:af:32:8a:aa:ba:fd:70:3d:44:
         8b:00:2c:2e:79:7c:02:27:7b:6b:9a:df:91:38:6c:4b:94:d0:
         5f:e3:61:e3:dc:33:1e:41:3b:c9:ab:c6:84:65:91:e7:5a:4e:
         7d:69:2a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:07 2025 by rpki-client