Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3438203d3e20323731343130.roa
File:                     323830343a376231383a3a2f33322d3438203d3e20323731343130.roa (raw, json)
Hash identifier:          QTNnzR+UYlBgLx4JqbZERJxck9MVaHyRwCbO/zvmHR4=
Subject key identifier:   B1:E0:23:C3:E7:5F:A8:47:83:A7:BD:26:85:90:35:DC:BF:00:3B:69
Certificate issuer:       /CN=DE11F8185214800CA4C71C2A532004CC7BE8E00B
Certificate serial:       01785CB47C953FAC731364E2CB8522906DE3D710
Authority key identifier: DE:11:F8:18:52:14:80:0C:A4:C7:1C:2A:53:20:04:CC:7B:E8:E0:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3438203d3e20323731343130.roa
Signing time:             Mon 04 Aug 2025 16:40:33 +0000
ROA not before:           Mon 04 Aug 2025 16:35:33 +0000
ROA not after:            Mon 03 Aug 2026 16:40:33 +0000
asID:                     271410
IP address blocks:        2804:7b18::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl
                          rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 01:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:78:5c:b4:7c:95:3f:ac:73:13:64:e2:cb:85:22:90:6d:e3:d7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE11F8185214800CA4C71C2A532004CC7BE8E00B
        Validity
            Not Before: Aug  4 16:35:33 2025 GMT
            Not After : Aug  3 16:40:33 2026 GMT
        Subject: CN=B1E023C3E75FA84783A7BD26859035DCBF003B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:da:91:47:ff:df:9b:4b:10:3c:ab:30:e5:
                    8c:cd:a9:d1:9a:35:fb:9e:dd:34:d9:cc:69:a9:82:
                    0b:fd:8f:e2:69:5c:d5:82:6f:1b:2d:ff:1a:a4:a0:
                    30:0a:d5:00:8e:a9:86:fc:f9:8c:e4:40:b2:f8:6a:
                    5d:b0:c2:91:e8:68:fc:ba:ca:b4:8f:2b:9c:72:1c:
                    8d:06:d1:c0:76:c9:2c:52:ff:a9:6d:c7:d8:f6:82:
                    c8:1e:78:5b:03:18:94:fc:2e:f0:c5:f4:cc:d7:93:
                    c4:3f:7d:bb:54:7e:6a:6a:8c:a0:ea:25:49:ab:e6:
                    35:a9:b9:b6:ad:15:6d:2c:d7:28:c2:34:c1:51:3f:
                    75:e2:5c:b4:1f:6c:bf:e1:56:bf:79:5a:54:e1:3f:
                    96:b5:1b:62:53:11:44:cd:12:e2:04:75:dc:82:89:
                    7b:d7:89:7a:fd:86:2f:9f:4d:71:39:8d:df:42:04:
                    16:14:c9:be:a5:5f:c4:fa:be:b9:a6:f8:07:1d:6a:
                    42:86:b5:47:a9:6d:85:61:46:ed:24:60:83:fd:c5:
                    fb:dd:58:5f:a4:02:fb:db:38:96:ec:1a:27:3b:a6:
                    d3:f5:35:d9:a1:08:da:c2:38:56:e1:c9:68:ae:6d:
                    63:cc:70:f8:43:b3:b3:de:6b:13:98:d8:7d:1c:20:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E0:23:C3:E7:5F:A8:47:83:A7:BD:26:85:90:35:DC:BF:00:3B:69
            X509v3 Authority Key Identifier:
                keyid:DE:11:F8:18:52:14:80:0C:A4:C7:1C:2A:53:20:04:CC:7B:E8:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3438203d3e20323731343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b18::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:90:2b:95:7c:dd:4a:53:9a:36:fa:09:88:ee:4d:f0:b4:68:
         d2:d7:4f:65:dd:9d:ad:ce:55:d7:9e:a1:a1:d6:25:75:f6:db:
         92:78:21:73:bf:bb:df:0c:f6:4b:23:22:c0:b9:a4:47:4e:17:
         e4:65:11:96:37:72:54:b9:7c:35:26:70:41:7b:7c:ad:c0:34:
         10:bc:46:91:ac:ec:b3:fa:a6:95:03:6d:e0:aa:1d:be:bc:3b:
         78:12:f4:5d:6b:0a:1a:bf:9a:e3:36:2b:ed:fd:7e:26:0c:85:
         75:df:30:e9:57:40:c4:e7:89:3a:a5:9f:9d:44:dd:e1:37:b2:
         b8:71:28:28:6f:2a:38:0e:dc:c6:3f:14:66:a3:dc:f4:68:ed:
         88:49:8a:4d:54:b3:a6:d7:fb:1c:e1:25:dd:75:0f:a9:d5:20:
         8b:23:c0:43:5d:f6:38:c8:f4:21:af:5b:a1:0e:18:17:1f:66:
         cb:aa:75:ff:94:37:6a:4e:6a:39:fa:77:4b:81:92:4b:85:18:
         02:06:1e:ac:87:9d:57:66:3a:e2:8b:14:46:65:da:73:79:93:
         80:f6:bc:fe:32:6c:d2:cc:1f:a6:e1:1e:94:1f:7b:3e:37:22:
         76:8f:c0:a8:6d:0c:4e:db:be:a7:2f:db:e6:75:e2:03:b9:e2:
         e8:00:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 17:50:54 2025 by rpki-client