Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830343a316630303a3a2f33322d3438203d3e203131383032.roa
File:                     323830343a316630303a3a2f33322d3438203d3e203131383032.roa (raw, json)
Hash identifier:          jS6+6lULatFk0A63dCsLAi6KUuIHFxbOj1qXVGUYBmE=
Subject key identifier:   A4:64:6D:FC:01:A5:2E:5F:76:DE:17:AD:34:41:E8:DB:E8:D6:A6:79
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       185CFE83E08F70B4C4F9CDB19BBD81C40A11E61D
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830343a316630303a3a2f33322d3438203d3e203131383032.roa
Signing time:             Thu 19 Jun 2025 20:46:46 +0000
ROA not before:           Thu 19 Jun 2025 20:41:46 +0000
ROA not after:            Thu 18 Jun 2026 20:46:46 +0000
asID:                     11802
IP address blocks:        2804:1f00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 17:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5c:fe:83:e0:8f:70:b4:c4:f9:cd:b1:9b:bd:81:c4:0a:11:e6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jun 19 20:41:46 2025 GMT
            Not After : Jun 18 20:46:46 2026 GMT
        Subject: CN=A4646DFC01A52E5F76DE17AD3441E8DBE8D6A679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:56:62:b7:3c:24:30:f5:04:d9:91:bf:2f:
                    25:bb:4d:c2:be:70:25:70:64:9e:b6:af:80:a6:b8:
                    ca:e6:8d:8f:31:e7:6d:ef:5d:16:ed:5f:63:a7:b4:
                    65:fd:52:a8:41:be:10:f5:96:4f:92:b8:48:7d:93:
                    11:42:7a:51:17:04:09:62:72:da:ea:26:c0:40:3b:
                    7c:82:41:b1:b7:67:db:7e:53:b5:30:b9:c4:5c:29:
                    26:f1:e2:92:34:5d:ba:42:48:7d:f3:42:ef:27:f4:
                    69:8b:bc:6f:52:38:70:de:00:f7:a9:01:f4:fa:f2:
                    77:f2:ff:05:75:6d:ff:64:93:f5:fe:90:8e:c0:50:
                    68:a3:f4:98:30:2e:57:21:2d:be:56:82:f0:6f:11:
                    e8:4c:c3:85:40:d1:99:7e:4f:ba:cc:6a:fe:2c:ee:
                    c4:83:a3:53:3b:15:e2:3e:a4:2c:e4:48:fe:3d:64:
                    db:e3:75:f9:ca:2b:2b:85:23:56:41:5b:b4:90:9f:
                    63:00:2e:84:d0:bf:fe:5b:9e:e2:92:8a:99:22:34:
                    a2:6e:fc:c9:fe:e5:3e:a1:c6:06:a6:98:d5:4f:56:
                    15:d8:71:4b:74:26:94:3f:35:c9:62:31:e7:50:25:
                    b9:77:4e:61:32:8b:56:ae:f9:a1:20:7a:4b:38:d0:
                    0a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:64:6D:FC:01:A5:2E:5F:76:DE:17:AD:34:41:E8:DB:E8:D6:A6:79
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830343a316630303a3a2f33322d3438203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:b8:6e:6b:3a:2b:1f:48:cc:ae:3e:1d:39:5b:3e:fd:8e:4a:
         40:c3:c9:b3:0f:5a:f9:25:a2:76:0a:bc:04:fb:ad:a2:b3:1f:
         27:bc:c9:a9:86:92:42:1d:f0:25:06:2c:0e:26:64:b1:61:86:
         63:7d:95:39:50:a0:51:8f:ce:6e:0a:fe:1d:86:07:44:6b:fc:
         8d:6e:10:6e:94:a9:7b:08:c0:40:86:84:fb:8e:f0:f9:2d:55:
         ea:36:a3:8d:35:d6:f4:19:54:3c:0b:79:aa:a9:98:92:de:af:
         92:c3:66:db:bc:2f:9a:63:04:6b:cf:27:88:26:56:7e:c3:0b:
         bc:f7:32:c3:99:fe:b2:2d:96:18:a5:1d:69:ff:b7:0f:90:90:
         cf:9d:de:0e:9d:fc:25:0f:8d:f5:63:b4:06:9a:ed:11:82:74:
         55:66:64:81:c9:f3:f2:fc:97:4a:3f:a8:09:56:55:46:d0:29:
         24:ee:92:52:a8:81:5c:e5:83:e2:3f:5f:c3:d0:fd:bc:7f:59:
         a0:a8:a4:7d:af:d0:af:73:4b:1b:7c:26:01:ca:6a:bc:f7:f8:
         61:43:31:71:10:85:be:76:5d:9f:a2:c2:61:5c:ea:b8:29:27:
         3d:65:a6:63:2c:7a:41:55:c5:9c:58:57:13:58:0b:1a:ec:9f:
         00:ae:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:03:58 2025 by rpki-client