Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/323830343a366536383a383030303a3a2f33342d3334203d3e20323730353935.roa
File:                     323830343a366536383a383030303a3a2f33342d3334203d3e20323730353935.roa (raw, json)
Hash identifier:          HuHWlrj9YPpeT0JOJqNZdC8cA+ajSY+foMkfOn3oEwQ=
Subject key identifier:   86:56:42:C0:49:53:3E:61:17:A6:96:B0:6B:2E:F7:75:6E:42:B3:8C
Certificate issuer:       /CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A
Certificate serial:       71EF486D67C7A8F6E0982F13148B62DE964E177F
Authority key identifier: 41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/323830343a366536383a383030303a3a2f33342d3334203d3e20323730353935.roa
Signing time:             Fri 18 Jul 2025 14:06:21 +0000
ROA not before:           Fri 18 Jul 2025 14:01:21 +0000
ROA not after:            Fri 17 Jul 2026 14:06:21 +0000
asID:                     270595
IP address blocks:        2804:6e68:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.crl
                          rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 16:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ef:48:6d:67:c7:a8:f6:e0:98:2f:13:14:8b:62:de:96:4e:17:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A
        Validity
            Not Before: Jul 18 14:01:21 2025 GMT
            Not After : Jul 17 14:06:21 2026 GMT
        Subject: CN=865642C049533E6117A696B06B2EF7756E42B38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e7:d2:b9:3e:ef:97:64:19:8f:bd:11:0c:cf:
                    92:87:fb:2a:93:94:11:a5:6a:01:2f:0e:43:08:64:
                    a9:d3:0c:0a:f1:80:c7:7b:35:38:1d:17:81:9d:00:
                    da:b4:f2:93:54:0d:91:3c:22:e4:e2:58:ce:f7:93:
                    03:5e:ee:ab:d0:ca:4c:d2:a0:82:00:1c:b5:ea:57:
                    68:3e:c7:51:82:b0:dd:2d:0f:82:6d:21:27:77:b1:
                    38:a7:dc:6b:1d:d2:f5:be:df:84:36:9a:1a:b4:33:
                    ee:ef:bc:8c:16:1f:1e:59:7b:81:f3:f9:db:98:bb:
                    4a:b5:fc:b5:50:14:61:34:cb:ad:48:fd:05:99:f7:
                    97:00:d2:ba:0b:17:66:7c:83:e3:77:30:f9:3c:5c:
                    39:e2:98:9e:b6:e2:f4:09:26:65:c1:06:8f:7d:57:
                    ed:9c:d4:f0:a9:c1:2c:b2:3e:7d:a4:0f:96:22:f6:
                    a9:39:6a:a1:25:fd:52:d2:ef:b3:57:43:9b:e3:ac:
                    19:33:8a:38:8e:e0:57:71:58:f9:6c:cd:53:be:57:
                    36:8c:fc:95:43:9a:2f:47:6e:68:1a:14:e3:7d:d0:
                    45:f8:1c:d5:35:38:21:27:dc:7d:74:c1:1b:3c:31:
                    c9:9b:68:2a:4a:5f:4e:2b:38:36:3e:30:63:ce:2b:
                    fd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:56:42:C0:49:53:3E:61:17:A6:96:B0:6B:2E:F7:75:6E:42:B3:8C
            X509v3 Authority Key Identifier:
                keyid:41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/323830343a366536383a383030303a3a2f33342d3334203d3e20323730353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e68:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         88:3b:c7:80:2e:31:03:3c:51:d0:49:f4:43:e0:3f:fc:28:a7:
         37:d6:6c:4f:70:61:29:bd:f4:74:ba:4c:e0:22:cf:51:4f:01:
         d8:01:fc:a6:18:f3:6a:0c:99:5e:c2:c1:99:10:68:ea:07:0f:
         d4:c4:f4:96:b6:50:78:a9:b7:f6:f4:2d:b0:c7:e7:fb:1b:1b:
         97:55:24:40:e6:76:5f:e9:b5:c3:9a:00:f0:33:f0:08:a1:89:
         1e:69:63:31:c0:66:5b:fd:bd:1d:0b:0d:b4:06:f6:0d:5f:23:
         08:76:78:07:6c:a4:a7:51:7d:f8:6f:a2:3f:59:de:d1:3a:f4:
         ac:97:ce:8f:3f:53:e2:70:2f:87:f1:e5:a5:1a:95:0b:2d:7d:
         25:f2:20:63:fc:8e:bd:ea:d1:3d:7b:ff:3a:5b:59:fd:2c:bd:
         20:91:42:bb:3b:ed:b5:0c:01:8e:8d:d0:78:5c:9e:d2:0a:36:
         1c:bd:e4:4c:c0:1c:e6:26:67:ca:99:17:95:98:d7:55:28:81:
         d3:ef:4e:35:09:95:ec:28:1a:ad:78:5d:70:6d:4b:33:d1:c8:
         3c:61:a8:42:73:99:fd:6e:c0:38:bf:ad:a5:eb:e3:ee:e9:00:
         19:a8:e4:10:a5:48:c8:d8:db:63:90:4c:da:b2:de:67:1d:7e:
         c9:d5:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:17 2025 by rpki-client