Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3a2f33322d3332203d3e20323638353936.roa
File:                     323830343a353361303a3a2f33322d3332203d3e20323638353936.roa (raw, json)
Hash identifier:          dzBtqfmKe4o7LAQTKYAad47sisc2jjp0Uzay+UlUeME=
Subject key identifier:   AD:F8:17:14:DA:98:3C:80:CF:BC:0C:B0:3B:8E:25:97:58:31:08:05
Certificate issuer:       /CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
Certificate serial:       0A59B23DE48695F440D00E3779ABF21AADCDFB0F
Authority key identifier: 2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3a2f33322d3332203d3e20323638353936.roa
Signing time:             Sat 02 Aug 2025 02:12:18 +0000
ROA not before:           Sat 02 Aug 2025 02:07:18 +0000
ROA not after:            Sat 01 Aug 2026 02:12:18 +0000
asID:                     268596
IP address blocks:        2804:53a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl
                          rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 16:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:59:b2:3d:e4:86:95:f4:40:d0:0e:37:79:ab:f2:1a:ad:cd:fb:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
        Validity
            Not Before: Aug  2 02:07:18 2025 GMT
            Not After : Aug  1 02:12:18 2026 GMT
        Subject: CN=ADF81714DA983C80CFBC0CB03B8E259758310805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:7a:9c:27:3c:df:9c:8c:90:5d:0c:3a:36:
                    33:11:81:bc:bc:ad:fd:56:5d:73:ba:d4:27:22:dd:
                    ef:e2:66:e2:f7:b8:dd:38:1e:d4:6a:00:bc:3e:69:
                    1f:61:40:de:e5:bc:f5:2b:92:2d:97:07:28:cb:cf:
                    ad:da:18:c6:e5:87:84:0d:44:24:17:2c:42:63:9a:
                    5d:28:92:64:10:48:55:3a:90:2d:44:ec:9a:7d:9a:
                    fd:29:5b:cb:98:fc:29:1d:45:82:4b:ad:e8:10:9e:
                    05:91:a5:fd:b5:67:af:29:0d:b1:69:8b:97:be:0c:
                    e3:55:b0:7b:2d:5f:81:13:b8:03:06:17:5a:56:ad:
                    22:c3:16:e9:83:5f:7c:f0:19:fe:59:95:fd:62:ef:
                    22:20:ac:08:98:6d:2f:fd:90:91:5e:5a:b0:a9:c8:
                    bf:eb:b5:f4:e3:6e:18:0c:db:86:44:a3:c8:a4:f3:
                    ae:d8:78:83:f2:f0:ed:08:7d:de:8e:2a:5a:89:dc:
                    7e:7b:9a:a1:b2:e0:02:de:52:16:fa:8c:3d:c9:6c:
                    6e:2f:56:d0:f1:34:bc:ac:ee:03:7a:e7:70:81:66:
                    d7:53:8e:04:54:8d:ec:9e:b2:cf:a3:b4:6e:73:b9:
                    11:43:7c:b5:a6:01:56:9e:3b:01:79:1d:2e:a8:4c:
                    9c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F8:17:14:DA:98:3C:80:CF:BC:0C:B0:3B:8E:25:97:58:31:08:05
            X509v3 Authority Key Identifier:
                keyid:2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3a2f33322d3332203d3e20323638353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:79:76:bb:5f:e7:76:94:f3:d9:7f:98:9c:15:53:1a:7e:b0:
         ec:35:28:71:aa:b4:f8:b1:63:0c:09:b7:d4:bf:7f:4a:1b:27:
         5c:bb:e6:3a:c3:8b:f4:ae:f6:f3:6c:d8:1a:b6:1a:11:8d:eb:
         e2:53:5e:2c:c2:f8:a4:e1:d1:43:96:8a:99:65:6b:9f:a5:da:
         80:86:14:cf:73:11:48:6e:d8:a9:bc:b8:ae:10:eb:c9:00:01:
         05:18:b1:9c:3d:d9:a1:b5:04:21:9a:c7:3f:bd:56:26:0a:59:
         70:59:af:7e:b1:53:2a:06:cf:74:c5:34:94:d1:d6:5e:0b:64:
         51:1b:dc:8f:e1:f9:3a:ec:47:6f:47:29:d5:da:91:8b:5a:2b:
         35:43:c1:7d:e9:eb:61:cc:f3:71:96:f5:91:dc:60:a0:ed:c9:
         c1:61:ca:fb:5a:04:b3:6c:33:de:cc:ae:b4:dd:a5:3c:2e:cb:
         89:57:fd:6b:5c:99:53:75:15:56:ce:50:1d:df:a4:9e:93:c1:
         47:5e:04:c5:4d:fb:76:ef:96:c0:ec:02:a9:c6:d3:53:0d:e3:
         81:8e:db:99:34:c0:b7:a4:bb:76:ca:1c:dd:71:fa:80:2b:6d:
         d0:fd:50:3e:25:d1:68:bd:80:14:8e:9b:3c:f8:72:7b:fd:3c:
         d4:bb:06:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:50 2025 by rpki-client