Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/323830343a356539633a3a2f33322d3334203d3e20323639303434.roa
File:                     323830343a356539633a3a2f33322d3334203d3e20323639303434.roa (raw, json)
Hash identifier:          19p56JkFvGy3d55QCkTPjX1ii+GsYjcKpnMRN9gp7Ts=
Subject key identifier:   55:64:F3:61:AA:75:AD:33:02:98:61:B3:A0:92:9B:78:D7:62:B7:1A
Certificate issuer:       /CN=BA3AB081D295E5A4F30D6CC1139EA01C1075D542
Certificate serial:       1C128FCEDFAF89C6231F9673CCB709D619CBFA1F
Authority key identifier: BA:3A:B0:81:D2:95:E5:A4:F3:0D:6C:C1:13:9E:A0:1C:10:75:D5:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/323830343a356539633a3a2f33322d3334203d3e20323639303434.roa
Signing time:             Thu 31 Jul 2025 13:09:35 +0000
ROA not before:           Thu 31 Jul 2025 13:04:35 +0000
ROA not after:            Thu 30 Jul 2026 13:09:35 +0000
asID:                     269044
IP address blocks:        2804:5e9c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.crl
                          rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 14:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:12:8f:ce:df:af:89:c6:23:1f:96:73:cc:b7:09:d6:19:cb:fa:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA3AB081D295E5A4F30D6CC1139EA01C1075D542
        Validity
            Not Before: Jul 31 13:04:35 2025 GMT
            Not After : Jul 30 13:09:35 2026 GMT
        Subject: CN=5564F361AA75AD33029861B3A0929B78D762B71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:b5:c0:3d:50:be:38:e6:25:ca:29:3f:22:
                    e4:a8:e5:2a:b5:cc:70:37:54:63:1f:6d:c5:8a:b7:
                    38:47:bf:e8:06:0f:eb:da:3d:ca:0e:1c:ec:06:cc:
                    e2:35:f2:7e:6e:0f:f2:2a:41:27:f3:25:e6:44:d0:
                    6c:3c:d7:33:64:c0:18:44:b8:ac:69:90:0d:47:8f:
                    58:38:bd:5a:cd:e8:29:44:f6:ea:de:0f:a4:8f:2a:
                    e7:d0:35:e5:fe:20:a7:22:ad:a8:01:8a:04:92:47:
                    f8:aa:18:83:8b:e8:b8:f0:96:29:e1:01:8f:ca:5d:
                    08:5b:03:be:eb:70:d1:e1:ad:b6:e1:6b:8d:46:db:
                    4d:26:91:98:8e:93:48:dc:9a:22:09:cb:fd:f1:a6:
                    a8:56:c4:94:29:d6:bb:b4:ac:6b:29:ad:c1:63:1e:
                    f2:07:24:1b:51:37:2d:e4:37:e1:cb:0e:d1:bf:83:
                    c7:01:ad:36:24:90:85:f0:61:2f:23:be:ca:cd:1e:
                    64:01:c8:f6:98:25:0c:52:4f:4c:f1:59:ee:e0:10:
                    f1:46:99:69:d8:0e:21:bc:43:15:96:b4:b2:e1:68:
                    63:63:e3:0e:e8:e7:66:6a:18:45:f8:c2:2b:4c:85:
                    ec:94:ea:ae:44:e4:dd:ae:04:df:85:b5:78:e2:03:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:64:F3:61:AA:75:AD:33:02:98:61:B3:A0:92:9B:78:D7:62:B7:1A
            X509v3 Authority Key Identifier:
                keyid:BA:3A:B0:81:D2:95:E5:A4:F3:0D:6C:C1:13:9E:A0:1C:10:75:D5:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/323830343a356539633a3a2f33322d3334203d3e20323639303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:0d:88:84:44:02:c2:4b:3f:3e:15:ce:12:cc:b8:ab:52:d8:
         1a:cb:51:54:66:52:53:03:75:a1:9b:eb:ea:e1:78:a1:85:77:
         1e:32:bc:a0:2d:fd:25:20:e3:a6:fa:69:ff:18:24:63:8b:58:
         62:78:57:a0:01:bc:31:e8:b9:3e:aa:c1:17:40:35:0c:d3:c4:
         c7:de:cd:eb:46:92:ab:85:72:7e:27:f0:86:82:36:71:3a:3f:
         bf:70:16:25:98:75:76:87:f6:04:05:3f:12:10:57:5e:94:13:
         8b:1c:13:34:a4:a4:02:c5:7f:d1:f5:42:a9:b9:1a:f2:8f:4e:
         73:ce:4b:1d:6b:87:f6:34:63:48:03:19:ca:d3:ce:7e:dd:cd:
         26:9c:49:25:dc:e5:1c:5c:1a:e3:dc:6e:02:c9:bc:34:5e:d4:
         f1:bf:e8:f0:e3:0e:6c:9f:97:27:06:1b:d1:3e:ec:05:a7:65:
         9f:5b:bc:29:69:b9:fe:53:b7:97:a5:00:d1:3a:87:07:89:8e:
         27:98:27:fb:eb:d4:f6:d6:2f:e4:b1:11:80:f5:13:f9:2e:e1:
         7a:95:a8:d4:ae:41:6a:92:d8:66:6b:a2:48:08:c7:db:63:c4:
         64:08:6b:6c:f5:4e:a1:f0:50:85:77:ae:77:2b:ec:7e:04:4f:
         7a:24:1a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:24 2025 by rpki-client