Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a383030303a3a2f33342d3334203d3e20323634393939.roa
File:                     323830343a333133303a383030303a3a2f33342d3334203d3e20323634393939.roa (raw, json)
Hash identifier:          FSzWf/aBoxLde3wMh2MoUeeECE46wKtZKEqvCGWT46c=
Subject key identifier:   9D:54:AD:2B:61:92:F2:41:B4:D9:15:08:3B:A2:50:6A:8B:EB:45:C0
Certificate issuer:       /CN=96EC498898251C1501401F3A18522521C4648127
Certificate serial:       51C53CF796CD20FA2C7FCC76EC50D16DEA3DA1AA
Authority key identifier: 96:EC:49:88:98:25:1C:15:01:40:1F:3A:18:52:25:21:C4:64:81:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96EC498898251C1501401F3A18522521C4648127.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a383030303a3a2f33342d3334203d3e20323634393939.roa
Signing time:             Tue 08 Jul 2025 22:33:39 +0000
ROA not before:           Tue 08 Jul 2025 22:28:39 +0000
ROA not after:            Tue 07 Jul 2026 22:33:39 +0000
asID:                     264999
IP address blocks:        2804:3130:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/96EC498898251C1501401F3A18522521C4648127.crl
                          rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/96EC498898251C1501401F3A18522521C4648127.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96EC498898251C1501401F3A18522521C4648127.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 01:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c5:3c:f7:96:cd:20:fa:2c:7f:cc:76:ec:50:d1:6d:ea:3d:a1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96EC498898251C1501401F3A18522521C4648127
        Validity
            Not Before: Jul  8 22:28:39 2025 GMT
            Not After : Jul  7 22:33:39 2026 GMT
        Subject: CN=9D54AD2B6192F241B4D915083BA2506A8BEB45C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:f2:79:32:63:d7:17:72:a5:1f:cc:93:d3:
                    b9:84:9c:9e:f4:cc:c4:1f:55:95:06:01:ca:5b:a2:
                    a8:c0:8f:aa:41:e7:d9:a3:0d:eb:ef:44:3c:60:b2:
                    f7:88:35:99:6e:74:66:f8:ee:ab:99:5d:54:80:ab:
                    90:ae:24:06:51:f7:72:7d:f7:d6:99:0d:19:5e:9f:
                    17:b1:8e:84:b8:45:3d:19:e0:c0:72:4f:81:62:34:
                    71:6a:86:d2:6d:8c:7c:f4:d8:55:f1:51:47:16:5c:
                    c4:f5:22:0f:02:95:39:12:5e:eb:fc:e1:60:ba:9e:
                    2c:99:6e:5e:c1:98:38:62:2c:58:b8:f4:c1:11:e3:
                    fb:9c:49:74:33:e4:25:88:16:85:d9:83:2c:1b:14:
                    78:46:36:f0:3d:cc:27:91:e4:52:1e:2f:20:c9:22:
                    98:34:83:38:7b:66:4e:97:11:f8:37:0c:a9:06:e5:
                    32:4b:83:1d:78:f2:08:9d:ef:df:d2:27:b8:75:3d:
                    45:37:30:70:26:c6:4b:f0:da:94:de:62:d4:f0:25:
                    bc:63:05:0d:2d:62:dd:2f:7e:64:78:6f:38:e2:52:
                    5b:6d:49:f1:aa:08:f5:97:a3:ed:ba:f0:1f:ff:8d:
                    50:7f:cd:71:fe:fc:f5:1c:d0:2d:2b:6d:66:b1:fb:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:54:AD:2B:61:92:F2:41:B4:D9:15:08:3B:A2:50:6A:8B:EB:45:C0
            X509v3 Authority Key Identifier:
                keyid:96:EC:49:88:98:25:1C:15:01:40:1F:3A:18:52:25:21:C4:64:81:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/96EC498898251C1501401F3A18522521C4648127.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96EC498898251C1501401F3A18522521C4648127.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a383030303a3a2f33342d3334203d3e20323634393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3130:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7f:a8:24:70:f1:08:7b:7b:f9:7b:a1:d0:3f:3e:da:d3:1d:e3:
         17:8b:36:6d:a5:0f:79:f1:82:5d:82:74:3b:63:40:52:22:7c:
         58:71:3a:c3:03:cc:0d:ce:6d:f4:70:9e:69:9b:1e:9f:75:0b:
         34:1d:50:ee:3f:ad:9c:fd:6c:08:1b:75:f2:52:62:65:b6:d8:
         73:31:16:1b:07:18:34:3e:ff:00:82:93:22:f7:63:f3:3e:64:
         e7:92:06:8a:da:d1:3a:5c:cd:14:f5:b7:88:d4:3f:24:61:24:
         80:44:3e:9c:9b:ef:23:a4:29:d4:aa:b0:c1:6f:ed:02:19:6e:
         d8:ce:9a:ea:6d:28:44:e1:1e:c9:69:e2:03:d1:20:6c:2b:74:
         b4:b7:83:2f:71:88:f3:78:c9:34:57:a9:ff:95:8d:6b:1c:cd:
         c6:94:c0:68:8b:f4:83:59:5c:e7:1c:36:3a:4e:80:d7:33:07:
         c7:50:72:c6:33:63:e8:69:ec:bd:ec:cc:5a:97:93:76:1c:e8:
         97:25:ce:eb:82:87:ef:dd:7b:82:6d:84:99:73:dd:3c:0c:6e:
         b0:a5:4f:a5:13:99:e7:80:ef:92:3c:54:ee:3c:d8:df:6c:e0:
         56:87:d6:67:26:93:f6:e9:99:69:8f:e6:1f:a9:7e:76:cc:49:
         74:4b:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:45:54 2025 by rpki-client