Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/323830343a373061633a3a2f33342d3334203d3e20323730373431.roa
File:                     323830343a373061633a3a2f33342d3334203d3e20323730373431.roa (raw, json)
Hash identifier:          JSbwZVUfqIwBtNJ86+3FG1jXoNS3Qjiaw+xRRozh+5I=
Subject key identifier:   7A:9B:1A:14:71:36:B3:3A:70:68:78:23:36:89:29:D9:84:4C:55:03
Certificate issuer:       /CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
Certificate serial:       3E9B5B4438D62189F3358024AA4A615482B5DBEA
Authority key identifier: 60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/323830343a373061633a3a2f33342d3334203d3e20323730373431.roa
Signing time:             Sat 02 Aug 2025 05:12:02 +0000
ROA not before:           Sat 02 Aug 2025 05:07:02 +0000
ROA not after:            Sat 01 Aug 2026 05:12:02 +0000
asID:                     270741
IP address blocks:        2804:70ac::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl
                          rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9b:5b:44:38:d6:21:89:f3:35:80:24:aa:4a:61:54:82:b5:db:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
        Validity
            Not Before: Aug  2 05:07:02 2025 GMT
            Not After : Aug  1 05:12:02 2026 GMT
        Subject: CN=7A9B1A147136B33A70687823368929D9844C5503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:2b:ff:dd:c5:b5:18:f8:47:10:cd:37:d9:
                    c2:6c:3f:6f:66:f9:c5:de:e7:4a:5e:d7:ed:d6:1d:
                    e7:8b:9e:a7:3c:0b:cf:65:e2:f1:70:85:71:ca:d1:
                    0e:6b:41:96:8a:66:c8:ef:f6:46:48:f8:88:a0:b1:
                    bf:c5:db:af:45:3f:da:83:3c:79:36:55:cb:44:4d:
                    03:ee:f8:94:7b:9b:8f:65:f9:b2:08:42:3d:d6:e2:
                    e9:ab:9f:20:df:79:d9:79:17:e5:2b:1c:b0:48:43:
                    f3:e1:93:d1:a7:3e:94:b6:4a:0e:b7:f2:f4:40:4f:
                    e7:c2:97:3a:65:75:51:57:4a:25:90:50:9e:7a:05:
                    dd:44:b5:aa:c7:19:3c:c4:5e:79:56:d8:6b:37:d3:
                    3f:25:59:f6:2e:05:f1:2c:24:bb:72:4f:46:2b:14:
                    0e:7b:82:e1:b9:dc:08:79:bf:32:75:1f:a3:4c:9f:
                    61:37:e7:9f:2e:d2:91:e5:d3:54:55:39:89:99:18:
                    10:ce:5f:1d:22:c6:7f:13:f5:f2:e4:da:71:4e:0d:
                    0b:09:bf:28:db:de:7c:40:b9:f9:7f:8c:9b:79:f4:
                    45:21:f8:c7:8f:17:0d:eb:f7:56:da:4a:ac:5b:f7:
                    b6:e3:b8:99:2d:b5:99:97:5f:d6:1b:24:1e:d1:b4:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9B:1A:14:71:36:B3:3A:70:68:78:23:36:89:29:D9:84:4C:55:03
            X509v3 Authority Key Identifier:
                keyid:60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/323830343a373061633a3a2f33342d3334203d3e20323730373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70ac::/34

    Signature Algorithm: sha256WithRSAEncryption
         86:65:a6:01:6c:04:dc:de:f9:b0:38:03:f4:76:c0:0f:8c:9d:
         69:28:b6:07:5f:f6:3c:56:c8:78:1d:b4:4a:0c:86:e0:f2:b1:
         eb:e7:01:b4:27:63:a2:6a:63:3c:c3:11:a7:4a:e6:1f:50:d0:
         f4:c9:76:c1:d6:8d:f7:fb:2c:b6:b4:87:e3:94:b3:41:6c:61:
         7c:de:84:52:03:92:fb:ad:40:a0:3f:5d:a5:1a:6c:98:0f:18:
         a0:f2:1b:1b:3f:f5:08:88:0e:e1:ef:b4:f0:94:8f:3d:8e:81:
         7b:84:fa:c0:30:e9:c0:dc:c8:80:df:cc:58:a2:e9:a9:e0:74:
         89:4f:59:c3:2a:cd:51:32:65:b2:ba:fa:40:ef:9b:84:48:f9:
         f4:8c:6e:66:8f:f3:09:d5:9b:d2:f5:f7:41:67:10:27:ca:20:
         7a:4d:f8:68:b4:e5:d1:30:d6:86:b7:e3:0f:b1:48:b6:79:07:
         bb:b2:75:90:19:e5:a7:b6:c0:83:57:12:ed:ad:00:43:18:f5:
         98:14:97:e6:e0:6b:6e:31:2f:44:bc:5d:1d:88:c2:03:f8:02:
         79:2e:89:c0:99:60:65:d2:df:0b:4a:09:5b:87:00:de:e0:a1:
         f0:28:e8:0b:ff:05:bb:20:2c:39:5c:ad:b1:5d:d7:18:d0:0e:
         9d:75:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:45 2025 by rpki-client