Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/323830343a376437633a3a2f33322d3438203d3e20323731353634.roa
File:                     323830343a376437633a3a2f33322d3438203d3e20323731353634.roa (raw, json)
Hash identifier:          4tH1/HPb4vEJRQFS4ZGnBfWWrO2uHoUAoBlIu4OR8uU=
Subject key identifier:   50:45:07:57:68:34:4C:A6:6C:68:4D:D1:A5:5C:4D:60:5E:B5:74:48
Certificate issuer:       /CN=352697188E21CDA56966652063EA79DB7E2D6512
Certificate serial:       6A5FEE482D50A6EAEF874B10ED8E44851D375B5B
Authority key identifier: 35:26:97:18:8E:21:CD:A5:69:66:65:20:63:EA:79:DB:7E:2D:65:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/352697188E21CDA56966652063EA79DB7E2D6512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/323830343a376437633a3a2f33322d3438203d3e20323731353634.roa
Signing time:             Mon 04 Aug 2025 11:43:42 +0000
ROA not before:           Mon 04 Aug 2025 11:38:42 +0000
ROA not after:            Mon 03 Aug 2026 11:43:42 +0000
asID:                     271564
IP address blocks:        2804:7d7c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/352697188E21CDA56966652063EA79DB7E2D6512.crl
                          rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/352697188E21CDA56966652063EA79DB7E2D6512.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/352697188E21CDA56966652063EA79DB7E2D6512.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 01:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5f:ee:48:2d:50:a6:ea:ef:87:4b:10:ed:8e:44:85:1d:37:5b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352697188E21CDA56966652063EA79DB7E2D6512
        Validity
            Not Before: Aug  4 11:38:42 2025 GMT
            Not After : Aug  3 11:43:42 2026 GMT
        Subject: CN=5045075768344CA66C684DD1A55C4D605EB57448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:a9:e5:bb:5a:15:4d:9f:c3:11:14:22:6d:
                    24:27:5b:06:a1:79:a5:be:81:79:de:10:b1:ed:78:
                    eb:d6:a0:6d:f0:b7:7f:6f:a6:02:a5:3e:50:35:68:
                    18:5d:7d:8a:0a:08:ac:6c:8e:36:19:32:d9:c2:9c:
                    9e:e1:6f:47:ba:ee:38:a2:08:54:41:e0:30:9e:d8:
                    be:c5:99:e0:6e:f8:e5:54:76:70:4f:13:15:8e:af:
                    ca:85:f8:5a:3e:da:68:f0:c0:9b:08:45:7b:ea:01:
                    2b:62:fd:dd:f0:e3:18:a8:7f:9b:1f:f6:4e:91:f9:
                    61:1a:09:da:a9:3d:5f:4d:7f:b6:29:44:a0:1f:a6:
                    14:23:79:43:02:46:b7:3c:bb:a1:18:24:af:93:6d:
                    72:79:09:0a:6f:9d:77:91:12:22:be:8a:09:85:64:
                    b2:f4:d5:4e:cb:0d:df:a6:af:ba:3e:01:b0:ec:03:
                    d8:27:5e:ed:c7:5f:93:49:d2:76:da:a7:14:93:f2:
                    6c:97:30:22:2a:0a:5e:b4:ee:a7:f4:83:b8:5b:52:
                    cc:fa:41:fb:83:f3:d6:bb:47:6c:40:74:85:23:90:
                    5c:58:56:37:99:f8:d5:67:96:8d:0e:34:98:7f:b9:
                    45:c1:ba:df:f8:f3:ae:9c:63:18:24:50:60:93:21:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:45:07:57:68:34:4C:A6:6C:68:4D:D1:A5:5C:4D:60:5E:B5:74:48
            X509v3 Authority Key Identifier:
                keyid:35:26:97:18:8E:21:CD:A5:69:66:65:20:63:EA:79:DB:7E:2D:65:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/352697188E21CDA56966652063EA79DB7E2D6512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/352697188E21CDA56966652063EA79DB7E2D6512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/323830343a376437633a3a2f33322d3438203d3e20323731353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:f4:b2:15:8e:39:89:b4:9d:0c:73:1a:5a:06:e9:70:95:08:
         9e:1d:42:46:c3:4f:04:cb:51:24:aa:93:a6:31:07:05:97:76:
         0d:a6:c9:9b:83:da:ed:38:87:65:7e:09:fa:32:4c:f7:76:79:
         53:c6:ca:ec:4e:99:c4:a5:a3:09:b0:69:20:a6:97:3a:0e:c0:
         39:bd:04:12:f7:3f:55:21:7c:54:f3:a7:d8:b8:0a:2a:fa:56:
         d3:78:e1:df:68:a3:70:f6:d1:0c:44:32:df:f0:1f:d1:37:21:
         fd:4b:04:d3:3f:55:66:87:d2:38:60:24:08:4b:59:f2:61:f9:
         d0:64:ae:5e:f1:3e:e6:11:83:b0:45:cc:63:ab:f4:f2:e0:3a:
         aa:19:af:43:4a:d8:22:be:cb:52:b5:a0:4b:76:04:5e:65:89:
         b0:5b:68:c8:5f:37:04:4b:5e:f8:90:5f:21:5f:85:d7:28:29:
         8e:ce:d8:2e:e6:51:68:d6:27:87:ee:9a:10:5c:03:3b:3b:60:
         56:ec:06:61:63:3b:04:96:49:df:bb:ce:88:85:39:b2:e8:ac:
         b3:e9:4b:a0:2e:02:ff:4b:ae:65:16:58:38:0e:32:07:67:ef:
         a8:09:02:78:33:d2:24:3f:0f:94:6f:32:5b:09:5e:4e:95:3f:
         e7:2d:18:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:07 2025 by rpki-client