Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          ZC3JuK0cXoTODQuqELteBTnxQbrBHDL3CDvCcvrGKd0=
Subject key identifier:   53:09:26:EC:CA:60:E6:61:F8:2A:CA:AE:5C:C8:B4:F5:34:3D:43:99
Certificate issuer:       /CN=7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA
Certificate serial:       724EE857EB5C3B905E658C9AFB8B0F1882408DD5
Authority key identifier: 7A:F2:51:28:E8:7A:F7:9D:E2:10:4B:62:1E:ED:A3:FB:A5:B3:9E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Fri 01 Aug 2025 15:35:29 +0000
ROA not before:           Fri 01 Aug 2025 15:30:29 +0000
ROA not after:            Fri 31 Jul 2026 15:35:29 +0000
asID:                     273728
IP address blocks:        2804:8b5c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.crl
                          rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 22:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4e:e8:57:eb:5c:3b:90:5e:65:8c:9a:fb:8b:0f:18:82:40:8d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA
        Validity
            Not Before: Aug  1 15:30:29 2025 GMT
            Not After : Jul 31 15:35:29 2026 GMT
        Subject: CN=530926ECCA60E661F82ACAAE5CC8B4F5343D4399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:39:2a:57:10:0f:f6:86:51:e6:95:6f:1c:
                    f7:9f:f1:50:da:a3:52:cd:18:ca:0d:62:d2:21:8c:
                    c0:66:43:4a:db:05:03:ee:57:75:e5:d6:8a:00:40:
                    86:6b:86:96:02:73:b1:d7:04:11:32:d6:73:3e:5d:
                    67:15:96:27:16:30:5a:a2:2a:de:e8:52:9e:ce:8a:
                    ab:94:06:a5:4c:4c:5b:e0:2b:91:68:3f:b9:68:21:
                    54:49:f0:ae:f4:fb:8e:38:19:f0:b1:c1:92:46:58:
                    fc:93:b9:dd:7e:49:47:bf:df:f9:3f:1f:70:fc:56:
                    37:6b:b4:1a:e6:71:19:38:a9:e5:2b:27:bf:18:59:
                    e7:7c:d6:56:f3:8f:c3:60:2d:7f:fe:81:20:3b:82:
                    a0:10:5d:90:5c:d7:56:b7:f9:5a:df:48:73:16:d6:
                    de:26:13:9a:40:28:d8:66:90:7b:0b:57:b6:c4:29:
                    02:0f:bc:ca:79:66:fe:8a:12:c1:5b:b3:f9:0f:55:
                    ad:65:2c:08:a4:19:1f:e0:97:f0:25:cb:eb:a2:d5:
                    f8:84:7a:f0:c1:ec:f6:1a:88:1c:16:fc:a4:d8:b5:
                    3b:7a:c7:ea:f7:7d:92:28:40:6f:9c:3e:30:ef:68:
                    11:62:d0:1f:ab:ed:4b:c8:65:f1:94:28:9f:04:cb:
                    0d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:09:26:EC:CA:60:E6:61:F8:2A:CA:AE:5C:C8:B4:F5:34:3D:43:99
            X509v3 Authority Key Identifier:
                keyid:7A:F2:51:28:E8:7A:F7:9D:E2:10:4B:62:1E:ED:A3:FB:A5:B3:9E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         49:b7:42:f6:21:88:e8:8c:29:91:8e:9a:40:2d:f9:85:3a:6b:
         52:58:70:81:75:40:09:04:2a:e0:50:4a:c7:86:09:64:66:07:
         08:39:28:20:41:0b:71:16:b8:4a:b0:df:b9:be:32:8f:03:d8:
         38:37:76:cc:7a:a4:09:ff:81:2c:2f:36:23:37:07:93:06:42:
         92:09:b9:31:e1:8b:33:84:c4:65:b3:8e:29:b2:c0:76:25:e2:
         1a:7d:d4:12:24:80:6e:f4:80:fa:4d:7d:90:01:14:3d:f3:7b:
         a7:97:c5:5f:aa:a0:d6:62:3d:31:89:a0:3e:63:19:72:13:6d:
         f3:ca:d1:0d:e4:77:9b:9a:aa:d9:39:cf:4b:63:4f:ff:91:76:
         eb:60:52:48:4d:a4:16:64:8f:74:dd:73:57:3e:29:64:b2:4d:
         9a:69:23:98:7e:b7:49:77:0b:4e:18:e9:a4:37:92:58:d5:c5:
         cd:ff:33:b3:3f:17:57:33:77:88:13:4a:72:29:bf:8c:5a:53:
         f4:b7:03:b0:f5:af:c5:be:c8:e5:51:28:bf:2a:c8:90:c8:a0:
         ff:92:f2:25:46:1f:76:04:60:bc:72:de:d2:67:6e:0f:10:d1:
         a4:9a:4d:fa:72:06:f2:e4:ee:09:b5:8b:f3:b6:2a:53:5a:a9:
         36:e2:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:00:45 2025 by rpki-client