Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/a6XeReMMdcMPQz8TziAFUJU6LZraT5Lf1D4W3vUXywv/0/323830343a343465343a3a2f33322d3438203d3e20323637363539.roa
File:                     323830343a343465343a3a2f33322d3438203d3e20323637363539.roa (raw, json)
Hash identifier:          fBrqmnaG3G6TfunKFENj9WknQpbo82O2H2hz8WOt1yM=
Subject key identifier:   B5:FE:99:31:68:75:6F:24:B1:1E:AE:E7:AF:03:C7:21:83:7B:01:1F
Certificate issuer:       /CN=69DDA7A4B9F30993524C390274E6EC05AA6A8EC8
Certificate serial:       4A489B2548DC5D513848AFDFEA20029BAA912325
Authority key identifier: 69:DD:A7:A4:B9:F3:09:93:52:4C:39:02:74:E6:EC:05:AA:6A:8E:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DDA7A4B9F30993524C390274E6EC05AA6A8EC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a6XeReMMdcMPQz8TziAFUJU6LZraT5Lf1D4W3vUXywv/0/323830343a343465343a3a2f33322d3438203d3e20323637363539.roa
Signing time:             Mon 28 Jul 2025 17:59:39 +0000
ROA not before:           Mon 28 Jul 2025 17:54:39 +0000
ROA not after:            Mon 27 Jul 2026 17:59:39 +0000
asID:                     267659
IP address blocks:        2804:44e4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a6XeReMMdcMPQz8TziAFUJU6LZraT5Lf1D4W3vUXywv/0/69DDA7A4B9F30993524C390274E6EC05AA6A8EC8.crl
                          rsync://rpki-repo.registro.br/repo/a6XeReMMdcMPQz8TziAFUJU6LZraT5Lf1D4W3vUXywv/0/69DDA7A4B9F30993524C390274E6EC05AA6A8EC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DDA7A4B9F30993524C390274E6EC05AA6A8EC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 09:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:48:9b:25:48:dc:5d:51:38:48:af:df:ea:20:02:9b:aa:91:23:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69DDA7A4B9F30993524C390274E6EC05AA6A8EC8
        Validity
            Not Before: Jul 28 17:54:39 2025 GMT
            Not After : Jul 27 17:59:39 2026 GMT
        Subject: CN=B5FE993168756F24B11EAEE7AF03C721837B011F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:58:63:10:a5:7a:c0:29:b2:0a:5a:22:4b:e4:
                    43:b3:e5:62:8d:9b:57:8d:58:1c:94:5c:4c:71:6b:
                    0f:9b:39:a7:c2:cc:9c:11:77:bb:8d:38:45:8c:2c:
                    9e:f0:61:e0:60:5c:f0:c1:b3:32:f3:8f:e5:f3:d9:
                    52:3f:d5:94:72:95:9c:d3:4d:fb:ec:b3:53:53:d2:
                    53:6c:c1:a8:e8:df:36:8e:77:93:ab:de:01:4d:5e:
                    d6:8a:1a:3b:47:ce:16:e3:ae:9d:26:dc:90:e3:b7:
                    14:59:97:7d:6a:98:45:46:00:ba:bf:45:08:b8:0a:
                    03:63:b3:f8:39:91:15:05:6e:be:72:54:fc:11:64:
                    f0:3b:a2:66:65:5a:01:1f:77:a1:a8:44:6f:2d:66:
                    ac:06:2f:c5:39:d2:24:26:86:76:fe:d2:d6:fd:f0:
                    01:a4:a9:5d:a3:28:8c:dc:d0:18:de:ae:5c:71:47:
                    9d:46:d9:15:c8:17:26:1e:59:a6:bc:4d:72:c9:40:
                    23:3c:0c:15:8f:46:89:29:c6:61:0e:ad:80:06:aa:
                    1f:03:b7:8f:ce:da:dc:28:7d:8b:ca:06:92:c1:50:
                    c6:86:a7:30:22:a4:0d:d6:c0:0d:7e:b0:a7:7b:c1:
                    44:13:e6:ad:b4:a0:62:90:e6:c8:5f:3c:b6:99:61:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FE:99:31:68:75:6F:24:B1:1E:AE:E7:AF:03:C7:21:83:7B:01:1F
            X509v3 Authority Key Identifier:
                keyid:69:DD:A7:A4:B9:F3:09:93:52:4C:39:02:74:E6:EC:05:AA:6A:8E:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a6XeReMMdcMPQz8TziAFUJU6LZraT5Lf1D4W3vUXywv/0/69DDA7A4B9F30993524C390274E6EC05AA6A8EC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DDA7A4B9F30993524C390274E6EC05AA6A8EC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a6XeReMMdcMPQz8TziAFUJU6LZraT5Lf1D4W3vUXywv/0/323830343a343465343a3a2f33322d3438203d3e20323637363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:ed:51:dd:62:8f:27:48:65:ed:47:23:51:f3:ab:1b:45:54:
         73:32:9f:69:f8:bd:89:7f:94:65:e9:e3:3b:00:ac:19:ff:02:
         1b:2c:98:cf:02:34:58:09:18:09:32:3f:a7:8a:c4:32:b6:d4:
         06:da:22:2a:26:0e:dc:6c:71:89:dc:b2:0f:ef:47:b2:28:3e:
         b9:b0:28:16:85:a7:da:28:f7:38:3d:78:39:98:d2:99:73:39:
         13:bf:04:e2:a5:8e:2a:62:64:a4:85:29:97:73:58:92:1b:bf:
         dd:d5:fb:a9:d6:d8:48:4e:68:0a:54:7c:70:05:44:b1:12:cf:
         c2:cd:4e:fd:cb:f0:97:03:41:78:03:e4:4d:a6:f8:5c:07:18:
         00:01:75:e2:92:2c:ee:63:35:0e:99:85:2e:11:17:6e:ed:ad:
         79:26:9d:c4:4a:e3:d7:05:bb:23:3a:3d:bf:86:23:cc:ab:95:
         63:b7:68:c2:0e:6e:15:b2:fa:96:34:c2:24:8b:65:e1:ec:24:
         28:ff:e0:83:0f:c6:23:c4:4f:35:be:e2:2c:09:ca:ef:f1:2e:
         f1:15:35:c8:3c:63:91:5a:d0:da:9d:31:8a:6b:9d:44:24:f5:
         bf:ba:92:45:89:26:70:09:5c:31:bb:3a:03:ba:2f:a9:e2:0d:
         36:2d:da:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:00:26 2025 by rpki-client