Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/323830343a393435633a3a2f33322d3332203d3e203631363234.roa
File:                     323830343a393435633a3a2f33322d3332203d3e203631363234.roa (raw, json)
Hash identifier:          O5a/in+ZSMm/aJV2VJLL+YxhXUuvZKOUdRvUKrq3RIo=
Subject key identifier:   78:6D:D6:38:37:A5:9E:40:73:94:9F:19:9F:E5:28:18:BF:95:BA:65
Certificate issuer:       /CN=3A039835A68C92594BA889BF185A560E86C0CFD1
Certificate serial:       528CE05B42ACC3F1BAA119AA7B7124CDDBB40784
Authority key identifier: 3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/323830343a393435633a3a2f33322d3332203d3e203631363234.roa
Signing time:             Thu 19 Jun 2025 05:12:54 +0000
ROA not before:           Thu 19 Jun 2025 05:07:54 +0000
ROA not after:            Thu 18 Jun 2026 05:12:54 +0000
asID:                     61624
IP address blocks:        2804:945c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl
                          rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 02:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8c:e0:5b:42:ac:c3:f1:ba:a1:19:aa:7b:71:24:cd:db:b4:07:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A039835A68C92594BA889BF185A560E86C0CFD1
        Validity
            Not Before: Jun 19 05:07:54 2025 GMT
            Not After : Jun 18 05:12:54 2026 GMT
        Subject: CN=786DD63837A59E4073949F199FE52818BF95BA65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:6c:0e:78:92:75:d1:3d:ce:3b:db:b5:de:
                    11:43:27:97:14:67:23:8e:68:b0:52:bc:e2:c9:73:
                    30:f7:ee:63:78:19:88:23:68:94:02:46:7a:b1:62:
                    88:2c:87:61:e1:ac:08:60:59:b0:9a:8d:f4:80:42:
                    a8:f6:e9:8f:9a:03:db:a2:f7:af:d5:bf:4c:7b:f6:
                    e3:e3:8e:e4:e7:ac:01:8c:cb:b3:52:d8:ce:82:24:
                    fc:81:36:ea:05:c9:27:ec:56:16:a1:93:37:64:ff:
                    50:40:e7:d5:36:da:d9:f8:5f:9b:36:42:ac:63:2a:
                    18:23:ce:98:a2:bf:35:4c:74:93:c1:45:85:4e:3c:
                    03:5c:5e:dd:50:fe:9d:68:99:14:66:27:18:81:1b:
                    a5:0f:ea:d3:a0:38:66:9b:17:8d:3d:91:5a:4c:ac:
                    2a:7a:98:2e:ba:d8:81:fb:2e:bf:e6:52:6f:42:ba:
                    5a:f3:c2:87:a8:a1:6a:7e:34:5f:59:62:52:58:09:
                    f3:8a:cd:12:f8:15:e6:b1:aa:11:48:c7:44:1c:05:
                    c1:74:41:e2:ea:93:09:e3:a4:d6:f5:c8:84:03:e9:
                    f2:3f:40:c4:26:fc:14:61:d5:02:15:02:de:c4:c2:
                    8a:00:f4:d4:82:37:3b:66:bb:d0:b7:6c:f5:d2:6a:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6D:D6:38:37:A5:9E:40:73:94:9F:19:9F:E5:28:18:BF:95:BA:65
            X509v3 Authority Key Identifier:
                keyid:3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/323830343a393435633a3a2f33322d3332203d3e203631363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:945c::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:6f:a6:55:0a:f4:8f:81:83:e5:b0:a4:79:57:56:79:88:ee:
         04:ff:dd:ba:0e:4c:b4:bb:29:21:81:c5:69:23:16:b4:5f:88:
         8a:84:b9:f7:94:c2:67:67:6a:3f:6f:ff:f8:84:1c:4e:73:df:
         55:6f:7a:d7:75:92:07:74:e7:13:29:3c:27:4c:b8:2a:40:ff:
         a5:94:39:36:11:c9:b3:ce:eb:ae:3a:b4:29:f0:62:ec:d9:34:
         14:4d:ca:b2:50:56:e1:8d:73:4e:78:bb:eb:70:5e:f9:0a:00:
         05:ca:ab:f2:16:92:cc:85:dc:c6:d7:86:a7:30:60:25:d9:30:
         14:c4:e8:5d:c0:c5:d4:a2:65:15:14:58:63:d7:00:15:a1:0f:
         a6:6b:a6:d6:8f:fd:8e:6e:83:65:a5:5e:ea:75:cb:b0:5f:ae:
         b6:4f:e1:5a:86:d5:21:24:2b:f1:c3:4a:23:80:13:7a:d7:d3:
         e0:5d:00:5b:ef:c9:15:ae:2b:c0:96:6f:eb:91:15:44:99:36:
         e5:0a:98:7e:b7:b9:51:50:da:cc:21:5e:d1:38:d7:81:e8:91:
         1e:05:70:fd:36:df:47:36:00:37:6e:b6:86:81:39:1e:a1:46:
         09:55:6a:a9:aa:2b:25:ef:54:08:07:60:7f:40:4c:ca:95:ec:
         78:93:e5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:33:35 2025 by rpki-client