Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a343030303a3a2f33342d3334203d3e20323632383033.roa
File:                     323830343a3235303a343030303a3a2f33342d3334203d3e20323632383033.roa (raw, json)
Hash identifier:          qfslhDosc7o9HFog2ITLuK8ogSFLb7hd4cfcXLFc1V0=
Subject key identifier:   7F:FD:08:69:52:4E:6B:7E:0D:50:C4:22:19:11:2C:55:17:F2:13:D7
Certificate issuer:       /CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
Certificate serial:       736B961FE261A90A20DB74AE54EFC3545340CB9D
Authority key identifier: 6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a343030303a3a2f33342d3334203d3e20323632383033.roa
Signing time:             Wed 18 Jun 2025 14:26:23 +0000
ROA not before:           Wed 18 Jun 2025 14:21:23 +0000
ROA not after:            Wed 17 Jun 2026 14:26:23 +0000
asID:                     262803
IP address blocks:        2804:250:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl
                          rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 19:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6b:96:1f:e2:61:a9:0a:20:db:74:ae:54:ef:c3:54:53:40:cb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
        Validity
            Not Before: Jun 18 14:21:23 2025 GMT
            Not After : Jun 17 14:26:23 2026 GMT
        Subject: CN=7FFD0869524E6B7E0D50C42219112C5517F213D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:17:65:02:5a:3a:a3:2d:2e:fc:a2:09:18:
                    5d:3d:92:64:d4:10:9c:ba:f2:e7:71:05:20:ef:43:
                    a0:ef:37:34:dd:44:88:c5:f0:4a:a6:2c:7c:ee:d9:
                    96:ad:25:2f:24:4d:b2:a3:52:b7:af:5f:fe:b2:6a:
                    4f:8a:cc:e2:84:01:d9:6a:34:a3:eb:4d:d3:9e:5d:
                    ce:ee:50:2b:ff:70:2f:5f:d2:e2:d5:18:5e:8d:cb:
                    11:8d:ad:cb:b9:69:23:52:4d:27:15:6e:89:c4:8b:
                    13:ea:80:80:b5:cb:37:b8:c8:aa:97:0c:72:62:54:
                    f8:93:a4:75:c5:12:1e:fe:23:bb:6b:07:5f:9d:89:
                    ba:6d:cb:c4:58:b7:92:39:4e:b7:10:f1:45:08:8f:
                    42:d4:fa:98:ba:30:f1:2f:77:c6:90:42:8f:e2:b8:
                    df:45:51:18:72:aa:c2:8b:a6:60:62:87:33:53:21:
                    21:2a:65:51:e9:a8:4d:2e:ce:fa:6f:8c:88:27:39:
                    62:8c:78:d5:9a:4e:15:e3:8e:ad:63:5a:8e:c3:e7:
                    32:9b:dd:58:59:3a:48:c3:fc:a9:d2:c2:03:c8:b1:
                    a1:dc:ea:d5:18:ee:57:d1:1c:77:f0:31:15:af:b2:
                    99:23:98:88:7c:e3:70:c6:ef:64:da:3c:fe:84:54:
                    4a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FD:08:69:52:4E:6B:7E:0D:50:C4:22:19:11:2C:55:17:F2:13:D7
            X509v3 Authority Key Identifier:
                keyid:6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a343030303a3a2f33342d3334203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:250:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:70:bf:e8:b6:ab:9b:85:9e:6c:74:17:69:1a:89:1c:fc:db:
         f7:2d:d5:cc:80:48:1a:2f:ff:25:d0:a8:8f:c9:78:10:25:b1:
         4f:a5:9e:c1:e7:17:4a:dc:ac:39:ec:30:cb:89:c2:ea:d5:55:
         12:56:21:a3:d1:74:ef:05:99:d5:20:02:14:b1:2f:67:39:6a:
         b3:e9:d8:3f:55:59:66:19:03:93:9a:f8:d7:9a:14:0f:0e:f0:
         11:26:d6:fe:28:42:b0:0d:10:43:e6:2b:8e:77:79:e9:ca:ee:
         11:55:0e:2d:8b:88:56:83:e9:f5:84:fc:61:27:c2:c1:aa:7f:
         54:78:f2:45:7f:50:5b:6f:34:31:70:86:36:b2:53:80:31:a6:
         7f:2f:24:77:de:b4:94:fd:d0:58:fe:9f:4e:1c:b9:d2:22:20:
         6f:a7:c2:a4:df:e3:d6:de:60:00:e2:1e:57:79:63:7e:92:dd:
         04:41:bf:62:24:ab:f1:4f:ca:66:90:51:ad:57:99:3d:38:94:
         79:9b:49:b8:e8:0a:34:7b:d0:3d:a6:4f:4b:ab:92:60:47:66:
         c1:67:eb:22:d8:f3:38:cc:72:51:79:35:4b:5b:d2:5d:80:0f:
         e8:d7:b0:44:54:0a:66:1a:a0:36:d9:25:22:99:5a:0d:9e:7d:
         32:1e:f7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:02:28 2025 by rpki-client