Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/323830343a376338343a3a2f33322d313238203d3e20323731353031.roa
File:                     323830343a376338343a3a2f33322d313238203d3e20323731353031.roa (raw, json)
Hash identifier:          wYyNe3fSa5rl9Px25f4UBF6xxNLIp94do6v1iSFAcvI=
Subject key identifier:   00:B1:00:B5:CB:2B:77:D3:9D:FE:DF:ED:5D:DB:39:EA:DF:9F:E6:3D
Certificate issuer:       /CN=B91FC0A7A5B63500982ACDF1752548B798B4DF47
Certificate serial:       346F87A3510F97AD9C8A0E0A38B798A9093BA591
Authority key identifier: B9:1F:C0:A7:A5:B6:35:00:98:2A:CD:F1:75:25:48:B7:98:B4:DF:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91FC0A7A5B63500982ACDF1752548B798B4DF47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/323830343a376338343a3a2f33322d313238203d3e20323731353031.roa
Signing time:             Sun 22 Jun 2025 15:44:49 +0000
ROA not before:           Sun 22 Jun 2025 15:39:49 +0000
ROA not after:            Sun 21 Jun 2026 15:44:49 +0000
asID:                     271501
IP address blocks:        2804:7c84::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/B91FC0A7A5B63500982ACDF1752548B798B4DF47.crl
                          rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/B91FC0A7A5B63500982ACDF1752548B798B4DF47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91FC0A7A5B63500982ACDF1752548B798B4DF47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 06:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6f:87:a3:51:0f:97:ad:9c:8a:0e:0a:38:b7:98:a9:09:3b:a5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91FC0A7A5B63500982ACDF1752548B798B4DF47
        Validity
            Not Before: Jun 22 15:39:49 2025 GMT
            Not After : Jun 21 15:44:49 2026 GMT
        Subject: CN=00B100B5CB2B77D39DFEDFED5DDB39EADF9FE63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:b8:99:09:ab:58:e4:60:03:73:fb:b2:cd:
                    d0:37:c6:34:d0:c5:9e:f4:44:fb:fa:80:e1:d1:0a:
                    2b:94:6d:9b:c1:20:2c:2f:2e:15:a8:4b:24:1d:24:
                    15:6e:8c:c2:e7:31:27:0a:44:43:ac:c0:1e:ea:c1:
                    26:b6:84:2b:49:fa:03:6d:8a:0c:39:ab:25:b7:04:
                    18:ff:63:ea:b8:78:de:47:76:68:78:64:d4:a1:cb:
                    7b:54:cd:d5:f2:ae:af:3c:41:41:34:83:24:18:68:
                    7b:7f:84:d4:e4:ac:4b:95:71:93:85:36:10:17:e8:
                    66:db:ca:88:cc:cc:ba:8b:ba:39:d8:a9:40:3a:3a:
                    60:80:73:a3:2f:10:b0:f6:fc:03:01:8d:92:1b:fc:
                    0b:71:f4:9d:99:76:b6:51:fd:b9:c4:15:49:62:18:
                    2e:1c:96:76:5a:03:79:26:b9:ff:f8:32:7b:4c:dc:
                    05:fb:33:ef:94:0c:30:cf:a8:ce:c8:31:62:04:62:
                    d5:ad:91:64:16:0e:f6:4e:26:67:78:ba:10:f5:d0:
                    21:39:54:17:6d:b3:2d:f2:54:d6:22:0e:0a:6d:bd:
                    fb:9b:01:ef:6f:72:e7:a9:34:41:ce:04:02:94:47:
                    57:db:0d:89:76:0b:5b:bf:39:da:96:de:27:0a:df:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B1:00:B5:CB:2B:77:D3:9D:FE:DF:ED:5D:DB:39:EA:DF:9F:E6:3D
            X509v3 Authority Key Identifier:
                keyid:B9:1F:C0:A7:A5:B6:35:00:98:2A:CD:F1:75:25:48:B7:98:B4:DF:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/B91FC0A7A5B63500982ACDF1752548B798B4DF47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91FC0A7A5B63500982ACDF1752548B798B4DF47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/323830343a376338343a3a2f33322d313238203d3e20323731353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c84::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:2d:3f:83:f8:e4:28:57:05:9f:31:83:3d:4f:46:4c:62:ef:
         c5:14:47:65:12:92:dd:c4:6b:ef:b6:19:b3:e1:28:a3:2f:26:
         ce:c9:56:38:8c:00:c1:c6:7c:37:c1:8d:fa:77:56:4b:e0:4a:
         50:4e:15:58:7c:22:08:ef:40:25:51:b6:d8:8a:5e:c6:0a:f6:
         a0:7b:91:46:73:30:d5:fa:9f:ed:7a:73:6b:86:e1:07:00:06:
         18:59:55:74:02:12:52:4d:69:6e:2b:b8:14:c8:90:16:69:c7:
         8b:21:3f:13:f3:be:93:dd:d5:49:53:e8:45:0e:91:c8:99:aa:
         85:1b:a5:ef:c3:c9:7c:9e:2a:36:2f:9f:01:fe:be:83:ce:66:
         8b:13:b9:51:94:52:e8:93:8d:4c:10:ea:41:67:83:fe:43:97:
         25:6c:7b:9f:b0:e0:38:1b:13:05:7e:42:aa:f1:60:ae:4d:42:
         45:a0:b0:18:c0:c9:e3:17:4e:83:84:81:89:91:7c:ee:51:7a:
         42:bf:ba:01:e9:e0:6a:a0:a7:8b:06:52:7c:d8:51:59:ac:42:
         37:96:9c:c3:98:c8:27:5d:2f:ab:30:3c:c5:ed:20:8b:a9:59:
         6f:7a:62:97:a0:1b:82:af:77:ab:b2:aa:c8:70:28:3f:7e:13:
         bc:e7:8a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:05:29 2025 by rpki-client