Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d313238203d3e203533323138.roa
File:                     323830343a6666343a3a2f33322d313238203d3e203533323138.roa (raw, json)
Hash identifier:          iBr1MiWYW/lwYBnPl9PjYIN0TqmORmziogOjdaousGo=
Subject key identifier:   9A:FB:E7:42:FD:33:A8:8F:C3:ED:DB:8E:C2:23:B4:A4:2D:31:DB:5B
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       35EDCC855BB3A28F248AA4AA073F964290A16869
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d313238203d3e203533323138.roa
Signing time:             Mon 18 Aug 2025 20:05:47 +0000
ROA not before:           Mon 18 Aug 2025 20:00:47 +0000
ROA not after:            Mon 17 Aug 2026 20:05:47 +0000
asID:                     53218
IP address blocks:        2804:ff4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ed:cc:85:5b:b3:a2:8f:24:8a:a4:aa:07:3f:96:42:90:a1:68:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Aug 18 20:00:47 2025 GMT
            Not After : Aug 17 20:05:47 2026 GMT
        Subject: CN=9AFBE742FD33A88FC3EDDB8EC223B4A42D31DB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:e7:80:1e:67:51:8f:ef:87:34:70:45:6b:
                    1c:6a:71:9c:76:6c:be:e8:cb:44:b1:31:57:52:7c:
                    11:a0:66:92:d7:c8:be:f6:ed:61:f3:a6:71:19:fc:
                    4d:00:4f:48:87:29:5c:be:95:2d:75:71:a9:ac:b4:
                    94:5c:9b:99:f9:8a:89:95:ea:31:4a:64:1f:86:4c:
                    a0:e9:f6:e0:b0:35:96:16:9d:87:c6:e6:db:59:f3:
                    1c:a7:57:fa:46:c5:84:54:e2:1f:ee:4f:ab:dc:7a:
                    60:86:1d:a1:93:50:14:2c:33:97:6e:ba:2f:5b:12:
                    74:94:4e:8b:6b:66:db:3e:cb:80:c1:fc:4a:40:bb:
                    88:23:9b:af:59:17:f2:ae:4d:66:b6:08:3b:69:68:
                    c2:31:2f:be:b5:ec:c3:f7:3d:55:13:8c:79:d7:e9:
                    82:f8:9e:20:73:ea:b8:09:38:5a:88:77:d2:80:8c:
                    56:d5:b0:07:bb:d8:9d:0f:a1:f4:fa:7b:99:a4:41:
                    a6:c2:c4:1c:03:78:ee:93:1b:4c:9e:4d:c9:83:92:
                    39:95:13:e2:de:0c:ae:a2:be:f8:d1:b7:2a:3e:5f:
                    e2:1d:c8:a9:b7:1b:e6:d6:46:5d:b9:1d:5d:d3:13:
                    ff:c3:97:44:d2:b6:b4:2a:cd:fa:3c:95:b6:48:c1:
                    47:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FB:E7:42:FD:33:A8:8F:C3:ED:DB:8E:C2:23:B4:A4:2D:31:DB:5B
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d313238203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ff4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:c1:fd:c1:14:6f:a0:1e:bf:84:04:3d:76:78:42:74:5b:cf:
         2b:ee:0a:bf:eb:36:a7:65:26:91:00:f9:67:c1:99:b1:46:87:
         d5:12:b8:ba:37:77:56:e2:b2:ca:b6:a5:2a:c6:d1:2b:cf:0f:
         63:b8:e2:5a:25:fc:13:d0:33:4c:9e:e5:a7:06:e2:8b:4d:c2:
         fa:8e:36:90:56:1e:4c:1b:0f:f7:af:b3:53:3c:83:7e:d8:7f:
         46:3f:8b:95:3b:a9:9b:15:2b:66:e8:df:de:64:05:35:9e:f5:
         d8:4c:8f:e3:b4:ae:63:0d:7a:56:06:e8:8b:f9:3a:24:06:8d:
         7b:7e:02:94:13:7f:75:36:03:54:33:12:6e:0a:32:b1:c6:9a:
         24:a9:74:55:76:5e:52:8f:f7:da:7a:88:01:b8:f8:73:60:32:
         be:9b:fd:7d:85:71:6d:46:b1:b3:a5:74:7f:69:f9:a0:a1:be:
         dd:8c:3d:0f:88:72:ad:4e:91:e7:41:df:83:be:7e:fd:74:6c:
         a7:42:3c:cc:f6:10:0c:f0:7e:7e:4f:5e:54:31:e2:d0:6a:90:
         e2:0c:25:b0:8a:8b:77:2c:13:8e:73:36:73:22:5a:83:41:de:
         3b:6f:2f:ca:c3:e5:07:9c:13:20:5e:84:86:d3:1f:7c:19:ab:
         7e:b1:44:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:13:20 2025 by rpki-client