Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63SoBtnCSUFd62w4uH7wpmLxmkJQSsXtjF9pCjF7VmKX/0/323830343a383362303a3a2f33322d3438203d3e20323732323132.roa
File:                     323830343a383362303a3a2f33322d3438203d3e20323732323132.roa (raw, json)
Hash identifier:          VN9BBVV+gmj+rwsG972EfM5H/iKgte3V8VWNLJ1dOi8=
Subject key identifier:   FA:ED:A5:DD:C4:C4:48:5A:DA:B4:3D:3B:65:3B:32:FF:D7:7C:F2:C7
Certificate issuer:       /CN=6D9755623E75A13224A7728661EE90C9A5BB230E
Certificate serial:       55022B7820C76D8A1563B6C4B19593F5B1A34CF2
Authority key identifier: 6D:97:55:62:3E:75:A1:32:24:A7:72:86:61:EE:90:C9:A5:BB:23:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D9755623E75A13224A7728661EE90C9A5BB230E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63SoBtnCSUFd62w4uH7wpmLxmkJQSsXtjF9pCjF7VmKX/0/323830343a383362303a3a2f33322d3438203d3e20323732323132.roa
Signing time:             Tue 01 Jul 2025 20:46:35 +0000
ROA not before:           Tue 01 Jul 2025 20:41:35 +0000
ROA not after:            Tue 30 Jun 2026 20:46:35 +0000
asID:                     272212
IP address blocks:        2804:83b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63SoBtnCSUFd62w4uH7wpmLxmkJQSsXtjF9pCjF7VmKX/0/6D9755623E75A13224A7728661EE90C9A5BB230E.crl
                          rsync://rpki-repo.registro.br/repo/63SoBtnCSUFd62w4uH7wpmLxmkJQSsXtjF9pCjF7VmKX/0/6D9755623E75A13224A7728661EE90C9A5BB230E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D9755623E75A13224A7728661EE90C9A5BB230E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 06:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:02:2b:78:20:c7:6d:8a:15:63:b6:c4:b1:95:93:f5:b1:a3:4c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D9755623E75A13224A7728661EE90C9A5BB230E
        Validity
            Not Before: Jul  1 20:41:35 2025 GMT
            Not After : Jun 30 20:46:35 2026 GMT
        Subject: CN=FAEDA5DDC4C4485ADAB43D3B653B32FFD77CF2C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:ba:de:61:0e:e5:02:d5:dc:88:a4:7e:a2:
                    69:47:db:ea:8d:32:12:01:27:2b:7b:29:55:b0:64:
                    8b:80:a6:0e:82:37:72:62:a7:c5:ce:59:37:53:e9:
                    e2:49:b3:93:22:eb:10:a8:7b:0b:fc:cb:22:c4:11:
                    3b:1c:0b:58:89:1a:7f:4e:e3:70:c2:66:65:29:d4:
                    11:0b:2f:da:31:3f:c0:54:84:c1:5c:a5:f4:21:b9:
                    fb:d1:e8:fb:35:11:45:cf:ae:cd:54:23:9a:c1:61:
                    85:75:e2:9e:72:7a:82:05:34:17:cb:8b:97:57:7f:
                    33:ec:8c:86:9e:3f:d8:0e:60:14:ec:5b:86:35:85:
                    b8:53:ea:80:6d:76:20:74:07:18:50:73:35:dc:77:
                    6b:72:13:27:f9:53:80:b7:71:3e:61:d2:81:fb:ca:
                    f8:8b:fd:73:f8:b1:9e:65:95:f6:5e:0d:eb:7e:d6:
                    1b:e6:ae:32:e0:a4:ba:cc:6c:4a:59:2d:66:a3:04:
                    6e:02:25:e9:33:55:97:c0:29:12:57:f7:2a:ea:c7:
                    94:01:e1:41:49:ec:bc:fc:14:47:65:21:ea:27:ca:
                    89:92:78:ee:d9:c0:28:6c:97:af:ca:ac:cf:1d:06:
                    64:8f:a1:be:99:bf:8d:85:e4:28:72:cd:b0:17:8e:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:ED:A5:DD:C4:C4:48:5A:DA:B4:3D:3B:65:3B:32:FF:D7:7C:F2:C7
            X509v3 Authority Key Identifier:
                keyid:6D:97:55:62:3E:75:A1:32:24:A7:72:86:61:EE:90:C9:A5:BB:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63SoBtnCSUFd62w4uH7wpmLxmkJQSsXtjF9pCjF7VmKX/0/6D9755623E75A13224A7728661EE90C9A5BB230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D9755623E75A13224A7728661EE90C9A5BB230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63SoBtnCSUFd62w4uH7wpmLxmkJQSsXtjF9pCjF7VmKX/0/323830343a383362303a3a2f33322d3438203d3e20323732323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:1b:41:59:9d:dc:d6:06:da:6b:9a:b5:73:41:dd:4c:1c:62:
         69:da:13:06:68:05:1b:a4:77:91:1c:92:19:29:df:79:7c:c6:
         0b:f4:94:c4:b8:97:70:af:cf:87:1a:c8:c2:23:7f:67:37:a3:
         88:ae:3e:54:86:d8:1c:6e:9f:d7:e1:0b:9a:c3:77:7a:9c:ae:
         5a:61:fb:12:16:4e:47:85:3c:d4:18:74:bf:a5:e1:70:b5:50:
         6c:ff:30:08:38:4a:09:ea:89:35:68:28:11:79:de:34:e9:dd:
         6b:8c:65:18:f2:5a:85:6b:be:27:07:f2:b1:a2:c9:26:e5:b1:
         9d:06:da:67:f7:f2:8b:36:a6:d8:4a:a8:3d:67:6a:61:72:80:
         6d:24:3d:33:77:1a:f3:eb:07:3d:9a:f9:7a:73:80:9e:04:e0:
         d7:39:25:f9:35:8d:ad:47:33:49:53:59:45:bb:ad:55:de:e0:
         1e:f2:ca:3f:a3:7d:10:49:7c:fa:76:27:ff:f9:91:04:1a:a6:
         f8:8c:5c:22:31:5e:76:49:87:84:aa:92:a5:63:50:8b:33:ca:
         6e:b0:c9:fa:35:eb:7f:e8:f2:88:d7:ff:21:eb:21:fd:a4:92:
         1d:4b:d6:34:06:f5:70:15:1f:37:d6:18:ca:fb:36:9b:6d:26:
         e8:24:06:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:46:48 2025 by rpki-client