Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a313430303a3a2f34302d3430203d3e20323637333239.roa
File:                     323830343a346263383a313430303a3a2f34302d3430203d3e20323637333239.roa (raw, json)
Hash identifier:          yw6+nZ9DL1uYZgtQrGCh3Q7M4DiLIi8t6m8h+1Zy6PQ=
Subject key identifier:   E4:3C:E3:0D:95:80:34:B2:A4:31:E9:80:2D:70:45:E1:27:0E:B1:75
Certificate issuer:       /CN=794E629B0678092652C7896E669B6A838A268C5A
Certificate serial:       7D3FE1B388C24D8C8CF9A1D7D628FD488DD50DCE
Authority key identifier: 79:4E:62:9B:06:78:09:26:52:C7:89:6E:66:9B:6A:83:8A:26:8C:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a313430303a3a2f34302d3430203d3e20323637333239.roa
Signing time:             Thu 07 Aug 2025 15:40:03 +0000
ROA not before:           Thu 07 Aug 2025 15:35:03 +0000
ROA not after:            Thu 06 Aug 2026 15:40:03 +0000
asID:                     267329
IP address blocks:        2804:4bc8:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 07:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3f:e1:b3:88:c2:4d:8c:8c:f9:a1:d7:d6:28:fd:48:8d:d5:0d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794E629B0678092652C7896E669B6A838A268C5A
        Validity
            Not Before: Aug  7 15:35:03 2025 GMT
            Not After : Aug  6 15:40:03 2026 GMT
        Subject: CN=E43CE30D958034B2A431E9802D7045E1270EB175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:a9:65:83:fd:c9:aa:49:6b:46:cb:be:9b:
                    77:d8:54:3a:9b:63:d7:98:6d:2e:3f:75:4f:e8:ad:
                    6b:50:b9:ac:01:51:1d:72:8c:0d:90:5a:df:9d:aa:
                    00:32:e3:bf:40:52:da:da:aa:b4:a0:6b:27:d6:f1:
                    e7:19:13:99:65:56:db:2f:0f:fc:14:e5:db:40:ed:
                    24:7f:94:72:20:69:83:c5:98:35:f0:78:88:68:d2:
                    e5:bd:ea:0d:75:17:ec:12:dd:56:eb:92:82:9f:d4:
                    e9:c8:a7:c2:a5:52:33:be:fa:2e:e6:3e:b5:d6:f6:
                    81:4e:26:32:e6:0c:7a:3d:3b:4b:da:23:14:d0:9a:
                    96:e0:fe:bb:a1:9e:69:2c:70:20:64:c1:e5:5d:2a:
                    0c:04:a2:d2:cf:70:c8:f5:b8:68:07:42:68:dd:d0:
                    b0:53:d1:fa:85:1d:d2:8c:a5:08:15:58:15:49:6d:
                    4b:1e:33:64:b3:e5:74:8b:84:b7:dc:c7:d4:60:09:
                    c9:65:b2:9e:4c:65:a2:94:30:45:82:6c:b2:ce:30:
                    23:23:0c:aa:c2:4e:e7:d1:91:3d:61:1d:a8:12:ac:
                    78:13:37:f3:19:b5:9b:e5:35:aa:b1:90:a8:35:a9:
                    e1:6a:ed:60:15:61:63:0a:b4:25:4e:12:d2:ae:21:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3C:E3:0D:95:80:34:B2:A4:31:E9:80:2D:70:45:E1:27:0E:B1:75
            X509v3 Authority Key Identifier:
                keyid:79:4E:62:9B:06:78:09:26:52:C7:89:6E:66:9B:6A:83:8A:26:8C:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a313430303a3a2f34302d3430203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:8d:53:53:b1:12:00:05:47:b4:5f:71:33:ba:c4:08:11:26:
         55:21:24:55:8e:1d:75:7c:79:3e:5d:ee:8e:f8:3b:fb:56:c1:
         49:c9:64:a8:12:70:a2:3f:4f:30:13:74:c3:ce:9a:d5:47:c0:
         71:6b:84:8c:04:e1:a3:4d:59:5a:5f:17:03:3e:c7:ff:b1:a9:
         b1:66:14:42:d2:50:58:cb:37:0f:11:a4:8c:aa:87:18:7f:f9:
         2a:ff:7a:29:81:1f:77:b9:d5:68:89:52:fb:71:57:b8:2c:af:
         08:59:a2:05:27:7e:38:c9:f5:cb:da:f5:e2:97:5c:41:da:4a:
         16:3f:8f:36:f6:c8:bc:78:f9:cd:f9:15:97:51:a6:04:46:da:
         30:6c:81:0b:84:12:03:a2:e5:26:b8:f3:f7:87:99:e3:03:67:
         f0:62:2f:69:70:56:25:d3:49:d7:d0:c3:2d:6f:99:d5:74:9d:
         60:e7:e8:e0:eb:36:12:41:f1:e8:45:bf:a4:68:74:dd:c1:35:
         a8:49:2a:da:5a:d0:ec:08:11:c9:73:5d:62:cb:8c:97:18:a1:
         d8:d6:85:0e:0b:f7:07:0d:ba:91:f3:e7:b3:2b:0a:d1:be:a0:
         51:72:61:62:e1:aa:ec:de:b5:19:c1:65:65:8e:43:da:42:2b:
         8b:99:1f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:35:17 2025 by rpki-client