Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/323830343a386230303a3a2f33322d3438203d3e20323733373036.roa
File:                     323830343a386230303a3a2f33322d3438203d3e20323733373036.roa (raw, json)
Hash identifier:          Mfi2YXsn4usozNTkApzXZOTp/npyplnvShsrNKnIPOg=
Subject key identifier:   E3:2C:FF:64:C7:FA:A3:1E:A0:23:19:F7:41:DF:9E:D7:58:86:FA:30
Certificate issuer:       /CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
Certificate serial:       2C956D7A33CEC6F94EDD6114F4E398138A9BD29C
Authority key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/323830343a386230303a3a2f33322d3438203d3e20323733373036.roa
Signing time:             Tue 12 Aug 2025 17:23:14 +0000
ROA not before:           Tue 12 Aug 2025 17:18:14 +0000
ROA not after:            Tue 11 Aug 2026 17:23:14 +0000
asID:                     273706
IP address blocks:        2804:8b00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl
                          rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:95:6d:7a:33:ce:c6:f9:4e:dd:61:14:f4:e3:98:13:8a:9b:d2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
        Validity
            Not Before: Aug 12 17:18:14 2025 GMT
            Not After : Aug 11 17:23:14 2026 GMT
        Subject: CN=E32CFF64C7FAA31EA02319F741DF9ED75886FA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9d:6a:35:74:f5:1c:4d:1f:d0:67:52:eb:a8:
                    1d:6a:2a:15:e7:b3:66:7c:9c:e6:04:7d:34:f5:61:
                    97:12:89:a1:57:07:f6:47:1c:9c:bc:fb:da:68:31:
                    9c:c8:6e:f4:00:d8:4c:0b:a3:84:f2:5a:55:7f:11:
                    5d:d0:26:0d:76:65:91:7b:11:b8:61:74:a1:95:54:
                    c8:24:ac:5f:b7:fd:02:11:ed:c2:25:81:6f:c6:19:
                    7c:7c:32:19:fe:e2:74:c5:ef:90:d1:c3:d4:6d:d3:
                    de:4f:61:9c:1c:c3:ba:06:41:bf:8a:d5:6e:6e:8b:
                    2f:c9:9c:35:9b:57:81:5b:49:ff:c2:86:8f:e8:fd:
                    08:05:fb:34:ae:6b:dd:6b:c3:6b:d1:d8:1a:9f:26:
                    92:ea:ad:0a:13:83:fb:1f:f5:c3:c3:21:37:73:29:
                    37:72:fd:44:e2:c1:df:b2:f3:d6:34:ee:6a:72:83:
                    e6:69:81:23:7f:8b:ca:1d:c8:45:a9:ad:5c:44:fe:
                    b9:1d:41:4b:f1:7d:32:a1:7f:bb:97:75:a2:9b:1d:
                    f8:d6:03:c4:ee:a6:0f:d3:cc:a6:e9:df:15:d4:b5:
                    5a:59:92:91:ff:eb:2d:25:a8:ef:47:17:f8:e9:ec:
                    dd:c5:e1:58:31:1f:a0:4e:10:06:a6:b9:b0:cc:6c:
                    02:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2C:FF:64:C7:FA:A3:1E:A0:23:19:F7:41:DF:9E:D7:58:86:FA:30
            X509v3 Authority Key Identifier:
                keyid:DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/323830343a386230303a3a2f33322d3438203d3e20323733373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:aa:0a:5b:b1:b8:28:91:a3:40:5c:67:f3:5f:fb:a1:75:16:
         43:43:45:aa:ba:c6:ca:89:38:16:27:c5:f9:fd:08:f0:f4:30:
         05:ca:81:1a:1c:24:8d:63:97:c3:3c:d3:d9:0c:98:a8:62:ea:
         2d:bd:96:0d:74:70:0f:25:f2:02:48:a3:a9:e3:a9:29:ba:67:
         9c:e1:f0:d3:48:d9:93:21:7f:b0:98:39:3e:33:90:49:3c:ab:
         63:66:b6:8d:d5:8d:d7:d4:db:f6:36:8a:1d:b0:51:98:e9:f7:
         b2:48:a6:00:2d:90:69:e5:36:04:f3:19:ff:b7:58:2b:44:e4:
         3f:44:43:be:1a:f6:78:9f:9d:04:51:5d:7f:a5:d8:ff:e2:fe:
         7c:f0:f9:01:7d:ee:65:ca:2a:ec:be:5b:0a:94:ec:29:07:17:
         29:30:43:b1:01:fa:89:f7:5b:1a:9a:64:b6:9d:0a:90:e0:ef:
         bb:89:fa:1c:ae:76:59:67:9a:5a:bc:7a:f9:62:33:9d:8a:dc:
         ee:22:2a:ce:d6:53:29:44:2e:49:78:95:e1:89:ed:12:5a:68:
         d5:63:17:5d:f5:cd:26:95:00:3d:4e:b1:73:0e:b6:09:4a:91:
         ab:65:02:4d:53:c7:ac:32:96:9a:e1:8c:2b:b8:40:cc:d8:36:
         38:6d:2b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:57:12 2025 by rpki-client