Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/323830343a373739383a3a2f33342d313238203d3e20323731313838.roa
File:                     323830343a373739383a3a2f33342d313238203d3e20323731313838.roa (raw, json)
Hash identifier:          cQjGN5WENW46/jBuhJA1lT+mTYrjHprWmDjgq2R5zjY=
Subject key identifier:   7A:42:F7:1F:88:0F:E7:F9:3A:70:E4:5B:11:EE:73:03:3F:0E:47:17
Certificate issuer:       /CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B
Certificate serial:       6B1AD9346299F582AE31A8FF875257FFC05B38A1
Authority key identifier: C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/323830343a373739383a3a2f33342d313238203d3e20323731313838.roa
Signing time:             Tue 17 Jun 2025 16:32:08 +0000
ROA not before:           Tue 17 Jun 2025 16:27:08 +0000
ROA not after:            Tue 16 Jun 2026 16:32:08 +0000
asID:                     271188
IP address blocks:        2804:7798::/34 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl
                          rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 22:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1a:d9:34:62:99:f5:82:ae:31:a8:ff:87:52:57:ff:c0:5b:38:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B
        Validity
            Not Before: Jun 17 16:27:08 2025 GMT
            Not After : Jun 16 16:32:08 2026 GMT
        Subject: CN=7A42F71F880FE7F93A70E45B11EE73033F0E4717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:d9:2a:5b:47:2a:98:16:ff:7a:50:ad:a6:
                    eb:01:b5:a7:40:fa:61:3e:6b:a7:92:7c:7b:2b:b6:
                    a2:5f:4c:50:b4:9a:de:dc:7b:75:72:20:37:36:43:
                    28:bf:88:82:68:d8:fe:80:2e:2b:41:77:38:00:ff:
                    e1:0b:a2:81:76:bb:8c:58:13:43:1d:f2:b1:c1:31:
                    30:ae:a3:e9:f4:77:99:05:ce:34:6e:23:97:1e:bd:
                    21:bf:e6:d3:af:4c:c1:c4:dc:10:f6:93:e1:e2:0e:
                    e7:77:2a:4b:06:1b:2a:4b:d4:ae:e3:ab:73:08:61:
                    a3:69:03:ad:e9:a2:cd:91:83:39:af:b2:e4:ef:79:
                    17:68:06:11:1a:17:34:4f:e5:ee:79:72:a1:95:8e:
                    0c:92:f3:82:63:35:2e:af:2c:b8:53:8f:50:eb:3d:
                    95:51:79:71:5f:c9:ac:28:d8:71:d5:07:51:7a:a8:
                    ce:45:90:4a:fe:a1:82:44:95:48:2c:98:6d:0a:65:
                    aa:37:c7:a1:ca:a2:c8:84:eb:20:07:c5:e8:f4:11:
                    dc:d1:44:cd:e4:29:d9:da:78:5e:13:c2:fd:6a:74:
                    d8:9e:a7:62:3e:76:80:fc:85:47:3f:f0:b6:ef:85:
                    16:0e:27:36:6e:31:ba:20:6e:3d:77:f2:d2:00:5c:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:42:F7:1F:88:0F:E7:F9:3A:70:E4:5B:11:EE:73:03:3F:0E:47:17
            X509v3 Authority Key Identifier:
                keyid:C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/323830343a373739383a3a2f33342d313238203d3e20323731313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7798::/34

    Signature Algorithm: sha256WithRSAEncryption
         b3:ff:97:ff:ac:70:3a:b1:63:f3:ae:cf:5b:13:6d:77:4c:3e:
         b2:e7:bd:d3:54:92:ad:98:df:a1:73:11:99:a7:fc:4f:77:24:
         49:ab:81:48:9d:c8:14:35:03:8e:ce:84:73:84:17:d9:c2:db:
         9d:4a:7f:cd:21:f5:4b:be:a1:31:88:95:55:45:65:f5:a0:3c:
         ba:74:ce:53:43:af:47:c0:b3:26:21:3c:83:70:e9:39:c9:4c:
         54:66:c2:6b:8f:48:cc:6d:e2:20:41:21:4c:5b:ca:1e:31:ce:
         ca:24:5c:d5:b6:4a:8a:74:50:2a:f1:9b:05:ca:b0:81:e8:9a:
         56:65:54:be:63:44:c5:03:30:23:8d:2f:91:7c:67:81:6d:83:
         74:2a:e6:ba:71:ee:33:fc:ea:17:6b:d1:93:ca:c8:6c:93:2c:
         55:aa:31:2d:09:75:28:34:f5:9a:ba:71:c7:88:eb:9d:5c:c9:
         5d:bb:24:70:03:ef:e9:c4:0a:31:e2:65:a5:c2:08:e6:c9:fe:
         cd:33:25:db:69:af:ec:98:ff:c7:57:9a:a8:ed:62:79:dd:d5:
         6a:43:e4:52:40:7d:3f:2e:27:fd:9f:a3:10:c9:6a:ac:0e:d9:
         2a:ef:b7:94:31:67:24:00:00:fa:71:35:44:8a:b3:01:c6:f1:
         8e:05:c7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:36:09 2025 by rpki-client