Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jVwvNXdzFTKzxkg2Uwt5jPkGTKtwC58yUufQ7kyiFui/0/323830343a343234303a3a2f33322d3438203d3e20323637343838.roa
File:                     323830343a343234303a3a2f33322d3438203d3e20323637343838.roa (raw, json)
Hash identifier:          pXqmtNQYsczbgM0MlS8scGuFwtz5pJpcvNWGgA7f7aQ=
Subject key identifier:   A6:88:67:DF:85:6B:AF:13:49:4B:FF:6E:E4:3B:CB:AE:C3:BC:F8:F1
Certificate issuer:       /CN=91E02AFF923BDC6C76031F281123106254BBD618
Certificate serial:       4AEDBD5E6A91DFAC2974B1DA46D3C62766270656
Authority key identifier: 91:E0:2A:FF:92:3B:DC:6C:76:03:1F:28:11:23:10:62:54:BB:D6:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91E02AFF923BDC6C76031F281123106254BBD618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jVwvNXdzFTKzxkg2Uwt5jPkGTKtwC58yUufQ7kyiFui/0/323830343a343234303a3a2f33322d3438203d3e20323637343838.roa
Signing time:             Mon 11 Aug 2025 15:18:52 +0000
ROA not before:           Mon 11 Aug 2025 15:13:52 +0000
ROA not after:            Mon 10 Aug 2026 15:18:52 +0000
asID:                     267488
IP address blocks:        2804:4240::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9jVwvNXdzFTKzxkg2Uwt5jPkGTKtwC58yUufQ7kyiFui/0/91E02AFF923BDC6C76031F281123106254BBD618.crl
                          rsync://rpki-repo.registro.br/repo/9jVwvNXdzFTKzxkg2Uwt5jPkGTKtwC58yUufQ7kyiFui/0/91E02AFF923BDC6C76031F281123106254BBD618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91E02AFF923BDC6C76031F281123106254BBD618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ed:bd:5e:6a:91:df:ac:29:74:b1:da:46:d3:c6:27:66:27:06:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91E02AFF923BDC6C76031F281123106254BBD618
        Validity
            Not Before: Aug 11 15:13:52 2025 GMT
            Not After : Aug 10 15:18:52 2026 GMT
        Subject: CN=A68867DF856BAF13494BFF6EE43BCBAEC3BCF8F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:d0:df:05:a3:8e:aa:5b:ca:f7:b9:8d:82:
                    ae:70:d0:4e:a2:7c:5f:cb:ec:e4:89:88:a0:65:6c:
                    1b:5b:a4:c4:ad:e7:02:35:4e:51:9f:39:be:4d:f1:
                    61:63:24:ca:9c:0b:51:26:92:2c:6a:db:db:03:f7:
                    77:19:5f:30:12:bd:01:07:cd:3d:9a:9d:3b:b8:76:
                    a5:66:f7:8c:3a:40:31:d3:3c:75:dd:94:6f:71:e8:
                    0f:d6:c6:0f:06:c5:15:a4:dd:21:41:f0:93:cf:bd:
                    d2:0b:d1:b5:e1:ce:17:c7:26:a0:15:23:9d:97:92:
                    08:a3:85:9c:ba:91:23:4e:be:8e:56:7f:ae:aa:08:
                    b9:72:f3:7a:71:da:66:70:39:f0:8e:20:8f:5d:c7:
                    ea:69:fa:a0:03:0b:ee:ee:ac:b8:36:c2:62:28:f8:
                    30:75:55:08:e3:44:b9:23:71:b1:ec:ef:fa:1d:83:
                    5c:1f:0f:42:a4:65:d0:bb:b8:e4:d1:51:dc:31:68:
                    be:45:69:02:50:8a:ab:32:bf:3a:a4:04:ee:1a:14:
                    04:08:31:76:fa:6b:14:fa:e1:2e:20:6b:6d:c8:71:
                    dd:7a:9b:f6:5b:4f:7a:5e:26:25:4d:2e:76:c8:52:
                    81:69:e6:4a:d2:ad:e6:00:50:0e:98:89:7b:b4:ed:
                    d5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:88:67:DF:85:6B:AF:13:49:4B:FF:6E:E4:3B:CB:AE:C3:BC:F8:F1
            X509v3 Authority Key Identifier:
                keyid:91:E0:2A:FF:92:3B:DC:6C:76:03:1F:28:11:23:10:62:54:BB:D6:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jVwvNXdzFTKzxkg2Uwt5jPkGTKtwC58yUufQ7kyiFui/0/91E02AFF923BDC6C76031F281123106254BBD618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91E02AFF923BDC6C76031F281123106254BBD618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jVwvNXdzFTKzxkg2Uwt5jPkGTKtwC58yUufQ7kyiFui/0/323830343a343234303a3a2f33322d3438203d3e20323637343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4240::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:a0:44:96:af:f6:35:4d:3a:12:a7:02:7c:ac:f4:fb:03:af:
         75:ef:e4:47:92:45:a6:98:fb:6b:c0:f0:cb:7f:b4:54:b9:67:
         13:51:6a:0c:63:ff:40:69:c8:61:ba:ce:6d:95:42:ee:d7:aa:
         33:eb:41:ee:15:f6:ab:c4:52:ec:de:74:97:1d:28:67:06:b4:
         59:7f:f3:b5:12:56:fd:38:d3:e8:a7:c8:80:54:77:4d:8a:43:
         9e:0d:6e:82:42:c8:fb:97:b3:12:0c:3e:54:34:65:95:13:5d:
         cd:e1:e6:97:fc:a3:6a:a6:81:bd:dd:01:6f:a8:77:ee:15:9e:
         c6:c4:83:ba:31:71:03:6a:96:4b:4c:8c:f2:3d:37:20:48:04:
         e9:63:be:f6:3b:07:e6:bf:58:a5:f0:55:35:df:0b:c0:d7:bc:
         b4:cd:c7:fa:b8:5d:9e:d2:d1:93:71:dd:cf:92:46:64:f9:59:
         d0:45:97:07:c6:3c:82:0f:b4:84:53:79:5a:fd:1a:09:18:8c:
         72:e0:db:99:bd:fd:e5:15:13:6b:e7:95:8c:ac:68:9f:e8:10:
         d9:32:2d:8c:8d:63:65:1b:f0:ab:8a:95:1b:fc:e6:81:d6:73:
         22:9d:6f:06:20:9e:eb:10:82:7d:51:6f:77:af:69:6d:92:ba:
         62:09:e3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:17:01 2025 by rpki-client