Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a3a2f33322d313238203d3e20323633383430.roa
File:                     323830343a323639343a3a2f33322d313238203d3e20323633383430.roa (raw, json)
Hash identifier:          5bVeJUqCX9YvDJ2CreHp+XJdPgYtPTE3wlgnjIX2l98=
Subject key identifier:   20:4D:3E:67:F6:7B:3B:01:07:2E:FD:C0:FD:61:AC:07:79:E7:52:F3
Certificate issuer:       /CN=19BEF5385DB6A325EBC802CC6D616B4205F118CC
Certificate serial:       7405F8D481610330E92785ED1C9856CDA1C8071A
Authority key identifier: 19:BE:F5:38:5D:B6:A3:25:EB:C8:02:CC:6D:61:6B:42:05:F1:18:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19BEF5385DB6A325EBC802CC6D616B4205F118CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a3a2f33322d313238203d3e20323633383430.roa
Signing time:             Tue 19 Aug 2025 13:29:40 +0000
ROA not before:           Tue 19 Aug 2025 13:24:40 +0000
ROA not after:            Tue 18 Aug 2026 13:29:40 +0000
asID:                     263840
IP address blocks:        2804:2694::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/19BEF5385DB6A325EBC802CC6D616B4205F118CC.crl
                          rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/19BEF5385DB6A325EBC802CC6D616B4205F118CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19BEF5385DB6A325EBC802CC6D616B4205F118CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:05:f8:d4:81:61:03:30:e9:27:85:ed:1c:98:56:cd:a1:c8:07:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BEF5385DB6A325EBC802CC6D616B4205F118CC
        Validity
            Not Before: Aug 19 13:24:40 2025 GMT
            Not After : Aug 18 13:29:40 2026 GMT
        Subject: CN=204D3E67F67B3B01072EFDC0FD61AC0779E752F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b0:ff:4d:c9:c8:48:f6:8d:60:2a:07:ba:8d:
                    20:6d:94:09:eb:cd:c1:a8:60:3d:f6:46:0b:2c:fb:
                    36:3e:a1:16:18:82:c5:f2:66:ca:13:84:89:54:e7:
                    ac:29:32:99:21:45:d8:d0:a2:28:27:4b:f3:bc:4b:
                    8f:a2:52:91:c3:af:2a:14:d4:94:32:d5:f4:be:e0:
                    a9:d2:86:51:fd:e0:30:bf:33:5d:dc:41:72:7a:5d:
                    07:ff:07:08:b8:b9:44:c4:a1:9c:ab:92:b9:77:62:
                    ca:42:45:16:11:b6:51:cb:74:dc:ab:44:f6:aa:80:
                    14:c5:e3:15:cd:99:a8:00:df:01:9d:3b:a7:ef:8c:
                    84:f5:3f:57:96:9e:37:55:b8:48:fd:4d:27:bb:e9:
                    c1:af:30:71:43:10:62:bf:a4:b9:93:3a:a2:43:34:
                    ac:29:5c:3d:96:cf:fd:e3:0f:e7:5b:77:2b:f4:00:
                    59:b6:fe:f5:5e:ef:cd:3b:c2:fe:83:fa:f7:fe:a7:
                    94:17:f7:cd:7e:ac:25:55:8d:16:09:e0:33:e3:c1:
                    23:b9:88:fc:31:7c:a7:6e:4c:59:9f:f5:b2:21:8e:
                    92:c0:f9:ba:96:25:50:1f:ba:0f:81:7d:e0:84:4b:
                    1c:60:d7:a1:4a:f2:7f:63:4c:5d:04:15:f3:d3:4c:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4D:3E:67:F6:7B:3B:01:07:2E:FD:C0:FD:61:AC:07:79:E7:52:F3
            X509v3 Authority Key Identifier:
                keyid:19:BE:F5:38:5D:B6:A3:25:EB:C8:02:CC:6D:61:6B:42:05:F1:18:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/19BEF5385DB6A325EBC802CC6D616B4205F118CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19BEF5385DB6A325EBC802CC6D616B4205F118CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a3a2f33322d313238203d3e20323633383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2694::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:d6:0a:f8:3e:1e:7b:1d:07:63:80:56:96:cd:f2:aa:67:de:
         ce:15:7c:af:a2:5a:60:eb:5c:b9:91:96:bf:e1:eb:8e:31:99:
         b1:d1:ab:bc:b2:9b:d8:67:ef:5f:72:e2:55:ee:9d:7c:17:19:
         1f:82:75:16:a1:52:52:53:7b:31:01:7c:7a:f9:1d:59:4c:71:
         a5:6b:f1:2f:02:d8:fb:8e:43:0c:61:35:f9:73:6d:3a:43:55:
         07:a2:bd:ee:cf:e4:29:87:c1:09:81:e1:47:52:f8:75:01:5b:
         3d:c9:f5:83:d3:63:0f:e7:02:1d:14:5c:0c:53:13:9e:e1:d0:
         b6:ef:6d:32:bb:f6:9a:22:fa:46:50:f3:22:12:e7:bd:10:05:
         5a:5f:ff:78:72:c6:01:6b:12:7a:ed:65:55:c0:dd:5e:6f:ec:
         52:20:bc:ee:f6:86:c1:0b:ef:e0:fd:0d:57:36:21:cf:17:88:
         97:2e:06:a7:e7:15:6f:ac:69:ba:f8:c7:37:6e:20:b0:cd:92:
         f7:1e:90:81:e2:d4:c7:27:f1:a8:90:1f:31:dd:e9:2b:75:dc:
         d3:2f:ed:7a:d0:a1:40:6d:ed:11:06:d8:67:50:a7:4a:8e:ba:
         e3:59:5a:87:94:19:22:75:3f:32:ba:5f:fe:30:eb:cd:b8:3d:
         cb:18:12:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:43:23 2025 by rpki-client