Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3437343a3a2f33322d313238203d3e203238363439.roa
File:                     323830343a3437343a3a2f33322d313238203d3e203238363439.roa (raw, json)
Hash identifier:          TqcxI7t0VK4N3nfoKF+s/D/R9U6z+QcRrQisbH6Bbfg=
Subject key identifier:   B5:76:33:3C:86:45:67:36:70:28:9F:B5:34:0D:8E:FB:F4:F3:E3:15
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       01F0656EA211AA5C8DCCBA507CBB02ED823D1B2A
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3437343a3a2f33322d313238203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:37:49 +0000
ROA not before:           Fri 15 Aug 2025 20:32:49 +0000
ROA not after:            Fri 14 Aug 2026 20:37:49 +0000
asID:                     28649
IP address blocks:        2804:474::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f0:65:6e:a2:11:aa:5c:8d:cc:ba:50:7c:bb:02:ed:82:3d:1b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:32:49 2025 GMT
            Not After : Aug 14 20:37:49 2026 GMT
        Subject: CN=B576333C8645673670289FB5340D8EFBF4F3E315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:85:9a:e1:e1:dd:0e:db:0c:05:ef:33:d4:72:
                    22:85:32:75:07:81:b0:a7:99:57:10:e3:37:54:3c:
                    e4:c8:47:0a:00:b1:27:d3:37:9f:54:88:cb:79:e9:
                    b3:a9:5f:8b:8e:29:2c:ef:65:a5:04:01:99:09:06:
                    9f:f9:ad:d9:fd:22:f6:d6:0a:ca:9f:84:06:72:c2:
                    f5:6a:fe:1a:9a:ed:f7:4b:97:41:df:c5:40:ba:e7:
                    1b:e5:4c:ae:02:a6:77:3a:9f:40:76:1a:98:89:8a:
                    ba:2f:0c:7b:5d:a5:20:5a:9a:3b:cb:c1:f1:c2:7d:
                    d0:42:74:28:55:54:29:00:9a:27:91:83:97:9c:44:
                    03:32:0f:a6:20:c2:64:b6:ed:bd:e7:ff:03:65:56:
                    71:26:7e:a3:73:9c:c6:49:e4:d4:14:45:38:b5:72:
                    79:d1:81:e3:e6:6b:3b:64:0b:f0:de:e5:2d:15:59:
                    fd:a5:9b:e9:a3:0d:ef:56:4b:90:4a:88:f2:c3:c6:
                    0e:9f:70:d8:5f:60:72:1e:20:3e:77:31:7c:c3:25:
                    60:a7:2e:29:f2:26:ca:5e:9a:93:2c:cb:83:ef:b3:
                    98:af:bc:0f:48:da:56:e4:47:87:0f:3c:c9:d0:72:
                    58:5c:63:e1:c2:4c:14:99:69:38:3e:77:6d:48:a4:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:76:33:3C:86:45:67:36:70:28:9F:B5:34:0D:8E:FB:F4:F3:E3:15
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3437343a3a2f33322d313238203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:474::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:73:9e:67:e6:a0:da:1e:8f:cf:78:8e:f2:66:ea:97:e6:
         2b:61:28:a4:f1:b1:b5:6e:17:c7:bc:27:09:ec:81:ef:86:ac:
         ea:d6:d7:31:99:2a:38:92:1c:29:1d:7b:1f:54:41:84:97:49:
         b4:7e:ad:d7:b2:f9:58:a8:e8:d5:1b:db:41:8f:1e:a0:6e:1c:
         9a:a9:b9:8b:01:17:5a:da:8d:a0:05:9d:34:cc:d6:8c:42:55:
         18:c9:16:cc:40:87:41:98:42:7a:1c:67:f1:ab:72:9c:87:42:
         03:f0:9d:f2:e2:33:09:f0:19:4e:e0:fc:98:95:11:ab:16:79:
         ca:2f:68:4f:0e:b8:04:17:af:57:13:78:70:6f:73:c9:0f:19:
         68:29:e0:4f:7d:e8:df:e3:01:bb:97:a9:57:15:21:41:c6:f3:
         99:8d:0f:a6:02:cb:82:3b:07:79:60:32:68:6f:6c:67:84:5c:
         f3:9a:25:6f:f2:2f:32:d9:74:f8:46:86:b3:a4:21:c3:37:31:
         06:c6:17:e5:1a:ff:18:58:96:bb:65:c5:46:20:b0:9b:50:67:
         11:78:a3:d8:17:3a:2b:1e:80:77:4e:77:cc:ee:25:97:7b:14:
         5e:6a:33:1a:23:45:9e:08:b9:e3:d9:90:d1:8e:bd:eb:32:0e:
         b7:ca:92:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:50 2025 by rpki-client