Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/0/323830343a363733383a3a2f33322d3438203d3e20323639363134.roa
File:                     323830343a363733383a3a2f33322d3438203d3e20323639363134.roa (raw, json)
Hash identifier:          bSuCSJ8KqzKEjy43w7XvmRbPMTDTe5VL8txU5ISujWA=
Subject key identifier:   DE:12:0F:5B:EB:4D:DB:87:B4:4C:AD:5B:D4:47:2B:D5:E6:16:A4:49
Certificate issuer:       /CN=762B7ED75B87942021F3428553C319CDFF715C84
Certificate serial:       3A6C7AD36B3F9182A471FC6919A7244425FB628D
Authority key identifier: 76:2B:7E:D7:5B:87:94:20:21:F3:42:85:53:C3:19:CD:FF:71:5C:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/762B7ED75B87942021F3428553C319CDFF715C84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/0/323830343a363733383a3a2f33322d3438203d3e20323639363134.roa
Signing time:             Fri 04 Jul 2025 17:50:57 +0000
ROA not before:           Fri 04 Jul 2025 17:45:57 +0000
ROA not after:            Fri 03 Jul 2026 17:50:57 +0000
asID:                     269614
IP address blocks:        2804:6738::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/0/762B7ED75B87942021F3428553C319CDFF715C84.crl
                          rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/0/762B7ED75B87942021F3428553C319CDFF715C84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/762B7ED75B87942021F3428553C319CDFF715C84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 15:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6c:7a:d3:6b:3f:91:82:a4:71:fc:69:19:a7:24:44:25:fb:62:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762B7ED75B87942021F3428553C319CDFF715C84
        Validity
            Not Before: Jul  4 17:45:57 2025 GMT
            Not After : Jul  3 17:50:57 2026 GMT
        Subject: CN=DE120F5BEB4DDB87B44CAD5BD4472BD5E616A449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a5:e1:41:53:59:82:cc:68:34:11:b9:cb:14:
                    ec:9f:44:e0:60:71:53:1c:d3:6d:9f:79:2b:aa:9f:
                    c2:1e:7b:74:4c:c3:74:f4:de:21:8a:57:32:87:f2:
                    c5:ba:18:f6:84:29:d1:b4:54:14:16:a7:47:5a:e4:
                    16:af:32:cc:bd:b6:3f:16:ff:e4:2a:bf:eb:22:9e:
                    f8:42:6d:7f:2a:b6:5a:41:7d:6b:9a:15:1d:50:ce:
                    2d:fd:67:9a:21:d7:39:a1:01:28:66:15:4f:52:42:
                    5a:14:67:46:a1:b8:17:30:63:c8:28:3a:24:0f:f9:
                    aa:ae:91:ea:fe:4d:18:50:33:19:cd:c8:bd:02:3f:
                    58:a5:ca:69:70:19:63:2e:61:8e:39:ae:3f:eb:ec:
                    a3:bd:7a:30:ef:d7:e1:a8:8c:3b:ef:73:4b:be:cb:
                    c2:83:5f:25:ba:00:0a:b1:5a:bb:d9:c3:8b:94:c7:
                    a0:84:f7:c6:a2:cf:98:7c:d9:85:fe:57:9f:ae:af:
                    b9:11:59:94:2a:dd:12:bf:82:7b:e4:ff:cf:25:bf:
                    7f:13:de:97:f6:f1:d0:c5:38:52:f4:3e:89:1a:54:
                    88:d1:3b:8b:11:8f:3b:83:bd:14:d8:31:7f:87:b8:
                    34:59:72:5e:92:e0:e1:74:ea:4c:72:4f:95:29:9b:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:12:0F:5B:EB:4D:DB:87:B4:4C:AD:5B:D4:47:2B:D5:E6:16:A4:49
            X509v3 Authority Key Identifier:
                keyid:76:2B:7E:D7:5B:87:94:20:21:F3:42:85:53:C3:19:CD:FF:71:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/0/762B7ED75B87942021F3428553C319CDFF715C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/762B7ED75B87942021F3428553C319CDFF715C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/0/323830343a363733383a3a2f33322d3438203d3e20323639363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6738::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:ef:34:53:c0:ea:01:cb:04:7b:4a:da:5e:86:db:48:55:0a:
         93:0d:17:55:a9:31:1d:97:a0:3a:cc:8e:cb:d0:bf:ec:c1:06:
         39:24:d0:2b:c5:d7:7e:44:b3:33:36:be:ce:7c:f4:19:ec:6d:
         d1:25:e6:52:fd:11:93:8f:b9:c2:e4:88:01:29:f1:54:51:e9:
         b6:84:fe:59:64:6b:f4:fc:82:71:fc:b5:3b:56:8c:b9:87:c4:
         9b:85:70:e1:70:c8:19:91:40:52:3b:43:61:5f:24:44:31:f8:
         5f:a3:ee:60:e0:23:7f:bf:34:6f:fa:c9:c3:0a:5e:18:42:fb:
         1c:35:06:9b:45:e9:82:c8:9d:1b:32:a9:ec:8e:b3:b7:78:16:
         91:09:9c:08:31:dd:09:2c:ee:3c:37:4e:65:a0:49:cd:0d:f5:
         da:82:69:65:23:ef:96:4f:66:23:1f:41:4c:25:3b:2b:4f:aa:
         b7:59:c8:dc:04:ce:63:ab:82:47:ab:d5:ad:70:29:14:8c:23:
         aa:c0:d6:06:b0:17:6d:73:7c:e0:0e:f1:bf:6e:83:97:69:eb:
         56:77:47:26:ca:1f:49:c4:a9:c8:7e:39:7a:d3:62:58:d9:22:
         25:94:50:ed:98:33:5d:ef:1d:7f:80:bd:47:15:9b:ea:9f:05:
         9c:2c:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:16:12 2025 by rpki-client