Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa
File:                     323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa (raw, json)
Hash identifier:          g+WUeysjOb1i35me5nMMNELSz7/nLnKtWemgvhtA56o=
Subject key identifier:   FE:2B:1F:ED:48:7A:A6:58:2A:23:F0:22:92:06:26:79:72:AF:E2:34
Certificate issuer:       /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
Certificate serial:       6166B6F2B2E11C58CE7F5119C06CA08B5B7A57AB
Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa
Signing time:             Mon 30 Jun 2025 01:10:21 +0000
ROA not before:           Mon 30 Jun 2025 01:05:21 +0000
ROA not after:            Mon 29 Jun 2026 01:10:21 +0000
asID:                     263641
IP address blocks:        2804:1094:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 17:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:66:b6:f2:b2:e1:1c:58:ce:7f:51:19:c0:6c:a0:8b:5b:7a:57:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
        Validity
            Not Before: Jun 30 01:05:21 2025 GMT
            Not After : Jun 29 01:10:21 2026 GMT
        Subject: CN=FE2B1FED487AA6582A23F0229206267972AFE234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:98:d8:5f:3e:b2:d9:e1:fd:48:ff:72:9b:
                    b4:32:e2:18:90:85:00:a6:7d:8f:53:17:64:52:2e:
                    ab:e3:4b:ce:36:52:fd:76:01:1d:98:6f:65:0d:c1:
                    66:d5:43:fb:24:49:9a:30:0b:43:74:27:37:e5:11:
                    e6:28:82:cd:f7:67:4b:32:9d:fe:96:ef:bd:dd:67:
                    8f:d6:93:6c:7d:0f:fd:44:82:c1:0e:b7:e9:d2:3d:
                    47:77:5e:e2:76:f6:1e:29:0a:8b:89:5b:a0:43:cb:
                    b7:aa:e3:da:8e:aa:c5:6f:cc:10:c0:90:8d:d0:dd:
                    e4:fe:7f:6b:c1:ad:1b:dd:e6:55:aa:02:93:de:a7:
                    3a:f0:e2:11:07:38:6f:41:5a:14:17:f4:41:de:9b:
                    00:92:11:3f:1a:bb:2e:df:06:99:fc:23:8b:f5:05:
                    61:75:e1:1c:8d:22:f4:9c:c6:da:88:25:db:cb:21:
                    9b:fa:01:38:5a:9e:dc:78:c9:62:e7:28:63:dd:be:
                    42:4d:20:6b:dc:dc:d2:b9:97:52:2b:e6:68:23:a2:
                    fd:75:1d:ba:27:25:30:ed:de:04:00:00:65:48:6f:
                    b4:fd:a7:2f:c9:34:10:46:2a:0d:de:c3:df:72:b7:
                    ae:b9:35:56:67:28:de:80:24:89:bf:1f:50:aa:5f:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2B:1F:ED:48:7A:A6:58:2A:23:F0:22:92:06:26:79:72:AF:E2:34
            X509v3 Authority Key Identifier:
                keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1094:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:8e:7b:1a:d8:a5:2e:55:95:2a:fc:ee:de:c4:be:98:9f:c2:
         a8:15:62:b6:19:da:26:85:20:b8:83:a8:e3:71:19:5b:e2:e5:
         61:6a:01:c1:26:2f:dc:61:6d:cd:32:24:ab:8e:ea:bf:51:45:
         e2:30:32:4e:0a:1e:85:90:fe:5f:8f:b5:bc:42:c2:3d:2e:65:
         9f:62:72:45:0b:39:54:57:95:31:2f:af:86:de:af:f7:a7:9f:
         16:51:02:f4:47:67:ff:d3:66:08:d9:9e:22:68:40:7b:ad:8c:
         af:a7:11:5b:61:24:4f:18:34:bb:97:85:ad:46:f5:df:18:35:
         83:ee:02:f6:6d:22:c1:a1:e1:1d:8d:fd:23:21:8f:d7:a6:b2:
         4f:36:39:12:a6:51:b0:e6:16:b9:09:a6:b6:c7:b4:50:c5:9b:
         8e:e5:82:b1:24:be:8e:da:9f:ba:28:52:13:90:20:24:20:04:
         de:44:62:2c:a8:9e:1c:7a:e6:a0:5a:1e:98:b8:75:9e:f2:13:
         68:b2:4c:c5:7c:d5:70:23:c5:c1:3a:68:0a:f2:e5:c9:40:ac:
         3d:98:dd:11:7b:63:e6:49:14:f6:32:fa:a3:9f:50:18:49:cf:
         e7:f1:39:18:5c:7d:bd:8e:ca:de:69:93:2d:90:3b:12:97:36:
         12:84:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:37:28 2025 by rpki-client