Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a3a2f33322d3332203d3e20323633363431.roa
File:                     323830343a313039343a3a2f33322d3332203d3e20323633363431.roa (raw, json)
Hash identifier:          dgzxM+0gIyzy/CqkkwaJhK8WxuYXZ5qqExjhhhzbivk=
Subject key identifier:   14:D9:5E:F6:10:81:3D:00:EB:9E:98:FD:5D:AB:DA:66:C9:8C:D7:A0
Certificate issuer:       /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
Certificate serial:       35A60E7DEA309C484484A9F823187ED9E9C29B12
Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a3a2f33322d3332203d3e20323633363431.roa
Signing time:             Mon 30 Jun 2025 01:10:21 +0000
ROA not before:           Mon 30 Jun 2025 01:05:21 +0000
ROA not after:            Mon 29 Jun 2026 01:10:21 +0000
asID:                     263641
IP address blocks:        2804:1094::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a6:0e:7d:ea:30:9c:48:44:84:a9:f8:23:18:7e:d9:e9:c2:9b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
        Validity
            Not Before: Jun 30 01:05:21 2025 GMT
            Not After : Jun 29 01:10:21 2026 GMT
        Subject: CN=14D95EF610813D00EB9E98FD5DABDA66C98CD7A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ca:51:07:aa:3c:4a:b5:7a:d9:a0:a9:93:0b:
                    db:dd:4b:e0:7b:c2:c2:93:53:a8:80:f7:f5:b3:bb:
                    1c:2b:37:60:02:62:d9:22:44:d5:3c:0b:f8:6b:73:
                    2d:dd:cd:7b:35:c6:66:93:7b:5a:b0:91:ab:ba:cd:
                    71:4d:b3:51:ce:6b:4b:6f:de:a8:83:48:b2:b4:e0:
                    f5:0c:1e:84:ba:9d:cb:50:27:69:0f:e2:9e:78:b5:
                    20:4d:dd:19:a6:11:83:3a:c2:e8:6f:85:c8:e1:87:
                    e9:f7:f2:59:c5:b1:ac:b2:b0:8d:67:b1:05:dd:ca:
                    ea:75:da:dd:b9:4e:a2:87:df:cd:43:e4:a2:99:ef:
                    15:0a:0a:a1:5a:b3:90:a6:47:f2:c5:2a:5a:b8:b6:
                    05:bd:f4:2a:e5:78:b7:ab:5e:42:96:13:43:20:0f:
                    9e:12:e7:68:cf:b2:b0:3a:6b:21:59:34:0a:ca:1f:
                    18:23:af:44:99:cb:28:fb:a4:96:c5:5e:23:85:9f:
                    ce:99:43:07:be:1a:b5:63:d6:ce:43:21:f0:78:50:
                    04:a2:cc:ec:26:2f:2e:64:2d:40:fb:29:65:4c:40:
                    5a:4c:9e:85:b1:c9:7a:5f:0d:2e:72:c7:11:35:65:
                    70:ba:54:dd:e0:11:93:ca:14:e5:bf:eb:aa:6a:02:
                    59:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D9:5E:F6:10:81:3D:00:EB:9E:98:FD:5D:AB:DA:66:C9:8C:D7:A0
            X509v3 Authority Key Identifier:
                keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a3a2f33322d3332203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1094::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:89:5e:e5:6c:8c:d6:a0:1a:f8:96:73:3c:40:0a:f6:60:48:
         93:ac:2c:32:45:91:db:5a:75:96:df:ba:6e:8c:fd:0b:57:f5:
         1f:9a:31:d6:4a:36:13:45:d5:25:08:11:b9:20:be:a2:9f:2c:
         73:b8:72:7a:aa:92:70:0e:b8:73:b8:b8:55:e4:68:1c:f5:70:
         28:e3:73:de:d4:d7:19:5f:e7:fb:61:cf:32:db:98:82:55:92:
         96:f8:42:35:15:78:11:be:78:6d:6e:6e:62:51:06:6e:cc:1c:
         19:94:44:49:9e:59:e4:1f:16:32:6a:69:23:4b:23:45:b6:f6:
         18:80:40:1b:17:4a:a9:86:cb:05:72:e8:ae:28:4a:9e:98:e6:
         01:71:95:e8:d8:6a:9c:f3:dc:c1:d7:34:6b:d1:c5:d3:bb:61:
         56:76:55:1f:7e:fe:dc:37:ee:cd:82:52:3e:d7:58:cc:f8:a6:
         ec:cb:e6:38:73:d5:06:2f:59:07:8e:c8:8e:76:6e:4f:ce:eb:
         58:af:13:2a:31:28:40:a6:ea:af:07:3e:fa:9d:78:d3:77:0c:
         92:72:dc:1c:4b:e3:57:6a:5b:05:b8:b9:4b:8a:1f:fc:56:7c:
         a1:14:b3:1c:95:6c:10:2c:6f:83:3d:48:10:54:5b:d9:21:5a:
         9e:cd:b1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:43:36 2025 by rpki-client