Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33322d3438203d3e20323730363030.roa
File:                     323830343a366537633a3a2f33322d3438203d3e20323730363030.roa (raw, json)
Hash identifier:          JYK/WP9Vk6MW3CYYUpIEVJ/Al4IQyYWxuhhf/X7sW3U=
Subject key identifier:   72:55:FD:07:1B:55:37:6E:96:B1:5E:25:F1:6F:A4:A0:87:2A:52:DA
Certificate issuer:       /CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
Certificate serial:       2F3BE6C50066B689C6B0EDAAA8DDE4ACCA6BC8F9
Authority key identifier: 10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33322d3438203d3e20323730363030.roa
Signing time:             Tue 01 Jul 2025 15:51:53 +0000
ROA not before:           Tue 01 Jul 2025 15:46:53 +0000
ROA not after:            Tue 30 Jun 2026 15:51:53 +0000
asID:                     270600
IP address blocks:        2804:6e7c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl
                          rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 17:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3b:e6:c5:00:66:b6:89:c6:b0:ed:aa:a8:dd:e4:ac:ca:6b:c8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
        Validity
            Not Before: Jul  1 15:46:53 2025 GMT
            Not After : Jun 30 15:51:53 2026 GMT
        Subject: CN=7255FD071B55376E96B15E25F16FA4A0872A52DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:c8:4b:d1:31:fa:a3:33:ee:ba:db:63:fc:
                    9c:5c:fd:c0:d0:2d:74:aa:b4:c0:00:9b:83:5c:62:
                    9c:8e:4e:73:d8:11:e2:3b:e0:9b:a2:b7:d3:59:10:
                    29:bc:6b:53:56:0d:e9:39:6c:37:0f:20:49:de:d8:
                    9b:3a:66:11:7a:16:38:cf:77:47:0a:f3:73:16:4a:
                    1e:85:b6:d1:26:17:3c:45:f1:e1:ee:cb:0e:c9:73:
                    53:38:40:a7:93:aa:03:c7:8b:6e:8b:2c:30:0e:05:
                    bc:be:9e:31:8d:2e:68:a9:c8:a8:bb:f4:79:86:1a:
                    4c:5d:ec:8e:49:b8:15:eb:1f:e8:22:ed:25:1d:92:
                    d6:c2:f7:00:d5:ea:30:14:16:78:8b:92:50:ab:0f:
                    1b:fe:6d:ef:48:65:40:ba:6d:41:d6:66:e3:1b:32:
                    25:d2:fc:36:05:3e:25:87:64:f3:4d:62:27:16:a6:
                    df:8e:34:90:31:d2:78:9f:86:df:4b:bb:83:56:47:
                    57:88:7b:46:c7:d9:e4:96:ce:99:0c:04:df:8f:7a:
                    1b:24:d2:28:f8:b6:f2:8a:82:61:a7:82:0f:14:16:
                    7c:f7:aa:4f:c4:dd:12:a4:8c:5a:10:6f:9e:04:08:
                    02:f7:55:57:5e:0e:d7:56:3e:d9:36:f5:e5:61:28:
                    88:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:55:FD:07:1B:55:37:6E:96:B1:5E:25:F1:6F:A4:A0:87:2A:52:DA
            X509v3 Authority Key Identifier:
                keyid:10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33322d3438203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:39:a7:be:7b:e8:74:d5:b7:93:fe:99:c2:b1:a1:68:20:f2:
         a3:66:5b:81:9c:aa:fa:a8:6e:cd:6f:41:9d:2b:65:47:26:18:
         cd:21:d1:49:10:4d:f6:8a:42:02:b6:04:5d:c1:0c:43:c0:ec:
         a5:9d:85:1a:00:eb:80:03:98:e6:05:d1:cb:49:a0:0c:8f:63:
         03:e4:fd:fa:96:64:ba:94:06:db:67:8f:e3:92:7b:2f:a6:be:
         a1:80:c1:f3:6b:da:0f:1f:13:e4:ea:38:6f:60:7a:ea:93:72:
         4e:de:f8:c8:d0:96:a7:45:56:8c:69:bf:ea:bd:d1:95:98:98:
         9e:23:d4:5d:77:8a:69:d3:17:b5:4d:f0:cf:6d:12:23:ad:d8:
         46:35:45:9d:c6:47:2f:64:20:ae:28:c5:d4:21:b2:57:c1:07:
         a1:39:5f:15:94:ed:f0:94:af:47:28:27:28:8c:ff:0f:17:34:
         d7:c4:68:ca:b9:f1:88:62:ed:39:6d:3b:07:f8:db:78:55:d7:
         e2:14:88:2d:6d:ca:30:90:89:05:3c:40:cd:9a:b5:f7:3c:cd:
         1d:8c:97:ea:0d:8a:d7:e0:61:2f:d2:3b:56:77:a0:a2:75:ef:
         10:ac:1e:44:e2:f9:1f:1c:08:f9:a6:86:be:5f:6b:6e:17:6f:
         c9:e4:f0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 05:54:12 2025 by rpki-client