Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a383030303a3a2f33332d3333203d3e20323636333432.roa
File:                     323830343a333635343a383030303a3a2f33332d3333203d3e20323636333432.roa (raw, json)
Hash identifier:          4uWXX9b8D6uu5rZP97kAQE/FiTEsPSKqmt9yG9kk5y0=
Subject key identifier:   39:CF:23:6A:CA:CD:78:3A:FC:8E:BB:F1:C2:54:79:1A:9A:EA:A0:BD
Certificate issuer:       /CN=6301FDFBED14D7F3201221EA08B655E661A278D0
Certificate serial:       2975A309461524AFB8F0EB123F9111BFB21A6336
Authority key identifier: 63:01:FD:FB:ED:14:D7:F3:20:12:21:EA:08:B6:55:E6:61:A2:78:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a383030303a3a2f33332d3333203d3e20323636333432.roa
Signing time:             Thu 26 Jun 2025 21:12:39 +0000
ROA not before:           Thu 26 Jun 2025 21:07:39 +0000
ROA not after:            Thu 25 Jun 2026 21:12:39 +0000
asID:                     266342
IP address blocks:        2804:3654:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/6301FDFBED14D7F3201221EA08B655E661A278D0.crl
                          rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/6301FDFBED14D7F3201221EA08B655E661A278D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 06:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:75:a3:09:46:15:24:af:b8:f0:eb:12:3f:91:11:bf:b2:1a:63:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6301FDFBED14D7F3201221EA08B655E661A278D0
        Validity
            Not Before: Jun 26 21:07:39 2025 GMT
            Not After : Jun 25 21:12:39 2026 GMT
        Subject: CN=39CF236ACACD783AFC8EBBF1C254791A9AEAA0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:d0:d6:d7:7a:d4:4c:c5:f4:1d:bf:41:3b:
                    ef:43:30:6b:bd:9f:45:66:ae:68:bf:f9:5f:d5:53:
                    d1:56:ff:82:28:5f:85:bd:b8:8f:68:0e:95:e1:8d:
                    20:24:1f:a4:07:2e:cb:b6:63:d3:b8:e1:e0:65:06:
                    b1:ab:64:27:ee:fe:df:e7:c1:7e:13:4a:72:5e:6d:
                    67:93:c0:a4:1b:0b:5f:c2:ed:10:0f:49:ec:81:f3:
                    8f:24:ec:c2:cb:fd:fe:dd:b5:7f:8f:14:18:af:83:
                    52:a8:9c:72:ed:16:61:20:44:39:af:17:b1:43:ea:
                    95:a4:0b:6b:30:6b:ad:41:c9:fe:38:2f:fc:e4:f4:
                    6e:63:02:30:82:49:46:b5:33:0a:6c:ac:51:c2:6d:
                    44:46:e1:46:d6:1b:31:c4:bb:3f:9e:75:27:de:dc:
                    ab:2d:08:d4:50:ba:46:6d:8a:05:59:76:5d:cb:2d:
                    cc:dd:d0:b6:80:2d:dd:55:8c:51:08:fd:75:43:09:
                    fb:3a:17:50:3d:fb:48:4f:39:eb:97:61:b0:f0:58:
                    3a:77:1e:77:1b:bc:4a:56:fe:34:39:f0:c7:07:cd:
                    e2:22:a6:87:eb:b3:ba:75:38:5b:d4:e2:0c:a7:2e:
                    06:4a:dc:ec:22:55:70:5d:9a:8d:90:dd:02:bb:37:
                    71:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CF:23:6A:CA:CD:78:3A:FC:8E:BB:F1:C2:54:79:1A:9A:EA:A0:BD
            X509v3 Authority Key Identifier:
                keyid:63:01:FD:FB:ED:14:D7:F3:20:12:21:EA:08:B6:55:E6:61:A2:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/6301FDFBED14D7F3201221EA08B655E661A278D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a383030303a3a2f33332d3333203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3654:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         58:49:da:f3:16:fb:5f:fc:96:55:11:02:b2:d3:61:19:56:f9:
         3a:e3:d4:51:bf:2b:74:46:69:a8:97:22:33:7f:15:e7:60:01:
         69:30:97:50:7f:b7:cf:94:b1:ee:ff:50:8a:2d:94:68:ea:3b:
         9a:1d:7f:9f:62:0c:fd:63:18:5d:01:1a:e2:a0:f8:22:e5:c6:
         b6:08:7c:8c:cf:3c:ca:de:a1:47:e1:21:a2:c2:10:0b:7e:53:
         1a:7b:32:94:e8:37:df:b2:a0:d0:67:f4:77:02:f6:98:56:a7:
         ce:8f:99:c7:70:45:ed:ab:54:cd:16:23:76:fd:c7:6d:eb:73:
         95:0e:8f:d7:2c:e8:42:4f:60:d8:9b:c0:a1:8a:01:5f:32:2d:
         3b:3e:2b:e6:f6:8b:b1:68:e1:1a:82:21:23:19:d9:53:81:fe:
         70:bc:83:b3:13:30:04:20:96:cc:85:32:b6:9e:3d:ab:5b:ee:
         9c:98:9f:5e:3b:68:56:f4:83:3b:6a:16:22:6e:bb:e6:33:f0:
         11:fd:1c:f3:e1:20:ab:36:d2:1e:4d:52:0c:e9:e8:03:71:a4:
         f7:e8:e3:7f:96:83:62:e5:7b:e8:c3:e0:95:38:9c:a6:bd:3b:
         f2:2a:d7:f2:1b:31:7d:c7:a8:71:06:86:d8:21:6e:e8:54:21:
         9c:e1:93:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:22:36 2025 by rpki-client