Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3332203d3e20323636333432.roa
File:                     323830343a333635343a3a2f33322d3332203d3e20323636333432.roa (raw, json)
Hash identifier:          uXRBuGs0dDBnxExIAtkWtqjLavasHXPpEgdONtwo8KQ=
Subject key identifier:   C3:ED:F2:CB:5C:E7:70:0D:50:9B:3B:9A:3B:DF:19:90:CE:51:3C:EE
Certificate issuer:       /CN=6301FDFBED14D7F3201221EA08B655E661A278D0
Certificate serial:       0D7BCD4530E2D18F8079B4C0F421F38FB4672BC6
Authority key identifier: 63:01:FD:FB:ED:14:D7:F3:20:12:21:EA:08:B6:55:E6:61:A2:78:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3332203d3e20323636333432.roa
Signing time:             Thu 26 Jun 2025 21:12:39 +0000
ROA not before:           Thu 26 Jun 2025 21:07:39 +0000
ROA not after:            Thu 25 Jun 2026 21:12:39 +0000
asID:                     266342
IP address blocks:        2804:3654::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/6301FDFBED14D7F3201221EA08B655E661A278D0.crl
                          rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/6301FDFBED14D7F3201221EA08B655E661A278D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 06:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7b:cd:45:30:e2:d1:8f:80:79:b4:c0:f4:21:f3:8f:b4:67:2b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6301FDFBED14D7F3201221EA08B655E661A278D0
        Validity
            Not Before: Jun 26 21:07:39 2025 GMT
            Not After : Jun 25 21:12:39 2026 GMT
        Subject: CN=C3EDF2CB5CE7700D509B3B9A3BDF1990CE513CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:69:70:4b:5f:6c:9f:c4:bd:8c:4e:9d:71:
                    57:96:11:26:0d:79:9a:3e:ae:5e:b5:cb:46:f8:64:
                    61:9e:1b:64:f3:e5:a5:2e:19:4f:ec:74:23:6f:dc:
                    56:c5:f0:c2:94:f0:92:17:f4:67:21:b7:26:31:af:
                    e6:1a:ec:eb:a3:d2:97:78:a3:fe:aa:dc:0d:b5:df:
                    c3:1a:ee:fb:4c:79:11:b8:ff:31:7d:91:3f:f4:c1:
                    72:5f:31:ee:6e:82:37:53:61:2f:a8:18:d0:e6:60:
                    6e:8b:18:e3:21:b0:39:d5:3e:6c:be:b8:ac:ec:30:
                    c6:3b:44:49:37:df:98:8e:75:d6:35:8a:0f:4b:37:
                    b7:4b:43:02:5d:26:dd:a5:c8:82:c6:42:5b:f1:b1:
                    d9:5f:7f:14:c2:63:7f:11:43:7d:a8:e1:7b:37:e0:
                    b8:43:09:6d:d8:f4:f1:c1:f9:fd:f8:c1:a3:fe:8e:
                    32:af:a0:1f:cc:61:f1:f6:50:2c:c8:1f:3c:a4:eb:
                    45:63:40:92:b6:0d:f5:46:b5:5c:0a:6b:0c:29:6f:
                    dd:fa:45:f3:84:37:5d:25:c9:90:e5:f1:81:a5:cc:
                    59:4d:23:18:7a:ac:56:fd:6b:b4:07:63:1d:71:a2:
                    78:90:c9:70:91:1e:7e:b5:33:18:1b:39:69:cc:be:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:ED:F2:CB:5C:E7:70:0D:50:9B:3B:9A:3B:DF:19:90:CE:51:3C:EE
            X509v3 Authority Key Identifier:
                keyid:63:01:FD:FB:ED:14:D7:F3:20:12:21:EA:08:B6:55:E6:61:A2:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/6301FDFBED14D7F3201221EA08B655E661A278D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3332203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3654::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:43:6f:b0:65:ee:4f:bb:d7:0f:25:f2:7e:97:ac:b5:01:e3:
         58:44:8f:0d:8f:c6:84:56:a9:54:bf:9b:e9:d8:f5:cf:0b:7d:
         05:8c:0f:5d:53:e6:b0:72:e0:c0:17:6a:06:87:23:5d:ad:fe:
         c1:88:0c:27:20:43:2d:44:a3:52:0c:9e:08:b6:0c:60:0e:d1:
         8c:ac:7d:55:4a:35:51:c1:0b:bf:cf:cb:bc:f6:77:88:10:34:
         ff:ce:ab:fb:79:65:7c:f5:b4:b5:02:b5:6a:5b:6f:e8:7e:58:
         c9:b2:aa:95:a5:0c:4e:47:a4:c0:d2:fe:4b:03:40:27:4b:0f:
         71:26:70:7d:3b:b5:d8:9c:db:6e:66:93:3f:34:c7:65:62:f1:
         f8:2a:7e:9d:75:71:55:dc:49:ac:74:5e:87:3c:72:14:f7:ab:
         50:ef:0e:fa:7d:27:56:26:7e:68:2d:ca:f6:8f:ab:31:78:60:
         fa:2b:0a:cc:63:79:df:64:28:70:60:92:ed:17:3e:6e:83:4c:
         fd:15:ab:47:35:27:ae:5b:97:6a:76:af:c1:25:e2:8b:2b:f2:
         29:09:58:2b:7f:ae:12:c2:0c:d0:8a:96:bc:d9:44:f5:2f:c2:
         17:e4:9d:62:32:54:4f:64:57:fc:8c:0e:0b:c6:96:2f:0c:78:
         dc:70:a5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:13:43 2025 by rpki-client