Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/323830343a376337383a3a2f33322d313238203d3e20323731343938.roa
File:                     323830343a376337383a3a2f33322d313238203d3e20323731343938.roa (raw, json)
Hash identifier:          eywyiW7uKdnAL0xV15SRR3NnrVG6W+Sqlc8QhQ5xNlw=
Subject key identifier:   EF:92:87:86:6F:63:E8:D8:35:9D:5F:EC:0B:5C:0B:04:FA:F9:5F:B4
Certificate issuer:       /CN=E6383E48B395C27D95D840DE0BCC802FA070B54A
Certificate serial:       29C222F96C919C5703F7E305A6249F9A7D20FBE8
Authority key identifier: E6:38:3E:48:B3:95:C2:7D:95:D8:40:DE:0B:CC:80:2F:A0:70:B5:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6383E48B395C27D95D840DE0BCC802FA070B54A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/323830343a376337383a3a2f33322d313238203d3e20323731343938.roa
Signing time:             Wed 25 Jun 2025 21:31:08 +0000
ROA not before:           Wed 25 Jun 2025 21:26:08 +0000
ROA not after:            Wed 24 Jun 2026 21:31:08 +0000
asID:                     271498
IP address blocks:        2804:7c78::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/E6383E48B395C27D95D840DE0BCC802FA070B54A.crl
                          rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/E6383E48B395C27D95D840DE0BCC802FA070B54A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6383E48B395C27D95D840DE0BCC802FA070B54A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 07:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c2:22:f9:6c:91:9c:57:03:f7:e3:05:a6:24:9f:9a:7d:20:fb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6383E48B395C27D95D840DE0BCC802FA070B54A
        Validity
            Not Before: Jun 25 21:26:08 2025 GMT
            Not After : Jun 24 21:31:08 2026 GMT
        Subject: CN=EF9287866F63E8D8359D5FEC0B5C0B04FAF95FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:bb:c1:ba:db:52:63:2c:2f:c3:6a:c6:dd:
                    80:a1:40:24:d4:5b:a4:d8:23:09:3d:10:a1:23:75:
                    7e:85:1e:7d:5a:ea:f9:bd:5f:42:c8:c7:f8:37:4e:
                    01:1d:63:b2:2d:75:22:01:7c:15:ae:d4:a1:94:6e:
                    dc:db:4e:0c:9e:f0:eb:17:28:16:df:2f:cb:87:06:
                    0c:b9:85:56:65:d7:f6:40:3a:bb:ad:04:01:84:dd:
                    65:5b:a8:3d:5d:3b:ad:4d:f8:99:6c:22:f7:1b:75:
                    3d:58:18:68:70:e7:2c:96:61:f5:9f:5c:43:8c:c3:
                    16:17:d0:06:c2:b9:40:c9:12:dc:e3:b0:86:cc:44:
                    2a:28:ed:e2:ee:fd:5d:14:a9:72:f7:85:dc:8c:23:
                    db:48:44:ba:06:dc:80:57:18:3c:09:97:9b:a9:02:
                    e2:37:f4:35:ec:fc:4a:24:40:48:36:65:cf:67:ee:
                    7a:4c:f7:c7:65:b0:d8:0b:b6:4e:eb:5d:79:d1:82:
                    36:90:fa:64:5b:06:ca:5d:4a:48:fc:1b:87:36:f9:
                    32:fc:ea:70:68:29:b1:49:ea:a5:19:54:eb:00:d5:
                    54:1c:7e:45:5a:a3:74:a1:09:51:cc:0e:ce:8b:9b:
                    f3:7a:91:86:fe:d0:22:0a:0a:a7:cd:91:58:da:23:
                    21:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:92:87:86:6F:63:E8:D8:35:9D:5F:EC:0B:5C:0B:04:FA:F9:5F:B4
            X509v3 Authority Key Identifier:
                keyid:E6:38:3E:48:B3:95:C2:7D:95:D8:40:DE:0B:CC:80:2F:A0:70:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/E6383E48B395C27D95D840DE0BCC802FA070B54A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6383E48B395C27D95D840DE0BCC802FA070B54A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/323830343a376337383a3a2f33322d313238203d3e20323731343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c78::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:ab:aa:4e:d2:83:81:54:7f:90:72:f7:e7:16:a2:e1:4f:c6:
         ab:7d:04:63:f8:1e:ff:84:72:5c:8c:2d:89:61:d0:78:f3:2b:
         e6:ee:30:0d:b8:34:c3:5e:bc:36:38:09:9a:77:63:2e:95:35:
         bf:aa:f1:c0:fa:f7:23:c7:a6:23:74:dd:40:d2:57:59:37:0e:
         4d:27:b4:a6:0f:3a:be:02:84:f4:4e:d4:52:10:73:e7:8f:c5:
         75:1b:bf:4e:a6:11:d7:c1:8d:f3:a9:8d:86:23:12:77:65:bb:
         57:2f:24:90:7a:91:8c:e1:bf:5a:da:a7:18:99:c4:a8:90:66:
         ed:8b:1c:a1:b6:11:58:c4:71:c6:03:40:3c:45:ac:ba:84:6a:
         17:f9:3d:c6:5c:49:f6:99:30:40:f7:40:65:60:46:21:ce:6d:
         8d:80:32:9b:79:e2:72:76:98:43:ea:27:f1:b5:06:ed:e4:b4:
         59:7b:8f:76:e3:11:93:be:3c:88:a6:9f:74:02:5c:88:17:fe:
         f9:50:38:1e:29:59:44:1a:87:ea:3e:ed:a0:59:23:01:ee:26:
         70:41:87:f7:99:3a:64:37:0c:81:27:e3:9a:b0:6b:24:29:1c:
         ae:62:fc:41:ad:e6:08:2d:8c:5d:74:40:83:0b:f1:49:a7:99:
         81:44:8f:a7
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUKcIi+WyRnFcD9+MFpiSfmn0g++gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYzODNFNDhCMzk1QzI3RDk1RDg0MERFMEJDQzgwMkZB
MDcwQjU0QTAeFw0yNTA2MjUyMTI2MDhaFw0yNjA2MjQyMTMxMDhaMDMxMTAvBgNV
BAMTKEVGOTI4Nzg2NkY2M0U4RDgzNTlENUZFQzBCNUMwQjA0RkFGOTVGQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwwLvButtSYywvw2rG3YChQCTU
W6TYIwk9EKEjdX6FHn1a6vm9X0LIx/g3TgEdY7ItdSIBfBWu1KGUbtzbTgye8OsX
KBbfL8uHBgy5hVZl1/ZAOrutBAGE3WVbqD1dO61N+JlsIvcbdT1YGGhw5yyWYfWf
XEOMwxYX0AbCuUDJEtzjsIbMRCoo7eLu/V0UqXL3hdyMI9tIRLoG3IBXGDwJl5up
AuI39DXs/EokQEg2Zc9n7npM98dlsNgLtk7rXXnRgjaQ+mRbBspdSkj8G4c2+TL8
6nBoKbFJ6qUZVOsA1VQcfkVao3ShCVHMDs6Lm/N6kYb+0CIKCqfNkVjaIyGxAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU75KHhm9j6Ng1nV/sC1wLBPr5X7QwHwYDVR0j
BBgwFoAU5jg+SLOVwn2V2EDeC8yAL6BwtUowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2M5NjNtTGNWRkszRG9NWVFScXJzN2dibW1xc3pGcjZOTHFTV3ROd3JG
SDYvMC9FNjM4M0U0OEIzOTVDMjdEOTVEODQwREUwQkNDODAyRkEwNzBCNTRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2MzgzRTQ4QjM5NUMyN0Q5
NUQ4NDBERTBCQ0M4MDJGQTA3MEI1NEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NjOTYzbUxjVkZLM0RvTVlRUnFyczdnYm1tcXN6RnI2TkxxU1d0TndyRkg2LzAv
MzIzODMwMzQzYTM3NjMzNzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNDM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHx4MA0GCSqGSIb3DQEBCwUAA4IBAQBcq6pO
0oOBVH+QcvfnFqLhT8arfQRj+B7/hHJcjC2JYdB48yvm7jANuDTDXrw2OAmad2Mu
lTW/qvHA+vcjx6YjdN1A0ldZNw5NJ7SmDzq+AoT0TtRSEHPnj8V1G79OphHXwY3z
qY2GIxJ3ZbtXLySQepGM4b9a2qcYmcSokGbtixyhthFYxHHGA0A8Ray6hGoX+T3G
XEn2mTBA90BlYEYhzm2NgDKbeeJydphD6ifxtQbt5LRZe4924xGTvjyIpp90AlyI
F/75UDgeKVlEGofqPu2gWSMB7iZwQYf3mTpkNwyBJ+OasGskKRyuYvxBreYILYxd
dECDC/FJp5mBRI+n
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:59:28 2025 by rpki-client