Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/323830343a366239383a3a2f33322d313238203d3e20323730343131.roa
File:                     323830343a366239383a3a2f33322d313238203d3e20323730343131.roa (raw, json)
Hash identifier:          5QA4lA3mV4VufAyce7gjqSGby0WktCUzJE2IVoqw5wk=
Subject key identifier:   89:E7:AD:80:B1:82:B5:AD:97:1D:FF:6A:23:8C:FB:62:D2:2E:EC:AD
Certificate issuer:       /CN=12C134EB24E98B21A2D6816B023560C23DA02BE0
Certificate serial:       3826639FBFCE338A46E75163F4E68C5C53ED4ABC
Authority key identifier: 12:C1:34:EB:24:E9:8B:21:A2:D6:81:6B:02:35:60:C2:3D:A0:2B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/323830343a366239383a3a2f33322d313238203d3e20323730343131.roa
Signing time:             Wed 13 Aug 2025 14:15:59 +0000
ROA not before:           Wed 13 Aug 2025 14:10:59 +0000
ROA not after:            Wed 12 Aug 2026 14:15:59 +0000
asID:                     270411
IP address blocks:        2804:6b98::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.crl
                          rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:09:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:26:63:9f:bf:ce:33:8a:46:e7:51:63:f4:e6:8c:5c:53:ed:4a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12C134EB24E98B21A2D6816B023560C23DA02BE0
        Validity
            Not Before: Aug 13 14:10:59 2025 GMT
            Not After : Aug 12 14:15:59 2026 GMT
        Subject: CN=89E7AD80B182B5AD971DFF6A238CFB62D22EECAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:1b:ed:a4:69:6a:db:37:ac:ce:d9:47:18:
                    c7:29:4f:8c:31:8b:a0:c6:3a:ed:32:74:e4:36:fb:
                    4e:24:94:e2:b6:2d:3b:38:3e:ff:12:a0:14:b8:c6:
                    49:0b:b1:9a:3f:69:dc:67:4e:1e:b5:30:2e:b0:61:
                    51:df:55:ab:d8:d9:f7:c1:2f:60:4c:9b:52:f4:55:
                    7f:b3:2c:16:85:34:dc:ae:46:a5:22:96:f6:3f:f1:
                    cd:7b:d4:93:a7:50:fb:fb:92:89:94:c8:4a:28:22:
                    d3:b7:39:75:dc:a6:da:9d:7c:0f:a3:81:80:59:f9:
                    a0:c2:94:8b:ca:e9:c5:f2:51:da:da:f4:b0:c9:f8:
                    1c:72:95:b1:1f:00:3d:61:3c:13:23:76:aa:0c:fa:
                    90:36:01:57:08:3b:ff:03:96:bf:04:a5:b0:c4:2c:
                    ad:44:1e:60:b6:07:d6:c5:ef:15:3c:e1:a7:a3:fe:
                    39:77:f9:e6:c4:87:c8:13:a8:44:a9:ad:35:bc:d2:
                    31:91:35:3e:2d:08:d1:7a:69:27:09:da:23:e1:67:
                    07:42:61:2c:78:b5:5d:8d:41:9d:a3:94:5e:9b:c1:
                    58:35:c8:21:b5:94:5f:4c:6f:6c:fa:aa:31:61:a5:
                    dc:6a:41:70:57:9b:dd:35:93:46:f6:39:9e:3c:06:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E7:AD:80:B1:82:B5:AD:97:1D:FF:6A:23:8C:FB:62:D2:2E:EC:AD
            X509v3 Authority Key Identifier:
                keyid:12:C1:34:EB:24:E9:8B:21:A2:D6:81:6B:02:35:60:C2:3D:A0:2B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/323830343a366239383a3a2f33322d313238203d3e20323730343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b98::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:98:fb:ac:ff:7d:00:78:60:31:76:a3:d3:a3:12:07:ac:5d:
         53:cc:0d:c2:ac:48:53:45:07:ff:65:f1:91:c2:be:15:fb:06:
         21:c9:c4:39:7c:46:5f:f7:50:c8:e4:f0:80:9d:57:9c:e8:e7:
         6f:d6:ff:89:fe:d6:68:9a:be:21:6d:35:ae:83:bd:6f:29:32:
         78:f7:49:4e:7c:e9:b6:cb:a4:74:cd:ef:1e:55:91:9d:a7:94:
         d0:11:07:0d:e5:0e:90:fa:f5:c0:7d:5b:07:78:48:ba:d8:02:
         8b:35:53:40:f4:9d:b8:8d:b7:97:d5:53:a0:d0:76:76:35:7a:
         ca:b5:63:bf:41:0a:b3:88:39:88:67:a2:6b:19:b5:46:67:9c:
         10:87:69:95:fb:b4:9f:91:2d:2e:3d:0f:e6:34:69:1d:13:f2:
         db:2f:95:2b:df:07:bf:31:fa:a2:a4:fc:da:9a:e4:62:17:44:
         b4:1f:83:2d:be:f3:68:e7:88:f3:fd:ce:1e:ef:58:0b:fc:c5:
         e6:87:c2:81:47:7a:95:86:44:9b:f1:67:83:df:c7:23:81:8f:
         2d:3e:f6:6a:e5:4d:d9:e9:9c:91:7e:ee:13:15:7b:fa:f9:7a:
         6e:9e:7b:08:5b:5b:d5:4c:7b:a2:d3:1b:3d:9a:07:90:a8:25:
         a3:9e:bb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:34:51 2025 by rpki-client