Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/323830343a323137383a3a2f33322d3438203d3e20323634353536.roa
File:                     323830343a323137383a3a2f33322d3438203d3e20323634353536.roa (raw, json)
Hash identifier:          GksSVdLS7K0cl550vTDzKqmAY2+LTjqW45XiI8cG9xk=
Subject key identifier:   D6:9C:72:52:DA:D1:DF:E3:18:06:85:70:71:65:6E:9B:C7:02:52:FA
Certificate issuer:       /CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE
Certificate serial:       5788601FA7F4DD05734CD3DB79B45BEB5D327C16
Authority key identifier: D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/323830343a323137383a3a2f33322d3438203d3e20323634353536.roa
Signing time:             Mon 19 May 2025 14:53:33 +0000
ROA not before:           Mon 19 May 2025 14:48:33 +0000
ROA not after:            Mon 18 May 2026 14:53:33 +0000
asID:                     264556
IP address blocks:        2804:2178::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl
                          rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 08:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:88:60:1f:a7:f4:dd:05:73:4c:d3:db:79:b4:5b:eb:5d:32:7c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE
        Validity
            Not Before: May 19 14:48:33 2025 GMT
            Not After : May 18 14:53:33 2026 GMT
        Subject: CN=D69C7252DAD1DFE31806857071656E9BC70252FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:74:0f:98:2f:92:8b:2d:68:ad:a1:f3:8b:
                    c8:49:34:58:79:1a:7e:88:9f:e0:56:07:1e:bf:fd:
                    b7:a4:21:34:90:c6:13:d0:15:cc:0d:a6:14:c2:58:
                    71:99:58:09:2c:b5:9a:e7:d1:69:5e:1d:27:33:42:
                    f0:01:bc:e5:b4:64:44:80:20:87:ed:4e:4a:94:eb:
                    ce:77:1d:80:47:28:58:6c:75:b8:74:2e:08:90:9b:
                    be:ad:4b:8c:25:c0:79:93:9e:0e:fb:2f:47:be:0b:
                    2f:2f:68:96:91:8e:ab:8e:82:83:27:df:40:61:e8:
                    68:22:b2:ac:1b:0f:ad:3d:db:99:09:8a:e9:4e:d9:
                    d8:1a:4c:ca:2b:70:0a:cb:97:86:a2:54:b9:af:f0:
                    8a:17:05:f7:63:d9:d8:fa:6b:ba:6c:99:36:2e:83:
                    62:2c:eb:c9:b1:11:d6:16:57:13:43:39:d5:26:2a:
                    18:ff:83:6b:2a:cf:ed:00:33:4a:39:b7:46:ff:3a:
                    99:69:dc:00:96:e4:57:39:08:bd:0b:67:29:da:db:
                    a7:b6:14:c0:a8:26:59:f7:ba:1c:2d:10:f0:46:0f:
                    5a:f0:e7:c9:6e:ba:84:41:b1:87:d1:c7:21:2e:ff:
                    61:03:a8:0c:70:45:63:7f:1a:fc:9f:64:15:dd:e3:
                    02:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9C:72:52:DA:D1:DF:E3:18:06:85:70:71:65:6E:9B:C7:02:52:FA
            X509v3 Authority Key Identifier:
                keyid:D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/323830343a323137383a3a2f33322d3438203d3e20323634353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2178::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:ce:0a:77:64:fb:fc:f9:1c:a0:fd:ce:7a:9d:96:af:2a:bb:
         3a:f7:17:34:36:4a:19:eb:ed:90:61:23:28:93:81:b0:60:e9:
         d6:c0:06:59:ba:ba:3d:7a:f8:12:bf:df:ec:e9:cf:08:4d:df:
         7f:9f:46:81:21:6d:7e:00:8f:0e:1d:bd:86:e5:5e:50:56:46:
         17:9a:07:f9:d6:66:3f:3e:e2:56:3b:c8:f5:4d:43:8a:08:c0:
         0d:90:71:32:5b:eb:71:13:2f:c4:40:74:8a:39:64:f0:99:3e:
         3d:f5:b4:d9:85:00:1e:49:1a:82:62:ca:fc:f5:6e:25:88:fd:
         ce:70:63:0e:dd:84:0e:38:03:9a:c9:01:63:3c:ea:a7:75:68:
         fa:4b:31:a0:e4:f5:0e:1a:de:55:e3:1c:42:ec:13:8b:df:3a:
         41:7c:27:0e:94:8e:75:29:da:69:c4:5a:2d:11:99:a1:1a:33:
         29:a7:60:7c:70:56:09:41:e2:46:2c:7b:26:d4:4f:67:16:74:
         a7:ce:64:f4:c9:4a:04:d7:9c:0a:2e:d8:59:7d:8b:4f:c8:28:
         bf:b4:7d:24:03:47:45:7d:8b:b1:db:4c:a0:ce:cc:d2:54:4e:
         6e:17:74:fd:89:41:9b:a6:fd:58:ee:07:2f:46:62:90:ee:ce:
         20:81:4c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 22:00:50 2025 by rpki-client