Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/323830343a366132303a3a2f33352d3335203d3e20323730333131.roa
File:                     323830343a366132303a3a2f33352d3335203d3e20323730333131.roa (raw, json)
Hash identifier:          kATj2QWkHPDvEzcQ6ybysXbSpkiDyHgqSAZt18xiT5s=
Subject key identifier:   7A:DD:FB:9E:D5:BD:93:F5:18:31:1F:AB:6B:13:39:1A:E3:DF:78:51
Certificate issuer:       /CN=85068FEAC49281A5AC659FD8ACD5E5618494FE80
Certificate serial:       175C0B27F7DE135F7FAD82ED32FF77CC03EE6495
Authority key identifier: 85:06:8F:EA:C4:92:81:A5:AC:65:9F:D8:AC:D5:E5:61:84:94:FE:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/323830343a366132303a3a2f33352d3335203d3e20323730333131.roa
Signing time:             Wed 13 Aug 2025 17:56:23 +0000
ROA not before:           Wed 13 Aug 2025 17:51:23 +0000
ROA not after:            Wed 12 Aug 2026 17:56:23 +0000
asID:                     270311
IP address blocks:        2804:6a20::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.crl
                          rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5c:0b:27:f7:de:13:5f:7f:ad:82:ed:32:ff:77:cc:03:ee:64:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85068FEAC49281A5AC659FD8ACD5E5618494FE80
        Validity
            Not Before: Aug 13 17:51:23 2025 GMT
            Not After : Aug 12 17:56:23 2026 GMT
        Subject: CN=7ADDFB9ED5BD93F518311FAB6B13391AE3DF7851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:02:f6:86:3c:39:9d:3d:38:78:08:8e:0c:
                    ed:ea:3a:2c:c2:cc:2c:3f:e0:ea:44:f7:fe:b8:a9:
                    06:04:6d:09:1f:e2:c9:3e:e8:76:bb:af:fe:40:5e:
                    3f:22:01:08:9d:30:c4:8f:cf:48:8a:13:66:fb:15:
                    a0:cf:36:6a:c5:06:2d:ec:d1:2e:83:19:34:95:7a:
                    ba:1f:34:c3:1e:02:01:89:8f:b5:05:1e:13:2a:f6:
                    34:96:0d:69:77:fa:8b:11:93:e0:20:f1:d8:42:85:
                    9d:80:f4:20:00:b9:b8:c2:31:d0:54:47:1f:5a:d2:
                    6a:0a:6b:7f:b3:2f:d2:76:4d:b5:d6:90:2f:0d:2d:
                    49:4f:b9:ac:c8:1d:03:bc:8e:ec:ae:fb:8d:b2:69:
                    90:81:25:90:d1:96:85:45:88:02:32:0d:f0:ef:cf:
                    ab:2b:15:6e:ea:cc:79:03:5e:63:90:2a:c3:0e:6d:
                    51:bc:98:0f:d3:9a:fa:e5:f8:85:44:e7:0a:28:aa:
                    67:f7:06:89:ff:79:a1:d8:6c:e8:f1:34:13:c5:a5:
                    40:96:63:fc:1d:47:c7:63:3c:07:68:a8:7a:24:2d:
                    69:56:55:c0:f6:dd:95:7d:9b:42:6c:79:0d:66:39:
                    23:02:9b:19:ed:8b:0c:18:7e:cc:20:7a:2a:37:14:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DD:FB:9E:D5:BD:93:F5:18:31:1F:AB:6B:13:39:1A:E3:DF:78:51
            X509v3 Authority Key Identifier:
                keyid:85:06:8F:EA:C4:92:81:A5:AC:65:9F:D8:AC:D5:E5:61:84:94:FE:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/323830343a366132303a3a2f33352d3335203d3e20323730333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a20::/35

    Signature Algorithm: sha256WithRSAEncryption
         0f:4c:57:14:9b:37:10:3e:1c:0b:89:cf:af:63:62:3a:9e:e4:
         05:b3:8c:ec:bd:39:ad:bc:5f:5a:f9:e8:26:61:26:8b:6f:90:
         94:82:6b:6b:e2:ac:5f:1e:7f:f8:0f:06:9f:b3:20:9e:64:a6:
         99:91:16:1e:9f:d0:d1:08:d8:3a:84:f9:2f:61:53:c9:a9:4c:
         12:72:9b:09:c0:9a:0c:4f:1f:15:7b:f3:e4:27:8d:39:bb:ea:
         e9:43:76:3b:97:11:24:db:55:89:50:dd:c4:75:fd:65:5e:13:
         54:3c:3d:27:1e:31:32:50:f3:fe:4e:bb:9d:98:e9:ce:24:07:
         33:9e:c7:ad:42:72:90:12:aa:e1:09:26:43:7f:41:3f:14:b0:
         d5:fe:48:f5:17:b2:ee:49:82:9d:7a:e7:9b:7f:3c:ca:1b:bc:
         77:74:a9:3b:cc:96:09:a9:9a:31:b1:1a:6b:4c:c9:40:ea:91:
         01:43:c1:34:e0:a5:ff:42:bc:0f:6c:e2:1a:9c:93:fe:6f:9e:
         79:8f:df:c7:78:38:04:70:eb:2e:ff:15:e6:1f:d4:af:66:de:
         26:ab:e9:80:91:8e:ba:be:72:1b:73:c6:0d:a6:f9:19:3a:8d:
         6b:2c:3a:59:7f:0a:bb:16:ac:61:da:5b:6c:f4:c5:50:72:e8:
         29:ce:40:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:53:23 2025 by rpki-client