Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33332d3333203d3e20323634353935.roa
File:                     323830343a323232383a3a2f33332d3333203d3e20323634353935.roa (raw, json)
Hash identifier:          Mm95yzLKC5d4rK24DekLCihJrSE4LENP8rxNG7aAtTo=
Subject key identifier:   26:DD:E2:0F:91:6C:6C:5C:39:33:0C:88:55:6A:7E:1B:E3:14:3D:57
Certificate issuer:       /CN=7616FC53DDB4A888D13049E2C525FA7A5E052F6E
Certificate serial:       1B450B4CCAC59DA789748DCB88E3E61EE40BD409
Authority key identifier: 76:16:FC:53:DD:B4:A8:88:D1:30:49:E2:C5:25:FA:7A:5E:05:2F:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33332d3333203d3e20323634353935.roa
Signing time:             Thu 26 Jun 2025 20:51:24 +0000
ROA not before:           Thu 26 Jun 2025 20:46:24 +0000
ROA not after:            Thu 25 Jun 2026 20:51:24 +0000
asID:                     264595
IP address blocks:        2804:2228::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.crl
                          rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 21:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:45:0b:4c:ca:c5:9d:a7:89:74:8d:cb:88:e3:e6:1e:e4:0b:d4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7616FC53DDB4A888D13049E2C525FA7A5E052F6E
        Validity
            Not Before: Jun 26 20:46:24 2025 GMT
            Not After : Jun 25 20:51:24 2026 GMT
        Subject: CN=26DDE20F916C6C5C39330C88556A7E1BE3143D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:a1:5d:33:c0:81:57:4d:d5:be:f6:ac:f7:
                    29:ab:b8:e2:f1:60:40:d6:45:d4:88:db:8e:f7:38:
                    99:01:a8:1d:70:d3:69:f0:c6:64:88:2c:cc:51:b0:
                    45:d7:f5:1a:91:17:6d:cf:3f:8f:34:de:d7:ee:0a:
                    37:c0:c8:43:74:10:6a:dd:da:0a:44:c5:16:47:96:
                    7d:c0:3b:59:98:a7:c8:ee:4d:88:99:6e:02:e8:5a:
                    d0:7e:59:de:27:36:e3:d2:00:8c:90:c6:e8:ec:ba:
                    b8:c9:ab:6e:d2:a4:24:64:a8:7a:1d:df:04:13:f1:
                    84:fa:12:ae:ef:09:2f:1d:89:63:eb:dc:a0:a3:77:
                    e5:ff:53:2d:64:27:f5:3e:62:c1:b7:db:44:0e:ea:
                    02:cd:da:f5:c6:d0:a0:d3:aa:3b:69:ed:d2:58:16:
                    8d:7b:d5:75:45:79:2d:6c:aa:35:aa:e3:1a:1c:56:
                    98:89:cd:a7:f5:ce:07:b9:64:44:e5:ae:c3:c8:92:
                    3a:0d:e2:1d:b5:80:49:dd:17:ea:da:f2:f6:b5:4b:
                    b2:2e:4e:f5:fe:de:4d:80:cd:00:27:85:62:38:45:
                    da:e8:2e:45:2b:17:95:78:88:a5:19:56:5d:cd:b4:
                    ff:63:cc:d9:e6:03:a3:c0:85:bf:57:04:67:6e:e8:
                    62:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DD:E2:0F:91:6C:6C:5C:39:33:0C:88:55:6A:7E:1B:E3:14:3D:57
            X509v3 Authority Key Identifier:
                keyid:76:16:FC:53:DD:B4:A8:88:D1:30:49:E2:C5:25:FA:7A:5E:05:2F:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33332d3333203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228::/33

    Signature Algorithm: sha256WithRSAEncryption
         74:97:b3:07:33:ad:4a:2b:95:54:ee:da:bc:f2:56:17:d5:42:
         43:f6:5a:84:94:a6:2d:8c:e6:86:04:c1:fe:1c:e2:b0:47:55:
         31:96:ec:52:d2:19:01:d8:e2:b7:d2:f5:4b:89:f5:df:a5:d9:
         9d:db:97:b3:ba:0b:c6:6e:3b:94:92:ed:df:a9:1f:73:eb:6f:
         f9:db:ce:cc:14:fa:9f:bf:1a:00:a8:85:fa:41:2a:e4:12:ce:
         c5:61:95:ec:d2:11:a2:13:f2:c6:89:d5:12:2e:12:7f:dc:47:
         e0:41:84:91:56:12:3a:5d:ff:7e:7f:01:ac:97:4d:79:3e:ef:
         fb:a4:18:66:21:a8:fc:70:01:2a:4c:1a:ec:16:fd:29:54:48:
         2c:ea:9b:2a:6f:b2:b1:c3:2c:d0:92:62:82:f6:f1:ab:1b:7d:
         65:e5:93:8d:f1:e4:ce:2e:ec:33:2f:9f:cd:5f:97:e5:81:2f:
         3d:ac:6d:be:cd:df:1e:be:91:ad:9d:97:c2:f7:dc:f6:e6:1d:
         0e:5c:2d:37:cb:48:39:36:c8:99:dd:5b:3b:99:e2:5d:5a:1f:
         d8:32:c0:17:44:73:3d:7f:b3:42:7d:da:43:43:6b:90:43:bf:
         bc:10:04:18:56:c4:65:43:79:6f:9f:5a:af:63:74:91:75:ca:
         d5:f4:61:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:46:05 2025 by rpki-client