Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a666666663a3a2f34382d3438203d3e20323634353935.roa
File:                     323830343a323232383a666666663a3a2f34382d3438203d3e20323634353935.roa (raw, json)
Hash identifier:          CU0Zgz/FSG3hdqh+MhepOT+066UJtKOOb4GMqYOrDAI=
Subject key identifier:   28:FE:B4:81:74:44:E0:49:79:26:8F:2B:B0:26:D1:5B:B9:22:6C:66
Certificate issuer:       /CN=7616FC53DDB4A888D13049E2C525FA7A5E052F6E
Certificate serial:       3B68D795EB7A5D357FA3DA1CC8C11CCDA94D0D58
Authority key identifier: 76:16:FC:53:DD:B4:A8:88:D1:30:49:E2:C5:25:FA:7A:5E:05:2F:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a666666663a3a2f34382d3438203d3e20323634353935.roa
Signing time:             Thu 26 Jun 2025 20:51:23 +0000
ROA not before:           Thu 26 Jun 2025 20:46:23 +0000
ROA not after:            Thu 25 Jun 2026 20:51:23 +0000
asID:                     264595
IP address blocks:        2804:2228:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.crl
                          rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 04:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:68:d7:95:eb:7a:5d:35:7f:a3:da:1c:c8:c1:1c:cd:a9:4d:0d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7616FC53DDB4A888D13049E2C525FA7A5E052F6E
        Validity
            Not Before: Jun 26 20:46:23 2025 GMT
            Not After : Jun 25 20:51:23 2026 GMT
        Subject: CN=28FEB4817444E04979268F2BB026D15BB9226C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:29:08:d0:e8:8d:05:9b:e7:45:49:32:c4:53:
                    34:b3:ce:30:26:f4:32:78:48:ea:9e:70:e0:7a:b9:
                    c0:19:35:76:ea:ff:0b:85:fa:c1:9e:92:f7:e2:09:
                    b4:9b:df:c0:4f:d7:ca:11:56:b0:69:ca:db:db:f5:
                    e6:68:1a:45:3b:a1:eb:df:36:f2:50:6f:55:23:8c:
                    89:94:7f:ab:27:d3:61:ec:e0:ae:c1:05:2d:74:44:
                    f6:06:ad:55:96:dc:ec:5c:ef:1d:50:51:1a:0d:28:
                    f9:bc:80:be:04:17:71:a0:21:7e:3d:38:1b:d6:73:
                    9f:57:00:ee:f9:57:85:fa:6f:2e:a0:ff:ce:6d:0d:
                    5a:de:33:9f:85:92:f6:4a:a5:03:21:e7:0e:65:ea:
                    a3:70:75:e7:99:dd:b0:d7:b6:5b:eb:e4:51:4b:d5:
                    5f:6b:2d:25:14:03:48:e2:2c:be:29:00:56:c1:9e:
                    f2:74:c0:35:ab:65:4e:a3:d5:db:b6:6f:5d:85:ae:
                    f3:eb:2a:1d:e6:67:9d:7e:b8:43:bb:f9:bd:81:60:
                    dc:ec:91:59:50:2a:56:76:10:f6:b3:36:06:04:0f:
                    f3:6e:63:ea:80:80:e6:65:f1:89:6f:e8:ac:4e:08:
                    05:61:8a:8f:31:24:af:94:69:91:f7:6b:ac:e7:db:
                    d4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FE:B4:81:74:44:E0:49:79:26:8F:2B:B0:26:D1:5B:B9:22:6C:66
            X509v3 Authority Key Identifier:
                keyid:76:16:FC:53:DD:B4:A8:88:D1:30:49:E2:C5:25:FA:7A:5E:05:2F:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a666666663a3a2f34382d3438203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:91:f9:68:e4:b7:c0:85:8d:74:ba:bc:5e:a5:ca:da:6c:a2:
         1a:0a:1b:d3:1c:66:65:7a:75:4c:61:e9:96:59:ce:0c:6b:82:
         4e:7d:9c:06:83:12:7d:8b:52:75:7a:95:52:3e:80:b3:d4:18:
         90:b5:0d:15:cd:94:0f:e1:ae:7b:50:ca:46:62:f4:7a:46:76:
         7a:12:a8:30:b9:47:47:89:07:29:c0:94:7c:d7:a2:43:45:06:
         bb:6b:94:4c:9e:f9:31:e8:8b:37:73:5e:3f:ee:54:73:b4:8d:
         4b:52:67:30:ec:8f:e5:af:c7:c8:bc:7f:98:f9:63:ad:22:2c:
         d6:c5:c4:36:9f:0e:25:f5:ff:07:a2:7b:ed:ef:1e:e5:f0:4d:
         ae:b7:18:ff:14:ad:b2:fd:56:0f:9c:a6:e1:b4:eb:b1:10:9f:
         84:ba:48:95:03:0d:15:ca:f4:47:07:04:06:d8:58:06:8b:05:
         08:eb:d2:fe:9e:b2:ef:61:c4:6a:3e:cc:f1:cc:3d:a2:3e:c0:
         c4:b8:d7:45:67:02:c1:4b:2d:71:cd:a5:d3:50:2f:4d:81:9d:
         21:48:b0:cb:04:30:cd:e4:2c:59:24:46:8d:19:03:da:e8:22:
         78:15:a6:de:38:63:92:cb:64:26:11:98:43:1e:9f:c3:57:5e:
         77:56:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:53:38 2025 by rpki-client