Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/323830343a313436343a3a2f33322d313238203d3e203532363330.roa
File:                     323830343a313436343a3a2f33322d313238203d3e203532363330.roa (raw, json)
Hash identifier:          mZzqSHxdCDAtNdnILIdu3r+fU2nqLbaJCiKNFCWNgdg=
Subject key identifier:   E5:BA:E9:AC:7B:B1:E2:C7:B2:22:D6:B6:25:6F:CC:58:34:A1:2D:D0
Certificate issuer:       /CN=1B200E7AB6E3F7993DDE78A476E469885DFCE820
Certificate serial:       2F1B6EF4ECBE10ACCD6BE7040C6EE2E34A776FCB
Authority key identifier: 1B:20:0E:7A:B6:E3:F7:99:3D:DE:78:A4:76:E4:69:88:5D:FC:E8:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B200E7AB6E3F7993DDE78A476E469885DFCE820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/323830343a313436343a3a2f33322d313238203d3e203532363330.roa
Signing time:             Fri 20 Jun 2025 20:43:52 +0000
ROA not before:           Fri 20 Jun 2025 20:38:52 +0000
ROA not after:            Fri 19 Jun 2026 20:43:52 +0000
asID:                     52630
IP address blocks:        2804:1464::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/1B200E7AB6E3F7993DDE78A476E469885DFCE820.crl
                          rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/1B200E7AB6E3F7993DDE78A476E469885DFCE820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B200E7AB6E3F7993DDE78A476E469885DFCE820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 08:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1b:6e:f4:ec:be:10:ac:cd:6b:e7:04:0c:6e:e2:e3:4a:77:6f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B200E7AB6E3F7993DDE78A476E469885DFCE820
        Validity
            Not Before: Jun 20 20:38:52 2025 GMT
            Not After : Jun 19 20:43:52 2026 GMT
        Subject: CN=E5BAE9AC7BB1E2C7B222D6B6256FCC5834A12DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:e5:40:b4:b0:cb:f3:37:1e:6b:db:93:a8:
                    9f:64:28:ae:33:b9:07:81:de:b5:ca:05:69:da:3d:
                    d3:04:e6:87:e1:9a:59:bc:00:9c:87:01:ba:bc:e0:
                    1e:b3:89:ea:93:cf:ee:58:28:39:f5:1d:91:8e:88:
                    2e:08:08:4f:96:98:fc:da:77:9c:63:9f:de:c0:c8:
                    b3:a3:14:c7:41:70:8a:59:29:f9:07:48:58:93:ac:
                    0d:3e:5c:0c:1c:c6:8d:4c:b1:32:95:5a:dd:f0:04:
                    27:b2:ca:e6:a3:30:df:ab:0f:a9:31:6b:bf:d9:b5:
                    15:a3:23:38:a9:86:bb:47:35:3a:6c:8a:09:4b:35:
                    5a:0b:cd:f9:a9:58:02:2a:02:66:ac:85:5f:01:1d:
                    e4:18:37:4f:89:58:3a:6d:13:d3:77:83:2e:3d:dc:
                    2f:b1:4e:ee:2c:b7:33:e6:a0:d8:53:9d:e1:2c:46:
                    71:76:0c:4d:82:12:c6:c8:d5:39:09:c1:18:e5:6d:
                    6c:e9:0c:a7:e4:60:9c:2c:2f:2d:df:2b:c0:8d:77:
                    36:06:98:95:b6:5f:50:10:d8:7e:97:14:79:6f:73:
                    7b:16:3b:de:22:cb:04:57:42:a7:2e:c8:96:e5:e8:
                    ed:cd:1f:2a:d2:08:9a:3d:0c:29:6f:b2:f1:2b:bd:
                    36:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BA:E9:AC:7B:B1:E2:C7:B2:22:D6:B6:25:6F:CC:58:34:A1:2D:D0
            X509v3 Authority Key Identifier:
                keyid:1B:20:0E:7A:B6:E3:F7:99:3D:DE:78:A4:76:E4:69:88:5D:FC:E8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/1B200E7AB6E3F7993DDE78A476E469885DFCE820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B200E7AB6E3F7993DDE78A476E469885DFCE820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/323830343a313436343a3a2f33322d313238203d3e203532363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1464::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:64:d8:14:62:42:36:ac:e5:5a:24:16:1b:87:cd:06:05:8c:
         81:d9:1b:da:fe:6e:50:9f:8c:fd:28:9e:1e:ab:f0:93:09:fd:
         e6:33:94:8d:f4:e0:df:3b:64:9f:5c:01:33:bd:a1:d1:f8:4c:
         ae:c9:7b:99:d5:5a:8f:c2:ab:9b:83:37:18:49:db:c4:67:bf:
         56:8f:95:70:27:eb:26:3f:7f:0a:01:da:59:b5:7d:f7:a8:ab:
         00:3b:3f:48:e1:21:aa:c9:13:7a:a8:f8:f6:df:54:4e:91:90:
         4d:a2:0d:e3:2d:ad:b3:c6:dd:2e:e2:fa:48:15:df:82:c6:21:
         00:ca:54:b2:5c:48:6d:e0:b2:d7:02:53:cc:fa:f1:3a:c7:c1:
         6c:ba:e6:84:2b:31:81:15:ad:89:b4:f2:9b:dd:74:0d:f2:84:
         a6:ee:96:63:f3:2b:d5:53:63:b0:2a:79:55:95:56:24:84:a7:
         53:76:f1:c5:2c:47:f8:5e:1b:e5:a5:1f:e8:cb:20:45:66:c3:
         aa:3f:f4:65:f9:f6:52:14:f5:57:a8:1d:21:7b:e4:a2:1c:d3:
         e2:49:69:20:fc:78:68:3c:a4:fd:8d:89:dd:48:46:07:5f:df:
         91:3d:2c:1d:7e:c4:06:75:d4:86:67:91:12:b2:5c:b1:b1:30:
         f7:13:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:27:19 2025 by rpki-client