Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a383030303a3a2f33342d3334203d3e20323636363531.roa
File:                     323830343a336634633a383030303a3a2f33342d3334203d3e20323636363531.roa (raw, json)
Hash identifier:          QdjN75dZquqcnEQ7VBJTA7QkqzKltp3LTnvJxCRZEh4=
Subject key identifier:   41:2E:57:7C:B6:E8:A4:69:C0:FB:D7:33:6A:38:AE:59:BF:52:AD:4C
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       37D6C41EA635A4D69CE4C463296AA6E24CD10E1B
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a383030303a3a2f33342d3334203d3e20323636363531.roa
Signing time:             Thu 26 Jun 2025 18:20:07 +0000
ROA not before:           Thu 26 Jun 2025 18:15:07 +0000
ROA not after:            Thu 25 Jun 2026 18:20:07 +0000
asID:                     266651
IP address blocks:        2804:3f4c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 09:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d6:c4:1e:a6:35:a4:d6:9c:e4:c4:63:29:6a:a6:e2:4c:d1:0e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Jun 26 18:15:07 2025 GMT
            Not After : Jun 25 18:20:07 2026 GMT
        Subject: CN=412E577CB6E8A469C0FBD7336A38AE59BF52AD4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:ee:1b:5d:18:b8:a8:53:56:c8:f3:65:d5:
                    be:80:3e:af:f4:e9:f3:6f:3e:f1:5f:73:6e:a2:eb:
                    69:0a:af:92:43:5f:c6:a6:af:6e:ba:d5:39:ed:ed:
                    b2:16:87:bc:2c:9d:18:30:c2:00:11:99:1a:e6:c3:
                    a8:a1:29:17:e2:ad:ce:06:cb:5b:5f:1a:44:72:3a:
                    23:0e:64:89:c4:84:15:98:3e:40:7f:c7:11:e0:c9:
                    73:96:27:28:30:98:2a:df:30:fa:d2:18:09:04:d6:
                    67:cc:7e:b1:8a:ac:33:5b:dd:98:81:7b:4c:84:2e:
                    1a:93:9b:7b:b3:c5:63:6e:16:3c:7b:dd:cc:e1:8d:
                    38:50:5f:d6:68:09:70:d7:c4:b0:03:a7:b0:05:af:
                    a0:02:c4:aa:6c:c4:d2:c6:f2:ec:ba:16:0a:f2:19:
                    a3:7e:ed:ac:32:e2:59:b3:6a:02:36:3e:18:d7:cd:
                    c1:1f:4e:0e:73:67:a6:0a:b6:0d:c3:0a:a0:26:57:
                    74:6d:05:8a:d1:6f:d5:b3:1b:e7:1f:85:9a:79:b1:
                    dd:08:a5:77:a3:e1:5d:04:6e:db:a4:4d:53:c8:0a:
                    79:81:73:79:1f:a6:c2:2f:f5:fe:88:85:99:87:7e:
                    f3:c0:cc:11:7d:bb:e1:8c:a3:a3:23:a0:b1:58:de:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2E:57:7C:B6:E8:A4:69:C0:FB:D7:33:6A:38:AE:59:BF:52:AD:4C
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a383030303a3a2f33342d3334203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f4c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a0:41:9e:b7:26:73:b3:43:a0:ec:40:d2:16:67:24:7b:cd:10:
         39:b9:3e:f8:b7:ab:e8:34:e4:6d:a8:37:2b:22:9e:d2:c6:40:
         cb:3e:21:1c:03:49:60:aa:29:13:1a:d4:46:cf:d9:6c:42:5e:
         a1:ef:a4:67:73:18:f0:47:fe:cb:9c:df:7f:53:4d:f2:67:c4:
         5a:48:06:4d:1d:e4:05:18:6a:2b:fd:c0:2e:e9:2d:46:c2:f2:
         26:f0:93:89:99:bc:c3:6d:9e:07:3d:54:1b:4c:bc:c6:b6:48:
         7c:b9:ed:c8:bb:c1:74:a2:80:13:a4:f5:5f:4b:32:e4:28:9d:
         b6:c5:16:f3:f1:86:de:41:81:77:f0:54:2b:66:8e:73:dc:7c:
         b5:a7:e9:3d:67:10:18:b5:02:91:e6:88:42:e5:b3:e7:38:ae:
         99:e4:5c:0b:b6:47:bd:7e:48:77:f5:9a:33:28:b9:a2:e0:98:
         70:9a:d0:53:44:ab:da:32:2a:73:ff:b0:85:af:82:3a:2f:c8:
         81:d8:5f:77:82:2a:3a:ef:cd:dd:19:68:f8:00:35:5e:cf:e2:
         07:8c:d0:f9:e5:08:9a:17:d9:f6:0a:91:f1:16:22:a9:30:0a:
         56:24:68:db:16:ad:18:98:8c:82:de:59:fc:26:0c:39:e9:30:
         7e:92:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:15:49 2025 by rpki-client