Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d313238203d3e20323635383930.roa
File:                     323830343a336636343a3a2f33322d313238203d3e20323635383930.roa (raw, json)
Hash identifier:          lD2GQXNbJaRrn/f+7wHjltV+D7kuLBO+0cpBnFn1/Lc=
Subject key identifier:   7B:BF:75:D0:5D:F1:E6:0D:68:54:59:36:F0:41:9F:5E:09:35:51:F5
Certificate issuer:       /CN=D56095B45E4F49E204C61EBAE34048F12CCEAE85
Certificate serial:       340C20C2A92A97C0F7DEB7F0A346E0FEA88813DE
Authority key identifier: D5:60:95:B4:5E:4F:49:E2:04:C6:1E:BA:E3:40:48:F1:2C:CE:AE:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56095B45E4F49E204C61EBAE34048F12CCEAE85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d313238203d3e20323635383930.roa
Signing time:             Sun 22 Jun 2025 15:13:05 +0000
ROA not before:           Sun 22 Jun 2025 15:08:05 +0000
ROA not after:            Sun 21 Jun 2026 15:13:05 +0000
asID:                     265890
IP address blocks:        2804:3f64::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/D56095B45E4F49E204C61EBAE34048F12CCEAE85.crl
                          rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/D56095B45E4F49E204C61EBAE34048F12CCEAE85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56095B45E4F49E204C61EBAE34048F12CCEAE85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Jul 2025 21:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0c:20:c2:a9:2a:97:c0:f7:de:b7:f0:a3:46:e0:fe:a8:88:13:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D56095B45E4F49E204C61EBAE34048F12CCEAE85
        Validity
            Not Before: Jun 22 15:08:05 2025 GMT
            Not After : Jun 21 15:13:05 2026 GMT
        Subject: CN=7BBF75D05DF1E60D68545936F0419F5E093551F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:aa:fc:2b:82:d6:49:ff:62:f6:7a:50:3b:a3:
                    6f:8d:cd:26:fc:44:0f:d7:a5:c3:5e:ca:ea:20:1c:
                    c5:a7:61:a6:76:c2:96:26:65:5b:8c:23:28:dc:e9:
                    01:0b:be:bd:01:60:38:2e:7f:29:1b:69:5d:f4:8c:
                    05:72:ac:18:34:f7:4a:fc:04:f3:5c:0d:0a:c7:5b:
                    38:7d:34:c1:3d:fd:47:67:89:5b:a5:2c:df:97:24:
                    56:b3:2a:e0:92:cc:fa:de:f2:6a:a1:5d:cd:5f:cf:
                    49:09:1e:77:7f:f0:1c:8f:af:a5:0f:f9:d2:65:33:
                    b2:f2:95:c7:64:f6:04:74:6f:03:7c:1a:42:89:d8:
                    6c:c8:14:05:f8:28:a8:09:54:82:ce:0a:77:be:5a:
                    f7:cb:50:d4:fe:aa:88:19:e0:7b:64:88:00:ff:f2:
                    bf:03:98:56:c8:9f:3e:2b:28:fe:36:c4:af:7a:9b:
                    75:49:29:24:ce:b2:3e:1d:3e:a1:5f:2a:f0:6e:96:
                    31:5a:b1:d5:90:25:25:15:b9:e7:df:26:31:96:26:
                    c7:2f:63:f4:0a:08:c8:36:59:57:35:23:10:af:bf:
                    6a:26:c7:c6:ff:73:4f:55:86:45:a7:72:6a:94:d8:
                    da:e8:e8:b7:d0:5c:af:5c:01:47:dc:7c:c2:66:78:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BF:75:D0:5D:F1:E6:0D:68:54:59:36:F0:41:9F:5E:09:35:51:F5
            X509v3 Authority Key Identifier:
                keyid:D5:60:95:B4:5E:4F:49:E2:04:C6:1E:BA:E3:40:48:F1:2C:CE:AE:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/D56095B45E4F49E204C61EBAE34048F12CCEAE85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56095B45E4F49E204C61EBAE34048F12CCEAE85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d313238203d3e20323635383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f64::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:44:30:9a:14:6e:0f:a0:01:b4:33:ba:be:6a:46:64:ad:74:
         e6:b2:89:35:ef:39:ba:e4:43:41:7a:1a:83:66:3f:9e:2b:bf:
         62:79:b0:f1:46:5b:de:67:7b:b9:a1:58:63:e7:4d:f5:81:b4:
         8e:cc:9e:8d:4e:9d:ce:95:2b:f6:6d:38:12:78:9e:70:94:d3:
         8a:18:cd:68:55:e4:6d:1c:f0:0f:ff:5a:48:d6:43:a0:c2:28:
         fe:45:90:b5:42:fb:d7:83:a4:c1:ce:3a:73:0a:e7:d6:c0:e1:
         b3:31:78:a6:25:b3:05:d9:ca:53:dd:45:4a:34:8b:b4:60:ae:
         eb:a2:9e:9d:a9:88:a0:b9:61:6d:ea:11:49:c1:5a:87:71:56:
         83:94:88:d7:aa:52:2c:90:24:e5:4d:e7:b2:0b:9b:fa:36:a4:
         4f:9c:58:45:92:9f:d2:1e:b0:37:1a:d4:84:a8:3f:83:88:ca:
         51:c3:fa:85:1a:62:9b:d6:ac:48:0e:52:5e:ef:57:8c:dc:25:
         7c:97:43:9b:41:a7:a5:ea:41:96:66:ef:9b:e6:69:1f:81:69:
         ab:53:1a:0b:88:20:a3:1c:23:7e:cf:ef:1e:bb:31:c9:6b:e9:
         9d:d9:86:e8:90:2c:ee:f4:58:ff:ce:2f:da:50:2e:1b:83:96:
         9c:d6:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 09:01:32 2025 by rpki-client