Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/323830343a353434383a3a2f33322d313238203d3e20323638363430.roa
File:                     323830343a353434383a3a2f33322d313238203d3e20323638363430.roa (raw, json)
Hash identifier:          FPH5t3f9p9u23ePvWI4mh8ez4iCBapk+tdB2o6Jl1+E=
Subject key identifier:   AF:59:78:5D:FE:B2:2A:DA:9B:DF:69:27:2A:42:8C:54:1E:B5:29:FC
Certificate issuer:       /CN=D531DF5F1FC99036157857A3BC1208D0D6677AF6
Certificate serial:       055F25CD580461D6C3FABD2C09CFA3D9E8C1E5F4
Authority key identifier: D5:31:DF:5F:1F:C9:90:36:15:78:57:A3:BC:12:08:D0:D6:67:7A:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/323830343a353434383a3a2f33322d313238203d3e20323638363430.roa
Signing time:             Tue 19 Aug 2025 13:36:10 +0000
ROA not before:           Tue 19 Aug 2025 13:31:10 +0000
ROA not after:            Tue 18 Aug 2026 13:36:10 +0000
asID:                     268640
IP address blocks:        2804:5448::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl
                          rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 20:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5f:25:cd:58:04:61:d6:c3:fa:bd:2c:09:cf:a3:d9:e8:c1:e5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D531DF5F1FC99036157857A3BC1208D0D6677AF6
        Validity
            Not Before: Aug 19 13:31:10 2025 GMT
            Not After : Aug 18 13:36:10 2026 GMT
        Subject: CN=AF59785DFEB22ADA9BDF69272A428C541EB529FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5d:46:37:f0:85:03:7e:25:2d:35:f9:03:b6:
                    28:d9:0a:81:84:7a:2e:28:60:bb:8d:83:c7:a8:75:
                    3a:aa:a3:5f:dc:04:88:11:87:08:a5:86:e4:3e:b0:
                    0a:56:35:e9:28:72:1c:4e:6d:ae:5e:f7:48:5f:7a:
                    af:83:26:3a:34:45:1a:c8:8f:cc:4b:f6:0e:fe:45:
                    5b:ba:df:cd:e2:92:fd:a4:3d:05:77:19:74:a4:8e:
                    fb:af:5c:be:51:15:6c:52:90:ca:2a:05:d7:8b:e3:
                    f5:14:9b:51:a3:9d:d5:9d:e1:89:83:ba:a8:35:0a:
                    87:24:81:8a:4c:96:8e:e5:17:e8:f6:3f:a3:52:35:
                    ff:03:5e:1d:f7:f1:1f:ed:3d:4e:00:f1:ca:a2:01:
                    fc:b6:e8:77:8c:5e:95:fd:c7:0e:89:db:d9:68:e7:
                    b5:b1:8f:51:3b:5e:74:f6:ac:d8:e2:83:9e:ff:4e:
                    51:f0:bf:ec:54:9e:b5:a8:0e:cb:70:6a:4d:97:f7:
                    70:3d:2b:bb:24:2a:c0:15:91:55:a7:43:52:97:e3:
                    7a:9a:a4:58:47:d1:f6:59:35:b4:77:21:b5:65:08:
                    a7:67:8f:0e:94:b4:d3:14:b9:79:70:e1:83:3e:6a:
                    2c:c5:6b:24:e7:57:0b:c7:36:e0:35:4e:5a:53:a6:
                    cf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:59:78:5D:FE:B2:2A:DA:9B:DF:69:27:2A:42:8C:54:1E:B5:29:FC
            X509v3 Authority Key Identifier:
                keyid:D5:31:DF:5F:1F:C9:90:36:15:78:57:A3:BC:12:08:D0:D6:67:7A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/323830343a353434383a3a2f33322d313238203d3e20323638363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5448::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:16:90:4d:42:a6:b0:c1:99:49:f8:52:13:84:7e:9a:6d:
         fa:93:96:40:ab:fb:d2:07:b9:11:ae:ad:ed:04:7a:b5:df:43:
         f3:82:98:26:ea:4b:0d:e2:da:17:51:92:0c:44:a2:df:7d:47:
         d5:a0:7e:02:48:44:e3:9a:c6:73:6b:c2:3b:3c:f0:ad:aa:2d:
         e8:96:05:64:37:cb:bb:4d:bf:b2:b6:4a:d4:c5:e9:d9:58:3b:
         2e:23:76:98:a5:f5:14:6a:cc:2c:e0:3a:34:20:cf:e8:64:d1:
         b4:48:6d:c2:17:10:da:fb:69:03:00:9a:3e:5a:a0:d3:e2:ae:
         43:9c:74:2c:1d:6c:de:b4:02:1a:6b:5e:00:88:96:d6:a4:79:
         4e:61:65:68:60:2f:f0:b6:8e:ca:bc:63:0a:bb:0b:dd:de:90:
         d0:4b:11:85:eb:8b:86:9b:d3:53:36:90:ba:70:58:4b:1d:34:
         e0:af:b4:87:e8:54:d3:1c:e7:37:29:4e:f7:cc:37:24:3f:04:
         95:a6:c3:6f:fd:91:96:c1:f8:3e:4c:df:1b:c3:e4:72:97:ce:
         c8:0b:6c:8a:fa:8e:d5:05:3a:4f:57:7e:f2:fb:d3:11:66:ad:
         be:b9:f9:b5:20:5d:ba:b8:71:86:3f:a5:96:a2:9d:ee:34:40:
         a9:03:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:41:19 2025 by rpki-client