Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/LS1cF3aP1KuWteQQr4nHDCGZiiXrQbp9YJQtterahDZ/0/323830343a316236633a3a2f33322d313238203d3e203631373237.roa
File:                     323830343a316236633a3a2f33322d313238203d3e203631373237.roa (raw, json)
Hash identifier:          /l9y4eHBuzow1Kb/VJ9w6sYCkW1Edfd1aBY6Nz+JL18=
Subject key identifier:   89:E3:BE:DB:BB:EC:ED:28:6A:27:92:EC:4D:38:59:AE:5C:9D:14:48
Certificate issuer:       /CN=7726C51BB05B4C097B6A6FADE6C45492FCD69616
Certificate serial:       7C574C5F34C94024407A1897F5B02E032AC4C691
Authority key identifier: 77:26:C5:1B:B0:5B:4C:09:7B:6A:6F:AD:E6:C4:54:92:FC:D6:96:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7726C51BB05B4C097B6A6FADE6C45492FCD69616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/LS1cF3aP1KuWteQQr4nHDCGZiiXrQbp9YJQtterahDZ/0/323830343a316236633a3a2f33322d313238203d3e203631373237.roa
Signing time:             Thu 19 Jun 2025 14:34:29 +0000
ROA not before:           Thu 19 Jun 2025 14:29:29 +0000
ROA not after:            Thu 18 Jun 2026 14:34:29 +0000
asID:                     61727
IP address blocks:        2804:1b6c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/LS1cF3aP1KuWteQQr4nHDCGZiiXrQbp9YJQtterahDZ/0/7726C51BB05B4C097B6A6FADE6C45492FCD69616.crl
                          rsync://rpki-repo.registro.br/repo/LS1cF3aP1KuWteQQr4nHDCGZiiXrQbp9YJQtterahDZ/0/7726C51BB05B4C097B6A6FADE6C45492FCD69616.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7726C51BB05B4C097B6A6FADE6C45492FCD69616.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 13:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:57:4c:5f:34:c9:40:24:40:7a:18:97:f5:b0:2e:03:2a:c4:c6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7726C51BB05B4C097B6A6FADE6C45492FCD69616
        Validity
            Not Before: Jun 19 14:29:29 2025 GMT
            Not After : Jun 18 14:34:29 2026 GMT
        Subject: CN=89E3BEDBBBECED286A2792EC4D3859AE5C9D1448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:0b:24:69:e3:7b:83:a4:85:65:0a:4e:ae:
                    9b:4f:d6:35:10:04:31:84:b8:fe:45:90:88:9e:f1:
                    8d:02:da:65:0f:5e:35:af:d2:6f:d7:59:09:d7:c5:
                    0d:fc:b1:7b:0d:68:8d:3d:7f:33:de:b7:12:d4:f2:
                    a2:ed:30:04:96:f4:cc:73:ff:b5:7e:41:49:37:bf:
                    3a:2e:2a:38:21:eb:bf:6a:a2:aa:e8:66:9d:00:65:
                    27:96:91:50:d7:37:c9:f1:5b:26:a8:b9:f8:89:dd:
                    2d:1c:0b:71:b2:b3:42:95:a6:27:ac:19:1e:ad:ed:
                    2f:1c:ed:6b:21:82:cf:81:2a:70:32:4c:13:75:5b:
                    1b:18:1c:96:32:34:b4:f7:14:2b:41:bd:49:54:84:
                    e1:4e:c3:57:30:1e:0b:5b:3f:19:19:1c:65:1e:47:
                    f0:e7:12:21:00:e5:32:a9:0a:7f:59:75:ff:a7:c2:
                    3a:fe:48:a3:e2:79:af:9d:43:4c:ad:f0:18:66:51:
                    d3:1c:a7:93:1a:1f:68:6d:df:bb:4b:4e:a9:fb:82:
                    74:72:c6:f6:b9:8b:03:fd:04:1b:27:e7:4b:1c:d8:
                    6c:05:60:4b:a7:e6:33:f3:d3:cd:cb:aa:3c:11:ee:
                    67:55:da:54:fb:d1:fd:9f:67:81:08:3f:a3:4a:a4:
                    81:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E3:BE:DB:BB:EC:ED:28:6A:27:92:EC:4D:38:59:AE:5C:9D:14:48
            X509v3 Authority Key Identifier:
                keyid:77:26:C5:1B:B0:5B:4C:09:7B:6A:6F:AD:E6:C4:54:92:FC:D6:96:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/LS1cF3aP1KuWteQQr4nHDCGZiiXrQbp9YJQtterahDZ/0/7726C51BB05B4C097B6A6FADE6C45492FCD69616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7726C51BB05B4C097B6A6FADE6C45492FCD69616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/LS1cF3aP1KuWteQQr4nHDCGZiiXrQbp9YJQtterahDZ/0/323830343a316236633a3a2f33322d313238203d3e203631373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:3b:3e:7d:5a:ee:2b:27:26:ca:b9:6f:22:6d:d3:e3:3d:78:
         f3:05:12:af:e1:dc:3c:36:38:b2:73:af:5d:30:9e:b5:20:4a:
         44:d1:92:59:4e:f6:36:c0:44:45:3a:9a:09:55:10:b3:28:3f:
         32:52:12:f4:f9:8e:2f:48:a8:87:40:47:5c:b9:da:28:9c:7a:
         62:c5:b7:d6:49:6c:cf:e1:37:e1:cd:e8:25:c9:a1:ce:1b:88:
         e5:54:d5:b3:30:98:b1:30:39:1b:f4:41:77:5b:2b:7a:f9:56:
         71:91:bf:dd:60:da:00:dd:d4:f5:ee:e4:7b:bb:b8:87:50:74:
         95:0c:8c:d3:3e:91:6c:36:47:78:5b:fa:1c:48:d5:c4:a2:b1:
         96:8c:cf:e1:5e:89:e5:d6:c4:a8:fe:a8:62:11:1a:77:20:4f:
         86:17:df:37:3c:3b:99:e6:ef:27:4a:af:0d:a0:fd:28:b3:bc:
         4b:3d:2a:29:2d:ea:0f:66:e8:3a:4a:cf:fc:77:06:21:f4:1f:
         a9:2a:42:f3:d1:a1:47:1b:9f:86:16:a4:11:26:50:0c:e9:9f:
         26:7a:c2:b5:dc:d7:8c:28:9c:45:2c:5d:f1:e1:4c:22:bd:bb:
         18:4e:0b:ff:2b:88:56:9b:07:be:4f:c6:af:c7:10:2e:fd:98:
         4c:96:a2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:07:04 2025 by rpki-client