Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/323830343a353330303a3a2f33322d3332203d3e20323638353536.roa
File:                     323830343a353330303a3a2f33322d3332203d3e20323638353536.roa (raw, json)
Hash identifier:          Wsl8hbt3uERsQpP5CM4AB7PDFVuSP3PTP7XIYY7LCYg=
Subject key identifier:   58:F7:14:3F:54:20:12:61:F3:88:6A:70:CD:5F:11:DE:F7:74:C5:16
Certificate issuer:       /CN=78FAEDBB051194630540EEEFB7EB5EDD6D083EE5
Certificate serial:       4A6AC7568063A3954CD338029E02EB7FA1BED2FB
Authority key identifier: 78:FA:ED:BB:05:11:94:63:05:40:EE:EF:B7:EB:5E:DD:6D:08:3E:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/323830343a353330303a3a2f33322d3332203d3e20323638353536.roa
Signing time:             Mon 30 Jun 2025 12:55:31 +0000
ROA not before:           Mon 30 Jun 2025 12:50:31 +0000
ROA not after:            Mon 29 Jun 2026 12:55:31 +0000
asID:                     268556
IP address blocks:        2804:5300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.crl
                          rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 04:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6a:c7:56:80:63:a3:95:4c:d3:38:02:9e:02:eb:7f:a1:be:d2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78FAEDBB051194630540EEEFB7EB5EDD6D083EE5
        Validity
            Not Before: Jun 30 12:50:31 2025 GMT
            Not After : Jun 29 12:55:31 2026 GMT
        Subject: CN=58F7143F54201261F3886A70CD5F11DEF774C516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:1e:3e:1b:f0:7d:02:39:40:cf:da:52:a1:
                    6a:1f:7d:1f:e4:58:99:8b:3e:eb:b0:6b:7a:0d:72:
                    91:7b:98:d5:e9:2f:7b:ca:1f:00:ca:ab:32:c3:1f:
                    0f:60:a2:3e:c9:8f:f6:8d:c4:85:a4:47:09:e4:94:
                    6e:09:85:68:f5:c6:d8:ca:5f:4a:4c:13:fb:db:40:
                    83:2d:d5:0b:73:4d:19:1a:36:af:a4:df:0e:58:6f:
                    4e:56:57:18:9e:fa:f5:9e:51:81:3a:62:85:13:59:
                    3e:cf:22:7f:b2:fb:a5:cc:32:0a:f2:00:7d:67:e1:
                    0f:1c:74:09:47:fe:0d:0b:9b:a2:4d:fa:ab:c4:dc:
                    77:59:82:63:9e:ed:ac:88:79:ed:90:1c:23:e9:bd:
                    6e:d8:bf:8b:7a:ae:55:c0:3f:e3:70:6c:5b:0a:1b:
                    f3:9b:99:8f:6e:01:ea:3d:55:a8:31:fc:82:d1:fb:
                    66:ae:e3:1c:49:55:d7:17:e7:45:18:5b:ad:3a:50:
                    15:36:77:1c:8c:58:d8:d8:2f:9d:5f:d8:b8:8e:08:
                    83:46:1c:a2:06:a7:28:63:7d:8d:3b:b9:f0:c5:68:
                    c5:13:2d:f5:77:cb:ab:c6:4b:de:8b:67:b7:25:96:
                    c0:21:11:9e:f2:62:cd:5d:33:7d:81:58:e9:67:3c:
                    61:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F7:14:3F:54:20:12:61:F3:88:6A:70:CD:5F:11:DE:F7:74:C5:16
            X509v3 Authority Key Identifier:
                keyid:78:FA:ED:BB:05:11:94:63:05:40:EE:EF:B7:EB:5E:DD:6D:08:3E:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/323830343a353330303a3a2f33322d3332203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5300::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:b2:99:ce:a2:04:8f:1b:6e:ee:37:b4:2a:b8:b5:7e:1c:18:
         24:01:0c:25:7e:37:f9:21:97:d1:92:a2:6a:57:ae:b7:34:94:
         19:18:08:a1:5b:f4:d5:9f:59:6a:bb:a2:78:9c:fa:70:78:4d:
         06:90:38:d0:98:7e:97:e8:10:9b:9b:23:bb:41:9c:45:b4:96:
         1d:90:94:c1:c3:b5:5b:f8:1b:ca:f2:33:ba:5f:ba:4c:e7:80:
         4e:65:91:14:08:c5:23:5d:3f:dc:90:fa:b9:5b:96:a2:80:01:
         31:4e:b2:18:fc:96:4d:f4:c0:87:78:28:aa:dd:9a:cc:46:1d:
         05:f5:d8:f1:cc:16:8b:e5:f0:f6:f3:84:f4:cb:75:37:d6:2b:
         77:0b:af:9b:32:27:fd:97:24:ca:8e:7b:70:ca:b9:e3:09:7a:
         56:34:0b:e0:2c:c9:50:8c:fa:b5:01:be:f0:14:f7:05:6a:68:
         69:8a:9d:76:83:4f:a0:12:7b:e9:80:f1:15:a6:18:ef:a2:66:
         f0:24:db:b7:a0:74:94:83:3b:c5:28:66:8a:01:b2:f7:6f:42:
         76:2a:a5:79:d9:ca:1d:56:dc:5b:82:2a:bd:1e:f5:be:22:29:
         d9:67:3c:23:fe:12:f8:be:d9:a2:cc:60:af:d2:da:84:af:45:
         d9:a4:d2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 11:18:13 2025 by rpki-client