Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a373a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a373a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          +JfyGO9MSukmHQ/xJj42FkhE3p0wJR/t7DJGFsLz0aU=
Subject key identifier:   8A:EE:57:82:93:A0:51:9C:F8:DC:43:D8:A6:A1:6A:74:71:CB:42:F8
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       7BD46022A399E65E54ED960E4E27F84423851721
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a373a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Wed 09 Jul 2025 15:42:10 +0000
ROA not before:           Wed 09 Jul 2025 15:37:10 +0000
ROA not after:            Wed 08 Jul 2026 15:42:10 +0000
asID:                     264996
IP address blocks:        2804:3124:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d4:60:22:a3:99:e6:5e:54:ed:96:0e:4e:27:f8:44:23:85:17:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Jul  9 15:37:10 2025 GMT
            Not After : Jul  8 15:42:10 2026 GMT
        Subject: CN=8AEE578293A0519CF8DC43D8A6A16A7471CB42F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a5:77:28:7d:6d:ff:97:ca:c8:4f:90:5e:a1:
                    47:57:13:b7:3a:e0:15:2e:03:36:75:79:da:c5:07:
                    5c:6e:3a:ff:b3:b6:59:87:38:54:63:34:f3:37:8a:
                    3f:c3:ff:55:b9:62:1b:92:5d:d5:95:a0:ff:a1:3f:
                    28:3a:e8:f8:c2:de:0a:c1:a3:50:da:37:45:84:f9:
                    e0:cb:da:61:67:3a:50:84:0f:50:8a:66:49:da:59:
                    3d:eb:53:6e:e8:fa:c9:c3:5d:fe:1a:9e:21:42:a2:
                    e7:3a:c5:02:fa:53:c2:2f:8b:07:f0:e8:97:fb:55:
                    fc:1b:1e:b2:50:3e:35:c5:d6:0c:1d:13:08:1f:5c:
                    05:f5:15:b6:c6:14:64:b9:90:97:f1:74:87:d2:03:
                    14:bf:f0:8e:ea:ef:50:0e:76:52:3e:b4:5f:a7:ab:
                    18:1b:71:09:05:e3:a0:61:fe:c6:aa:57:bd:79:5c:
                    c6:fd:f3:f6:16:b9:74:06:55:66:19:59:ed:15:ad:
                    6b:06:33:20:7e:e3:8b:5a:72:b0:64:2a:7a:6f:b4:
                    ce:49:60:64:9b:1b:59:2f:6c:90:07:82:69:4a:34:
                    17:f9:cb:dc:93:79:5b:a5:9c:4b:d0:aa:01:9a:ce:
                    c0:91:34:a0:d8:77:d6:00:2b:36:6c:fd:d7:90:4a:
                    f2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EE:57:82:93:A0:51:9C:F8:DC:43:D8:A6:A1:6A:74:71:CB:42:F8
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a373a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:65:f3:03:8f:3b:24:4c:fc:4d:45:e8:d3:70:a8:37:47:40:
         76:69:15:e0:96:03:2f:12:53:85:5a:18:46:cd:76:45:d8:5e:
         4c:e0:99:38:07:cd:21:e0:57:74:e3:34:1e:3d:ad:b0:c7:39:
         cb:f0:29:fb:86:60:a7:b7:7a:c5:f4:4e:2a:80:02:f8:ad:32:
         17:01:df:d8:70:a5:55:19:5a:ff:38:38:a0:e8:31:27:f2:fa:
         26:52:6b:f4:7e:55:93:da:ef:fa:83:84:b1:7e:77:47:5e:a9:
         e2:d4:91:d6:bb:c3:1e:8e:53:39:b5:72:e5:c8:1b:38:49:7e:
         4e:30:65:f3:c7:48:00:cd:b3:1c:b4:55:a8:54:10:cf:3f:ce:
         05:63:b6:ce:f8:44:79:ae:e8:5c:f2:34:74:b5:e3:cd:ae:bc:
         aa:d8:44:78:9e:2b:6b:f2:ad:da:2b:95:6b:ec:83:c3:d5:fd:
         16:cc:75:c3:59:c0:e6:89:e8:e8:35:56:ca:3a:62:98:7f:c6:
         33:5b:b7:39:57:57:89:c4:88:c8:f8:77:92:bf:f9:da:c9:98:
         56:68:05:6c:bb:d2:ba:97:18:fd:cc:ea:c8:de:3d:fd:56:33:
         12:49:22:12:49:e6:e0:87:ba:c8:3e:b9:99:58:47:b6:03:31:
         93:6d:9b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:40:21 2025 by rpki-client