Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030623a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a633030623a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          aR2Ip/Lo8/F0rmAZXTCDfuQIw1aSa0Z1sMCat8V+pXY=
Subject key identifier:   CE:89:87:CC:FD:AD:C0:E4:22:25:61:2D:A4:4D:AC:17:23:44:7D:C4
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       4545D226BBC3EA5482C1CF6499DCDF7C29F460D0
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030623a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Wed 09 Jul 2025 15:42:10 +0000
ROA not before:           Wed 09 Jul 2025 15:37:10 +0000
ROA not after:            Wed 08 Jul 2026 15:42:10 +0000
asID:                     264996
IP address blocks:        2804:3124:c00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 14:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:45:d2:26:bb:c3:ea:54:82:c1:cf:64:99:dc:df:7c:29:f4:60:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Jul  9 15:37:10 2025 GMT
            Not After : Jul  8 15:42:10 2026 GMT
        Subject: CN=CE8987CCFDADC0E42225612DA44DAC1723447DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:ba:3a:b8:d1:36:7a:28:a4:26:87:88:dd:
                    26:05:38:93:c3:34:8e:01:82:69:a0:40:35:df:15:
                    3d:c8:11:e5:a5:41:0a:2a:0c:0e:fb:fa:9c:bd:4a:
                    5e:a9:8a:14:48:1c:4b:cc:70:e6:22:78:a5:fc:b3:
                    a2:ba:e0:fd:11:82:3c:14:da:8a:1c:c5:49:27:29:
                    a3:c0:48:2a:56:c9:1d:2c:1e:8e:7e:6f:81:e4:45:
                    eb:70:68:22:f3:6c:26:bc:bf:20:55:1c:94:6e:f8:
                    00:2d:53:39:dc:4c:3d:48:bc:90:f5:b0:70:76:87:
                    6d:5c:0d:62:22:c5:a6:e5:fd:75:7f:c5:58:5b:4b:
                    49:71:69:1d:b7:c5:b9:d4:7a:7d:f9:b5:f2:5c:d5:
                    0a:2f:69:75:66:e0:ff:c6:d3:a7:0b:84:f2:06:b9:
                    04:2e:39:f2:da:08:24:be:de:3c:a6:0c:34:c9:b9:
                    0c:e2:0c:f0:91:7b:56:b8:4a:42:60:08:dd:9d:1e:
                    38:6f:70:8b:5e:fc:e1:6d:4a:69:da:9f:25:bb:47:
                    22:81:ab:4f:38:18:f1:77:f7:9a:fa:89:93:d9:8b:
                    7e:24:bd:06:b5:ea:38:fa:69:2d:f7:11:5c:ed:2f:
                    8e:c0:d8:4d:99:b9:33:80:3a:6e:16:e4:0a:13:73:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:89:87:CC:FD:AD:C0:E4:22:25:61:2D:A4:4D:AC:17:23:44:7D:C4
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030623a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:c00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:45:c5:c7:20:6e:e4:1f:24:c9:66:dc:7b:9d:db:2b:8c:ce:
         98:78:c6:16:24:d2:38:28:bd:13:9b:61:b6:bb:87:60:c1:77:
         9a:f2:cc:65:ef:81:06:a2:a3:d0:28:c9:bf:6f:e8:84:04:cd:
         db:e0:ca:a7:0c:55:47:af:74:02:ab:db:19:61:be:c7:dd:6b:
         80:5e:c6:e3:ab:79:e4:32:1b:46:d6:da:49:4b:9e:a9:0d:49:
         2d:65:25:cc:24:44:5d:99:7e:1a:31:fa:7a:cf:17:63:09:5b:
         6a:e6:11:1d:0f:fd:d4:58:66:29:67:d8:41:eb:d8:b1:65:f2:
         58:e9:b3:56:04:34:cf:23:77:17:bc:85:95:96:0f:66:37:48:
         e6:61:db:a6:82:ed:a6:42:dc:d4:53:e2:48:08:3d:a8:25:d4:
         ba:2e:6d:c5:93:85:e3:ca:23:a4:6c:35:c9:ab:4a:49:4b:17:
         b2:35:dc:2e:20:1a:be:0f:6c:e1:0b:be:c2:b0:84:3b:15:bb:
         01:59:31:02:9b:c1:55:ba:d0:50:de:84:b6:1c:57:4e:97:48:
         05:06:0e:4d:d9:0c:5a:42:ee:00:b5:64:e2:d4:3f:ee:15:0d:
         09:91:41:c1:b8:b4:b6:05:24:73:23:37:a5:dc:72:aa:0b:50:
         48:97:6e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:11 2025 by rpki-client