Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030633a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a633030633a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          t+r2g3rdtRMHan0XXoj38wCnVlIXd7QmpmP0hVcnqqA=
Subject key identifier:   2D:32:65:90:B1:F0:1D:5D:F8:4C:6A:F7:86:14:2B:4A:DC:6D:99:70
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       0CB28C778ADF4EE128F033C6028A267BAFF0B80A
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030633a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Wed 09 Jul 2025 15:42:10 +0000
ROA not before:           Wed 09 Jul 2025 15:37:10 +0000
ROA not after:            Wed 08 Jul 2026 15:42:10 +0000
asID:                     264996
IP address blocks:        2804:3124:c00c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 14:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b2:8c:77:8a:df:4e:e1:28:f0:33:c6:02:8a:26:7b:af:f0:b8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Jul  9 15:37:10 2025 GMT
            Not After : Jul  8 15:42:10 2026 GMT
        Subject: CN=2D326590B1F01D5DF84C6AF786142B4ADC6D9970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:d3:b2:01:e0:a9:56:03:06:de:9b:d5:27:
                    9f:04:c4:46:de:99:37:2a:8d:ca:15:55:c6:d7:2c:
                    eb:ac:bd:e5:85:02:cd:35:e4:30:3c:c5:05:a4:04:
                    45:05:4a:a4:46:0b:34:2a:05:9a:67:d1:5a:94:51:
                    dd:c3:42:fd:8a:ce:15:e4:fe:7a:d0:96:c1:98:5c:
                    01:1e:33:f6:77:58:2c:ce:4b:e4:40:60:fc:99:d9:
                    b9:03:3c:0a:89:ba:d3:46:f5:61:49:43:23:28:d4:
                    b9:ac:a4:2c:45:d0:8e:ff:69:4f:a8:e2:3b:da:d8:
                    4f:85:3c:58:cb:7c:09:a7:e8:12:1a:b6:4d:1f:8a:
                    87:49:10:fc:f2:6e:a9:f9:b6:b1:cd:00:62:1e:36:
                    83:69:fa:af:db:90:8b:56:34:29:f9:21:6c:38:84:
                    65:79:ca:47:25:d8:bc:4c:2c:14:c7:83:55:33:20:
                    7d:32:a9:fe:c8:d7:09:e7:92:35:42:76:03:54:d6:
                    9a:cc:4c:0b:7c:f6:d9:89:fb:f7:12:71:79:23:5e:
                    4e:aa:ef:2d:61:f5:9d:a0:88:84:ee:31:f4:3a:45:
                    5f:2e:15:f7:aa:6b:dd:87:c2:f7:e1:04:1a:dc:b5:
                    2f:83:8d:02:f1:2d:f4:47:2b:9d:b0:96:9b:5c:ce:
                    28:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:32:65:90:B1:F0:1D:5D:F8:4C:6A:F7:86:14:2B:4A:DC:6D:99:70
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030633a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:c00c::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:2c:17:75:c9:90:0f:09:2b:86:7c:ea:68:0a:24:ac:09:75:
         dd:6a:1d:8b:f7:fd:b8:cd:b5:ac:33:5f:95:b6:cf:ec:87:14:
         c4:a1:bd:96:56:fc:d3:8d:c9:64:ff:4b:d3:03:22:91:50:9f:
         93:d3:bd:4e:ea:c2:70:67:6f:f7:d1:0a:ff:23:70:d0:97:bf:
         c8:18:48:18:cd:b8:16:79:5a:2a:94:7a:55:2c:49:06:b6:95:
         5c:40:55:fa:8a:2b:ad:67:c4:8a:19:5c:e4:64:6d:e4:0e:fb:
         89:04:73:69:8a:9d:11:22:bb:61:ec:b0:64:62:d9:c5:d8:e2:
         eb:5d:6a:48:e1:2c:41:7a:5e:f2:a4:bf:99:02:69:16:df:dc:
         5c:13:2d:e2:f0:f6:6e:cb:bc:10:d9:69:57:0e:fe:99:f0:b8:
         5c:5e:7a:3a:22:b7:84:b3:65:cb:20:42:96:ef:6d:48:17:c5:
         77:3a:3d:45:46:83:6d:12:b5:df:9d:a7:93:ba:db:52:58:09:
         c7:6f:9e:64:e9:11:dc:ac:ab:20:19:ae:b9:89:a6:98:95:42:
         b6:57:df:dc:78:ba:f5:1c:96:41:50:2d:76:90:61:8c:7e:9f:
         89:c4:8f:5f:32:5b:90:26:56:45:78:5d:7f:f6:92:2b:4c:02:
         70:c0:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:09:56 2025 by rpki-client