Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a3a2f33322d3332203d3e20323638343437.roa
File:                     323830343a353135633a3a2f33322d3332203d3e20323638343437.roa (raw, json)
Hash identifier:          FAOHi2oXKdngEOZwk6JUQLIUi02Y6ARdRmIWQjqBOZo=
Subject key identifier:   E8:BF:D3:85:3E:96:15:B7:54:73:57:F4:B0:C8:E2:1F:07:F5:28:11
Certificate issuer:       /CN=8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31
Certificate serial:       5D3A8DD810F4DF366EA74A4DDC2A2DEA8C45EF40
Authority key identifier: 8B:D6:92:C4:16:F4:48:93:15:B5:DD:0C:CD:F9:6F:DB:7B:A0:EE:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a3a2f33322d3332203d3e20323638343437.roa
Signing time:             Thu 24 Jul 2025 13:04:34 +0000
ROA not before:           Thu 24 Jul 2025 12:59:34 +0000
ROA not after:            Thu 23 Jul 2026 13:04:34 +0000
asID:                     268447
IP address blocks:        2804:515c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.crl
                          rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3a:8d:d8:10:f4:df:36:6e:a7:4a:4d:dc:2a:2d:ea:8c:45:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31
        Validity
            Not Before: Jul 24 12:59:34 2025 GMT
            Not After : Jul 23 13:04:34 2026 GMT
        Subject: CN=E8BFD3853E9615B7547357F4B0C8E21F07F52811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:61:64:65:3e:11:19:ac:26:eb:8b:22:08:
                    8f:2d:89:c7:1d:cc:0e:cd:c2:c8:8c:a6:73:e3:2d:
                    d3:01:d2:ce:28:c5:65:3c:85:a4:4c:76:cc:c0:7f:
                    91:d1:b6:d0:b1:e9:4a:fd:62:6d:b4:38:1e:f7:b8:
                    50:d7:e3:e0:ca:ff:79:6d:47:7f:20:fc:8e:40:86:
                    84:38:f2:19:a6:1c:72:55:9f:d1:84:a1:e9:9c:50:
                    ef:87:fa:a8:f3:b8:f9:c7:00:8e:ed:e0:4e:93:fd:
                    d7:09:44:24:2b:a7:00:a4:c4:3c:fe:b0:f2:48:64:
                    1c:97:61:28:1a:0c:a9:4c:f0:ba:14:6a:11:11:51:
                    3d:68:0d:9f:9b:65:97:aa:72:93:03:3c:e9:39:43:
                    a0:c3:42:8b:10:8e:8a:67:a1:d9:5d:1d:80:a3:e2:
                    50:e2:7b:13:d1:6c:14:18:95:3e:f5:50:55:ad:cb:
                    86:99:2b:f9:13:e5:ef:f8:84:f9:8f:f3:4b:e5:b6:
                    80:b1:0c:22:31:23:1a:61:0a:c1:2e:48:d9:c8:16:
                    44:85:f4:d4:fd:d9:c7:25:4a:0e:33:51:b1:3f:a4:
                    e9:af:20:77:65:a6:e1:7a:92:84:32:97:0b:20:54:
                    0c:0b:6b:47:43:e7:be:5e:53:fb:c3:32:88:29:6e:
                    cf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BF:D3:85:3E:96:15:B7:54:73:57:F4:B0:C8:E2:1F:07:F5:28:11
            X509v3 Authority Key Identifier:
                keyid:8B:D6:92:C4:16:F4:48:93:15:B5:DD:0C:CD:F9:6F:DB:7B:A0:EE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a3a2f33322d3332203d3e20323638343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:515c::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:e5:30:61:91:c5:42:2b:75:f8:dc:e2:3f:96:f0:59:40:b3:
         a6:0b:23:8d:ea:f6:1f:aa:2f:4d:79:98:be:a7:c9:2e:59:c5:
         fb:89:6c:ce:35:3d:5d:25:4b:b8:bd:ee:ca:71:2f:60:8b:9f:
         2b:c6:eb:ad:12:b6:b0:16:ab:d5:6c:25:03:18:fb:18:ed:6e:
         71:3e:11:ed:f5:b2:b5:e4:54:0e:86:0d:e8:c2:5b:4d:a1:86:
         7e:5f:96:6c:13:6d:72:67:15:d7:6a:9a:92:86:a8:9f:42:7d:
         40:0d:56:de:4c:6d:cb:ae:6d:58:0a:e2:ee:3e:bc:c8:99:26:
         01:46:37:ad:93:95:5c:aa:16:26:de:9e:65:cb:81:af:e9:0a:
         45:f7:75:d5:7b:77:d5:65:55:e7:fc:4c:dc:aa:63:43:f5:41:
         e4:21:a4:45:a6:e4:82:23:ec:1a:1c:7e:aa:fd:71:79:c5:af:
         58:85:14:bb:16:1d:3d:ec:a1:41:f4:ff:59:93:78:cd:57:81:
         a3:65:e0:0c:40:49:8e:d1:3e:d7:f9:46:b3:5c:9c:a1:cb:01:
         dc:80:22:94:99:86:0a:a5:37:5c:99:06:38:d0:c6:e2:bc:8c:
         6c:9e:59:45:00:a1:6f:c3:b2:3a:ee:d6:c9:7a:48:38:16:01:
         92:c6:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:31:07 2025 by rpki-client