Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a313a3a2f34382d3438203d3e20323633343237.roa
File:                     323830343a313139633a313a3a2f34382d3438203d3e20323633343237.roa (raw, json)
Hash identifier:          UD1kYTOr/+BX2t1K26MoKP6RyweZRxGKBWYFuDzuBCs=
Subject key identifier:   06:C2:7D:8C:6D:B2:9D:69:77:34:DB:75:C4:EE:23:ED:C3:04:2C:18
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       4662FB950C0EE9C4405563D8CBCA07346B197E95
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a313a3a2f34382d3438203d3e20323633343237.roa
Signing time:             Tue 22 Jul 2025 20:54:40 +0000
ROA not before:           Tue 22 Jul 2025 20:49:40 +0000
ROA not after:            Tue 21 Jul 2026 20:54:40 +0000
asID:                     263427
IP address blocks:        2804:119c:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 06:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:62:fb:95:0c:0e:e9:c4:40:55:63:d8:cb:ca:07:34:6b:19:7e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jul 22 20:49:40 2025 GMT
            Not After : Jul 21 20:54:40 2026 GMT
        Subject: CN=06C27D8C6DB29D697734DB75C4EE23EDC3042C18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:ff:25:da:18:8d:eb:1a:10:7a:7e:73:dc:
                    e8:3b:c5:85:2e:f4:e1:8d:8c:cc:c8:e7:6f:1d:54:
                    05:b5:dc:c3:a0:f6:43:bf:83:f5:cb:e4:d9:ae:89:
                    de:06:e1:18:11:55:af:40:92:e2:91:4f:7d:87:86:
                    52:02:d1:d6:f8:77:36:d2:b7:ab:cf:03:0e:9f:9f:
                    cf:fd:ec:54:c3:41:11:bc:55:cc:e3:11:4c:3f:63:
                    c4:68:bf:29:b4:9d:3c:84:34:c6:f1:5a:6e:2f:7c:
                    9c:73:f5:8f:3e:13:84:0f:7b:14:c1:81:77:1c:59:
                    ac:ee:d2:7d:db:fd:7d:31:88:8b:48:bd:92:2d:a2:
                    19:27:e2:01:0b:4d:da:e7:76:20:c5:e6:03:f8:ca:
                    34:9f:0b:24:0b:bf:b8:76:49:f6:43:71:20:87:f1:
                    56:fd:aa:75:06:62:ba:25:ad:d8:b5:bb:97:ce:36:
                    0f:d9:b5:43:c0:10:d7:4d:32:10:b6:96:2e:55:fe:
                    b4:64:84:19:53:1e:81:6b:5c:ce:eb:fa:63:31:91:
                    29:d0:e7:19:e0:f7:03:4f:84:2e:05:de:97:e5:c2:
                    ad:c4:99:b8:13:8d:27:57:05:59:28:55:57:40:d1:
                    15:9d:e2:23:ae:f5:58:e5:89:7e:01:1a:d9:f5:35:
                    bc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C2:7D:8C:6D:B2:9D:69:77:34:DB:75:C4:EE:23:ED:C3:04:2C:18
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a313a3a2f34382d3438203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:119c:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         da:ac:36:0e:61:19:0b:ab:12:ba:db:a2:d7:c1:63:66:6c:a5:
         e1:96:e4:be:31:f1:3e:ad:da:ec:a5:fc:b0:13:7d:ac:a0:83:
         a0:67:c0:9a:c3:b3:ad:07:38:83:8f:9a:4e:1a:15:6a:71:f3:
         37:eb:73:dd:d9:2e:3b:66:d8:28:84:3a:9c:a0:7a:9d:92:4f:
         3a:f2:17:c9:c5:6c:35:d5:07:c8:f7:7d:71:a8:e5:9d:b5:d6:
         10:de:48:f0:65:30:d3:44:44:b4:cd:7a:86:bb:ab:a4:a5:32:
         83:8f:7f:a4:20:c5:c9:a6:b7:0a:c0:55:fe:ce:d0:7d:fa:4f:
         7b:37:1c:24:b7:b9:49:93:9e:9a:f0:45:43:e2:80:8d:a0:6b:
         5d:b3:7d:6c:ff:39:62:ba:8b:00:55:66:91:52:95:97:2e:b0:
         d1:07:71:1b:eb:74:23:1b:ae:11:1a:d1:d5:ed:27:47:2b:c8:
         c6:17:90:d7:b7:44:4c:fc:78:3b:f8:8f:22:f4:28:bd:9a:4e:
         a3:b1:c0:91:61:c9:6d:a8:3a:82:09:1f:d1:13:1e:a3:ed:29:
         b3:fc:be:a6:20:f1:0e:2b:71:7e:81:fc:82:d6:10:59:43:49:
         fd:7a:d6:20:5e:32:0a:4f:dc:49:4b:07:25:c4:cb:f7:90:8e:
         bb:24:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:44:43 2025 by rpki-client