Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a383030303a3a2f33332d3435203d3e20323638383432.roa
File:                     323830343a356236633a383030303a3a2f33332d3435203d3e20323638383432.roa (raw, json)
Hash identifier:          /88+7Rcp86Zyv7z5WNLcbPw+K3IZvSFPlyNEP+n2Zts=
Subject key identifier:   D3:91:3E:7F:68:A2:16:ED:48:25:A6:58:60:94:DE:57:A9:B4:76:44
Certificate issuer:       /CN=56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D
Certificate serial:       02A7FBC77B40D1843D305A7958B2B6AA0E163818
Authority key identifier: 56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a383030303a3a2f33332d3435203d3e20323638383432.roa
Signing time:             Thu 10 Jul 2025 12:40:32 +0000
ROA not before:           Thu 10 Jul 2025 12:35:32 +0000
ROA not after:            Thu 09 Jul 2026 12:40:32 +0000
asID:                     268842
IP address blocks:        2804:5b6c:8000::/33 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.crl
                          rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 03:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a7:fb:c7:7b:40:d1:84:3d:30:5a:79:58:b2:b6:aa:0e:16:38:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D
        Validity
            Not Before: Jul 10 12:35:32 2025 GMT
            Not After : Jul  9 12:40:32 2026 GMT
        Subject: CN=D3913E7F68A216ED4825A6586094DE57A9B47644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6f:d9:8e:f6:83:d7:e1:7b:67:73:19:63:7d:
                    3c:02:61:ad:f0:a7:11:88:80:7b:25:06:9e:61:7d:
                    49:44:e6:35:9c:0e:6f:49:2c:d3:c2:53:48:46:11:
                    fc:c4:76:74:04:d9:1a:e0:b3:f1:2c:16:7b:70:54:
                    33:93:62:56:8e:25:d3:5b:ac:d2:a1:5c:61:14:69:
                    6c:19:23:53:16:3c:d6:a5:19:86:76:33:b3:79:97:
                    06:56:4a:af:ad:b1:72:9f:1e:6a:3f:95:14:e9:89:
                    f7:87:b4:b5:39:ac:e6:f7:6a:c9:d5:92:37:be:18:
                    20:6b:d1:0f:5a:29:f5:c6:d6:f9:8b:01:d3:35:57:
                    b2:84:bd:31:1e:b5:56:29:d6:a0:a7:eb:b6:98:2b:
                    f0:0e:60:c0:79:f7:ed:a1:4d:d8:b8:46:29:f5:e0:
                    83:74:58:64:1d:0e:c6:41:cb:ba:7b:b5:9f:ad:74:
                    a4:15:ce:df:6f:ce:53:89:10:bf:67:27:b4:33:47:
                    9c:b9:03:c9:b1:ea:69:b3:32:04:e2:5e:98:ee:de:
                    ff:16:2f:34:b6:2d:b9:54:0e:5a:32:a3:4a:e7:fc:
                    ea:57:19:31:94:60:8d:00:66:ec:55:57:63:67:8f:
                    15:d3:6b:6a:e3:ee:09:83:b8:53:ce:aa:ed:99:4e:
                    23:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:91:3E:7F:68:A2:16:ED:48:25:A6:58:60:94:DE:57:A9:B4:76:44
            X509v3 Authority Key Identifier:
                keyid:56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a383030303a3a2f33332d3435203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b6c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0d:12:47:d9:95:98:91:1f:3d:e6:2a:e6:e1:08:dc:60:3a:14:
         13:90:4f:35:60:78:0c:28:7d:a8:24:73:a7:ea:ec:79:1b:92:
         ff:7e:fd:9c:41:f6:ec:13:45:75:e1:c9:be:7f:d1:98:ea:4f:
         f3:59:68:a5:c9:95:ab:ec:72:7d:5d:c0:d1:2c:75:fb:61:3a:
         50:a2:bd:ba:0f:93:ff:66:66:90:42:e3:0d:ec:27:6f:a1:65:
         0b:f8:6a:70:e8:64:94:26:b2:de:ed:8c:c0:a8:ac:b2:40:85:
         62:83:98:74:4f:72:31:cf:c7:1c:da:33:c4:4e:7c:ec:8d:41:
         d4:6f:c1:0e:9b:d4:a1:76:67:6b:88:5a:86:6a:c9:4b:05:00:
         16:0e:8c:c7:c2:ca:67:67:15:e4:8d:13:77:5d:14:b3:50:7b:
         62:8a:d1:9b:50:d6:dd:53:91:e7:94:ba:0f:2e:40:e8:68:63:
         ed:0b:c8:be:22:b0:be:5a:67:fe:d3:93:a8:70:af:28:68:3a:
         6f:d7:4f:cb:80:45:c0:0a:4a:ab:cf:59:27:11:7b:ef:b2:6f:
         ce:cf:39:52:41:2e:e6:8d:66:0e:ca:fb:9c:be:05:9a:d5:fb:
         2a:0f:fe:bd:5e:c1:49:fd:aa:bf:d8:4c:83:d9:6a:c9:b4:04:
         a7:55:04:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:05:44 2025 by rpki-client