Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33332d3435203d3e20323638383432.roa
File:                     323830343a356236633a3a2f33332d3435203d3e20323638383432.roa (raw, json)
Hash identifier:          sl+9LGAb8fN6r2rJjUm/vjlB+rldqEmt0F1h76wOsmU=
Subject key identifier:   C7:BA:B0:54:71:86:36:9E:CC:27:76:78:AC:EE:0E:DB:BE:91:CB:6D
Certificate issuer:       /CN=56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D
Certificate serial:       7AACDBB3B8DE7C85106923C64D9096A83E6DC9E8
Authority key identifier: 56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33332d3435203d3e20323638383432.roa
Signing time:             Thu 10 Jul 2025 12:40:32 +0000
ROA not before:           Thu 10 Jul 2025 12:35:32 +0000
ROA not after:            Thu 09 Jul 2026 12:40:32 +0000
asID:                     268842
IP address blocks:        2804:5b6c::/33 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.crl
                          rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 20:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ac:db:b3:b8:de:7c:85:10:69:23:c6:4d:90:96:a8:3e:6d:c9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D
        Validity
            Not Before: Jul 10 12:35:32 2025 GMT
            Not After : Jul  9 12:40:32 2026 GMT
        Subject: CN=C7BAB0547186369ECC277678ACEE0EDBBE91CB6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:a2:fa:39:5d:9b:2c:95:a2:62:88:43:69:
                    08:bd:9f:74:c4:b6:f5:37:bf:9f:8d:30:11:7b:b5:
                    d8:07:df:9b:85:6d:50:d4:1e:df:8a:f0:1b:72:a5:
                    20:1c:d6:8a:a6:7f:58:f7:55:20:ba:36:a8:9d:90:
                    7d:ea:5f:64:47:be:ef:fc:18:b2:31:8a:7a:c2:7a:
                    f6:de:b4:41:2f:25:b3:6f:45:5f:d2:39:d0:73:2f:
                    a1:1e:9a:47:e7:78:aa:b1:8b:1e:04:12:00:87:54:
                    60:63:aa:3d:37:49:65:a2:d5:f4:d7:89:c3:f0:18:
                    d4:98:81:2a:1f:bd:6f:c1:cf:a4:2c:d0:b0:5f:43:
                    14:a1:56:04:5c:4a:26:ef:54:8a:6f:5d:5d:50:40:
                    9f:7e:dd:93:7c:8d:b0:e0:b8:49:92:ef:af:7d:04:
                    15:8f:11:2c:a5:5d:87:c1:d0:af:10:2a:55:2c:0e:
                    bb:93:df:8b:cc:bc:5d:72:b4:49:84:62:ce:b3:06:
                    d7:b8:07:16:2e:9b:8f:59:2c:75:58:3c:b1:cd:d2:
                    b8:09:33:03:06:29:09:bb:f4:1d:76:33:c0:35:25:
                    7c:cc:b5:15:a8:67:60:ec:9f:91:20:e2:0a:f0:77:
                    e1:c2:c2:de:55:0e:76:1c:6f:d1:ed:5f:1e:ec:40:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BA:B0:54:71:86:36:9E:CC:27:76:78:AC:EE:0E:DB:BE:91:CB:6D
            X509v3 Authority Key Identifier:
                keyid:56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33332d3435203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b6c::/33

    Signature Algorithm: sha256WithRSAEncryption
         ca:63:e5:45:02:4b:31:22:5b:2d:cb:13:fa:91:e1:98:41:f9:
         6c:20:72:6c:89:15:fa:a0:c3:1f:68:88:19:40:51:69:7a:eb:
         d1:ba:bc:da:6f:52:e1:e0:44:7f:af:f7:26:e7:a3:0d:4a:45:
         42:90:4f:14:8f:2b:7f:6a:7d:91:1d:95:fa:fa:25:eb:c0:bd:
         0c:98:a3:c2:84:31:4d:7c:85:23:54:6d:26:9f:48:df:fb:07:
         68:de:86:22:cf:fa:b7:73:7f:cd:66:31:b8:58:d7:d9:c5:33:
         ad:2a:9b:78:02:03:0a:44:59:ae:9a:ff:44:0d:ce:3b:12:ef:
         51:de:7a:1c:35:ca:b3:b1:2d:83:59:f6:84:3d:58:10:42:29:
         60:95:11:f8:fd:ca:36:ca:8d:43:0a:13:bd:a4:95:73:f0:9c:
         36:e5:e0:ba:98:99:7d:df:48:bd:c9:47:0e:72:96:66:96:3b:
         ba:c0:53:08:38:cc:30:ba:3b:da:b9:3d:e7:c4:ea:d3:bb:a9:
         90:f6:53:25:38:5b:67:8f:89:58:90:f7:36:13:1a:c7:48:03:
         ce:30:fa:4e:c9:59:43:1e:81:86:39:33:12:9a:85:d7:fe:3c:
         61:4b:08:c8:8f:62:ed:76:2d:c5:0f:b8:dc:db:68:bb:2d:ba:
         f8:bb:0d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:44:35 2025 by rpki-client