Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/323830343a326464383a666637303a3a2f34342d3434203d3e20323635333037.roa
File:                     323830343a326464383a666637303a3a2f34342d3434203d3e20323635333037.roa (raw, json)
Hash identifier:          zc15EqzjS1PUTpnKp4JvsyBQHR1EJsFS6ZXB2CowTzg=
Subject key identifier:   1A:8E:45:8E:BD:48:EA:4E:D0:50:70:FA:BC:A4:44:50:14:1B:D6:04
Certificate issuer:       /CN=764567616A60FC68D3BC1B6D3EC8446979113187
Certificate serial:       48C94EFA82BB47BBF12CDE944C6EA8891EB26B17
Authority key identifier: 76:45:67:61:6A:60:FC:68:D3:BC:1B:6D:3E:C8:44:69:79:11:31:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/323830343a326464383a666637303a3a2f34342d3434203d3e20323635333037.roa
Signing time:             Fri 04 Jul 2025 13:24:43 +0000
ROA not before:           Fri 04 Jul 2025 13:19:43 +0000
ROA not after:            Fri 03 Jul 2026 13:24:43 +0000
asID:                     265307
IP address blocks:        2804:2dd8:ff70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.crl
                          rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 22:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c9:4e:fa:82:bb:47:bb:f1:2c:de:94:4c:6e:a8:89:1e:b2:6b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764567616A60FC68D3BC1B6D3EC8446979113187
        Validity
            Not Before: Jul  4 13:19:43 2025 GMT
            Not After : Jul  3 13:24:43 2026 GMT
        Subject: CN=1A8E458EBD48EA4ED05070FABCA44450141BD604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ad:f7:70:0d:e7:12:ea:f6:5a:ed:10:e2:2c:
                    98:49:07:d6:23:b6:fc:ce:5d:14:d4:aa:61:e6:bc:
                    6c:51:57:75:66:1d:ab:5d:c3:f9:39:d0:12:8d:26:
                    02:e8:d5:71:ff:73:7e:ab:a9:74:03:62:2a:92:f2:
                    a2:23:94:22:19:fb:84:86:1d:8e:3a:c2:40:d2:d0:
                    e9:a9:d2:a3:2b:9c:73:33:b8:b8:6b:73:63:f4:46:
                    8c:1e:57:da:04:6d:e6:d9:01:87:db:fc:f9:b5:c4:
                    a4:75:0d:d4:d2:11:3b:82:f2:ef:e1:ad:2b:c9:df:
                    b6:cb:00:ee:ab:5b:16:c2:fa:bf:86:f2:84:11:ef:
                    61:31:83:bd:f0:19:3c:bc:76:f0:85:3a:f8:94:96:
                    ae:75:1e:c0:90:a5:dd:d6:ce:ac:94:cb:4a:22:eb:
                    75:a7:15:10:5e:c5:08:a0:8d:d7:b1:d2:55:af:22:
                    b0:7e:28:ed:22:f7:37:1d:91:15:d6:7d:1c:d6:f3:
                    a8:61:da:9f:cf:e4:d4:42:d6:43:d2:a9:16:5f:58:
                    48:60:a1:2a:98:f1:ed:25:de:ba:b1:0f:ea:22:a4:
                    7d:0f:7d:fc:77:3e:5f:11:1f:1c:37:c2:78:ee:2a:
                    70:d0:24:f3:90:ec:ff:9e:80:45:5e:4a:71:0f:dc:
                    6a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8E:45:8E:BD:48:EA:4E:D0:50:70:FA:BC:A4:44:50:14:1B:D6:04
            X509v3 Authority Key Identifier:
                keyid:76:45:67:61:6A:60:FC:68:D3:BC:1B:6D:3E:C8:44:69:79:11:31:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/323830343a326464383a666637303a3a2f34342d3434203d3e20323635333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dd8:ff70::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:23:fc:eb:56:fd:83:16:77:33:85:bf:56:b4:72:54:d1:9e:
         25:e4:fe:af:d8:3b:27:6d:54:4b:a7:26:90:3e:64:9b:a6:98:
         4d:6e:f5:0b:7c:49:fe:22:32:7e:4c:95:08:33:c1:62:df:5a:
         d3:60:f2:a0:ec:5b:fb:2d:5f:31:f3:af:10:bb:b0:92:98:3b:
         d8:47:13:60:b9:29:3c:8e:59:db:99:19:fc:a5:b7:94:cd:89:
         77:c4:8e:7f:c9:10:19:d4:9c:d1:3a:df:ab:37:bb:75:f9:8e:
         68:88:18:30:26:fe:15:15:51:66:2c:67:25:18:c6:22:c1:bb:
         89:fa:ab:49:ac:09:dc:95:57:08:ec:5b:12:de:55:ca:8c:ed:
         5c:5a:08:18:1a:7f:ab:74:fa:3b:ba:f7:b4:d1:2e:13:2d:d2:
         d0:60:f6:e0:d4:7d:94:bb:ee:bb:79:37:b0:27:d8:a1:6d:a8:
         46:0c:c1:0e:6d:98:ea:4f:eb:49:14:60:80:7b:94:8f:95:6b:
         88:81:46:ad:85:51:26:bd:02:f1:5f:92:e3:9d:92:29:04:90:
         45:99:a0:41:89:d2:92:c6:8e:e0:2e:a6:30:ee:db:10:db:b1:
         d5:77:8f:ed:93:00:94:0c:c9:e0:da:4b:1a:86:69:2f:80:0c:
         d5:39:96:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:13 2025 by rpki-client