Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/323830343a316238633a3a2f33322d313238203d3e203631373334.roa
File:                     323830343a316238633a3a2f33322d313238203d3e203631373334.roa (raw, json)
Hash identifier:          8y+QNQg9DnYRULMADjXeiFDNvwBmm7QVA+4AMAUFkU4=
Subject key identifier:   C4:60:41:62:81:EC:42:30:40:A6:0D:D8:9A:7C:9F:9B:58:EB:33:1E
Certificate issuer:       /CN=30AEAFFD676CA307947095A04FBE1272E3420E95
Certificate serial:       5E15221D35D242D249F2734C06895F79E1D7453B
Authority key identifier: 30:AE:AF:FD:67:6C:A3:07:94:70:95:A0:4F:BE:12:72:E3:42:0E:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30AEAFFD676CA307947095A04FBE1272E3420E95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/323830343a316238633a3a2f33322d313238203d3e203631373334.roa
Signing time:             Tue 27 May 2025 18:52:03 +0000
ROA not before:           Tue 27 May 2025 18:47:03 +0000
ROA not after:            Tue 26 May 2026 18:52:03 +0000
asID:                     61734
IP address blocks:        2804:1b8c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/30AEAFFD676CA307947095A04FBE1272E3420E95.crl
                          rsync://rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/30AEAFFD676CA307947095A04FBE1272E3420E95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30AEAFFD676CA307947095A04FBE1272E3420E95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 21:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:15:22:1d:35:d2:42:d2:49:f2:73:4c:06:89:5f:79:e1:d7:45:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30AEAFFD676CA307947095A04FBE1272E3420E95
        Validity
            Not Before: May 27 18:47:03 2025 GMT
            Not After : May 26 18:52:03 2026 GMT
        Subject: CN=C460416281EC423040A60DD89A7C9F9B58EB331E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:38:3c:42:94:f8:25:6d:77:26:1f:0a:95:
                    26:89:01:7c:72:3c:23:cd:ff:1b:61:5a:79:8a:51:
                    72:f7:63:a6:4d:b0:b1:1e:1e:52:7d:2c:e8:92:8f:
                    bd:f6:ee:37:3e:fc:6d:60:10:1d:d6:76:01:eb:0f:
                    e1:db:0f:38:6b:8a:fe:52:d5:20:83:42:64:c7:46:
                    6b:f5:d9:51:5a:ce:b5:8b:f7:9b:07:ce:4a:c0:b8:
                    01:d9:b0:30:64:70:93:38:1d:35:02:c4:f4:e8:26:
                    4d:4e:44:24:ef:2d:04:06:c3:e8:90:26:0e:d4:59:
                    5f:7b:b1:92:09:32:34:1e:30:48:d7:df:ea:3a:10:
                    fa:a5:ef:78:cc:11:d9:34:5c:f9:22:3c:01:5a:53:
                    dd:dc:d1:c3:95:a7:0a:f3:61:7a:18:f8:a8:e7:0e:
                    51:10:71:97:fb:09:91:be:dc:00:ec:e2:84:41:95:
                    82:9b:82:06:a2:ce:5e:42:48:98:3e:7b:c0:f9:7c:
                    c9:c2:ac:32:af:f4:86:58:0b:a5:f0:22:24:39:8b:
                    f4:a9:f6:27:07:5c:32:25:bb:22:72:90:30:08:76:
                    51:1e:02:9b:ae:d9:d0:26:55:5d:bd:56:c1:85:43:
                    8d:4c:26:01:23:f4:5a:32:39:de:00:47:be:d9:c5:
                    b7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:60:41:62:81:EC:42:30:40:A6:0D:D8:9A:7C:9F:9B:58:EB:33:1E
            X509v3 Authority Key Identifier:
                keyid:30:AE:AF:FD:67:6C:A3:07:94:70:95:A0:4F:BE:12:72:E3:42:0E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/30AEAFFD676CA307947095A04FBE1272E3420E95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30AEAFFD676CA307947095A04FBE1272E3420E95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/323830343a316238633a3a2f33322d313238203d3e203631373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         e3:d8:20:07:6d:48:7c:c6:66:f0:56:1e:b1:9d:de:54:b6:39:
         ca:bb:90:6c:87:5d:63:ed:51:53:fc:eb:aa:b3:b4:1f:ec:2d:
         7e:1a:b3:c6:1b:b0:ac:b5:20:54:39:7e:a0:20:7c:2d:94:9e:
         33:8c:e3:eb:51:06:c3:79:fe:20:f8:e4:1c:90:da:0c:ed:0b:
         ab:18:c8:5c:c8:b0:cc:02:a0:0e:07:20:65:6a:2a:51:fb:2b:
         4a:7a:ce:29:6e:5f:7e:47:13:73:2e:ad:01:df:90:f6:09:6a:
         5e:68:98:cf:f4:23:6d:7c:2e:03:38:eb:aa:6d:24:59:e3:47:
         7f:fb:40:2d:35:1d:7d:27:df:da:b0:a5:b6:21:b1:85:3d:0b:
         ff:ce:7f:b4:a1:97:b5:83:24:cb:53:b4:94:2b:90:37:b2:f1:
         e0:22:34:5e:86:ec:5a:4b:be:55:29:27:ff:ab:41:85:1a:e2:
         26:52:a7:7e:c8:81:87:11:77:e2:97:f0:a6:20:34:37:25:20:
         e4:44:9c:25:16:90:56:ff:f1:df:60:8c:60:91:74:04:0e:0e:
         53:bb:57:9a:bb:bf:94:5b:44:0b:70:9c:25:1f:89:aa:59:f0:
         3f:27:b8:af:fb:73:30:a6:98:ff:87:57:19:6f:8b:20:e0:98:
         b3:35:ad:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:00:47 2025 by rpki-client