Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/323830343a336131633a3a2f33322d313238203d3e20323636303731.roa
File:                     323830343a336131633a3a2f33322d313238203d3e20323636303731.roa (raw, json)
Hash identifier:          N7e/PQ2kzUanaLPvZyM/+HO/ocxTbEg7k0cGw0YXALs=
Subject key identifier:   8F:C3:20:C9:90:C3:52:4F:E4:5E:9B:BB:9F:A3:42:AB:C1:76:5A:26
Certificate issuer:       /CN=5704C8A4F0A08E97025D71F1C624C9280EDADDD4
Certificate serial:       35924EF835AF3E6473F033D9ED150C0FC476E5D8
Authority key identifier: 57:04:C8:A4:F0:A0:8E:97:02:5D:71:F1:C6:24:C9:28:0E:DA:DD:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/323830343a336131633a3a2f33322d313238203d3e20323636303731.roa
Signing time:             Fri 04 Jul 2025 02:25:33 +0000
ROA not before:           Fri 04 Jul 2025 02:20:33 +0000
ROA not after:            Fri 03 Jul 2026 02:25:33 +0000
asID:                     266071
IP address blocks:        2804:3a1c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.crl
                          rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 13:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:92:4e:f8:35:af:3e:64:73:f0:33:d9:ed:15:0c:0f:c4:76:e5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5704C8A4F0A08E97025D71F1C624C9280EDADDD4
        Validity
            Not Before: Jul  4 02:20:33 2025 GMT
            Not After : Jul  3 02:25:33 2026 GMT
        Subject: CN=8FC320C990C3524FE45E9BBB9FA342ABC1765A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:67:da:a8:08:a3:1a:8e:1f:c1:2b:06:5a:
                    e0:76:68:7e:fb:03:d2:77:10:f6:3c:d7:c6:77:30:
                    90:d9:de:45:46:5b:f3:23:0a:cf:ed:b4:ee:eb:2f:
                    a4:4d:aa:2b:8b:45:cb:92:9f:a1:11:fa:14:c5:b5:
                    a4:9a:74:ac:b6:69:39:7f:fa:8a:9e:90:ef:e2:0b:
                    2e:5a:a2:0c:c1:84:d0:b3:38:36:25:be:2d:d4:88:
                    31:28:98:df:e1:a1:9e:16:72:05:98:5a:c1:5a:1d:
                    42:9a:94:fe:5e:37:70:0f:0e:14:2e:57:07:32:b6:
                    c3:fa:0e:03:e1:a9:48:5d:53:5b:77:e5:34:11:40:
                    5b:dd:50:a9:48:22:b0:d8:8e:b0:b9:c5:21:09:53:
                    2e:39:23:3c:d6:f4:83:84:eb:7c:85:e5:14:7c:d0:
                    71:a3:2f:c1:26:3b:cd:df:55:46:c6:9a:91:89:3a:
                    c6:ed:50:b8:a6:cc:ff:e4:99:d4:d0:f8:f2:4f:ef:
                    e7:97:16:10:52:5a:a6:7e:69:43:cf:9e:c3:eb:7b:
                    96:01:ba:2c:78:18:04:8c:4b:f9:db:84:d2:fb:1c:
                    a0:c5:0c:3a:d2:8f:e8:61:36:61:92:41:72:f9:38:
                    a5:f1:cd:c9:93:7d:0b:85:e2:7a:97:3f:ad:fe:50:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C3:20:C9:90:C3:52:4F:E4:5E:9B:BB:9F:A3:42:AB:C1:76:5A:26
            X509v3 Authority Key Identifier:
                keyid:57:04:C8:A4:F0:A0:8E:97:02:5D:71:F1:C6:24:C9:28:0E:DA:DD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/323830343a336131633a3a2f33322d313238203d3e20323636303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:ca:7b:46:55:a0:47:b5:9e:b1:51:14:aa:71:01:ba:d3:fd:
         6d:b0:a1:81:1b:d8:67:04:cf:e8:cc:75:fc:f2:37:59:6f:c6:
         6d:5c:25:79:0c:d1:c6:4c:d1:68:f5:9f:50:f7:53:07:74:c4:
         a0:d8:34:8f:4d:98:1a:6a:ab:c5:09:f8:12:71:fa:1b:15:9c:
         23:47:6e:1b:d7:0c:80:a7:bf:70:8a:ae:e3:b6:7e:42:a7:63:
         c9:74:3e:02:36:6d:3b:68:38:87:7e:40:69:f7:e8:6f:1d:0a:
         27:3f:2e:76:bb:ed:3e:ba:3e:d4:fe:33:35:5c:ab:0b:5b:fd:
         44:0b:b5:ae:b7:cc:af:af:10:70:6e:dc:4c:82:be:31:e3:8f:
         19:48:93:dd:02:54:d0:c3:87:94:cc:7d:e8:95:15:ce:85:c6:
         24:b1:46:0d:bf:4c:18:ef:63:3e:24:e7:9b:c4:a7:b1:dc:72:
         15:93:20:b6:2c:c8:88:9c:66:3f:c6:6d:e0:fd:32:80:c1:90:
         c6:be:f4:24:53:2e:1e:f8:79:ad:f3:8d:f6:45:7f:df:0f:f7:
         94:f9:10:03:e1:b5:ad:6f:a3:f2:38:68:8d:74:de:9d:a7:d0:
         2d:c8:b8:5c:0d:50:77:c5:f0:c7:37:98:e8:bd:a9:f7:39:bf:
         bb:1a:98:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:42:33 2025 by rpki-client