Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/323830343a363434633a3a2f33332d3333203d3e20323639343139.roa
File:                     323830343a363434633a3a2f33332d3333203d3e20323639343139.roa (raw, json)
Hash identifier:          r8cVEVCuWABKEkF8AXbVatPuxVdQAmMkPZKM6p/SvXs=
Subject key identifier:   0D:C1:A5:4F:31:D3:C4:C5:F7:2E:CC:A4:C8:8C:78:25:63:79:B1:60
Certificate issuer:       /CN=0A2DD6959EA574B23A0487BA534C699E4AC421C5
Certificate serial:       3154C0D8A2568DFF036777D50ABC2DDED5CE363C
Authority key identifier: 0A:2D:D6:95:9E:A5:74:B2:3A:04:87:BA:53:4C:69:9E:4A:C4:21:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DD6959EA574B23A0487BA534C699E4AC421C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/323830343a363434633a3a2f33332d3333203d3e20323639343139.roa
Signing time:             Wed 09 Jul 2025 18:41:46 +0000
ROA not before:           Wed 09 Jul 2025 18:36:46 +0000
ROA not after:            Wed 08 Jul 2026 18:41:46 +0000
asID:                     269419
IP address blocks:        2804:644c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/0A2DD6959EA574B23A0487BA534C699E4AC421C5.crl
                          rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/0A2DD6959EA574B23A0487BA534C699E4AC421C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DD6959EA574B23A0487BA534C699E4AC421C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:54:c0:d8:a2:56:8d:ff:03:67:77:d5:0a:bc:2d:de:d5:ce:36:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DD6959EA574B23A0487BA534C699E4AC421C5
        Validity
            Not Before: Jul  9 18:36:46 2025 GMT
            Not After : Jul  8 18:41:46 2026 GMT
        Subject: CN=0DC1A54F31D3C4C5F72ECCA4C88C78256379B160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:37:06:96:5c:b9:f6:25:8a:36:fc:c1:19:
                    b1:53:27:f5:2e:5b:b8:77:27:2a:a3:56:ee:fe:b2:
                    a7:be:52:20:2b:a2:2a:d2:c6:6c:d9:16:c8:ae:76:
                    bd:72:53:5e:0f:b6:a2:b2:be:dd:25:f0:2e:fd:94:
                    e5:9b:de:d8:39:bb:21:da:ff:bc:8f:3c:28:4c:00:
                    35:76:66:c6:3c:2d:58:40:c8:c8:5b:25:45:a7:82:
                    66:93:d7:4a:f8:6e:1f:21:0b:3d:41:7d:73:47:88:
                    eb:41:53:47:30:9c:9e:eb:1e:f9:6c:29:c6:be:40:
                    b6:e3:e2:4e:8d:be:22:cb:d4:e3:0f:37:d0:cf:f1:
                    56:41:af:58:79:49:12:31:3c:90:55:2f:f3:98:f9:
                    70:02:c1:ca:9c:43:f5:ed:c6:a6:c7:ca:46:45:41:
                    82:6d:f4:92:8a:63:34:b3:ba:ca:af:12:6e:e8:48:
                    cd:5c:ee:7b:e0:7b:26:7f:f9:9e:df:d3:1f:c7:42:
                    c5:3a:c4:08:de:bb:63:02:a5:6d:83:18:b3:05:67:
                    3b:31:45:21:fe:ed:4c:30:84:5f:e8:5c:25:54:9b:
                    d5:13:c9:95:bb:d7:4d:4c:47:a2:c3:c9:3d:0c:22:
                    ed:e6:2b:45:8b:8d:2d:7f:d2:bb:77:50:25:50:62:
                    0a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C1:A5:4F:31:D3:C4:C5:F7:2E:CC:A4:C8:8C:78:25:63:79:B1:60
            X509v3 Authority Key Identifier:
                keyid:0A:2D:D6:95:9E:A5:74:B2:3A:04:87:BA:53:4C:69:9E:4A:C4:21:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/0A2DD6959EA574B23A0487BA534C699E4AC421C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DD6959EA574B23A0487BA534C699E4AC421C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/323830343a363434633a3a2f33332d3333203d3e20323639343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:644c::/33

    Signature Algorithm: sha256WithRSAEncryption
         73:dc:a5:e4:38:71:f0:b2:aa:f4:7f:69:ca:5a:83:c7:f3:43:
         58:5f:ed:fa:0f:3f:e5:bb:7d:1e:7c:c2:71:bf:47:a7:80:94:
         20:98:1e:d5:e7:b1:2e:cd:dc:6a:47:a7:18:87:f0:bc:d8:57:
         7a:6f:6b:07:ab:41:a9:f7:92:b8:c6:09:5a:4a:85:b2:2e:00:
         1e:ba:73:99:b4:84:f3:0b:6d:a8:69:f8:b6:98:18:b1:ad:8a:
         0c:9e:96:0c:f6:c6:8b:5a:d7:da:05:a0:66:92:eb:af:73:82:
         02:db:94:a9:46:e3:48:90:88:81:35:c3:83:fc:80:fa:f6:98:
         36:cb:d1:f4:12:02:e3:bd:6a:f8:17:51:26:a0:84:83:e5:a2:
         46:59:c7:32:1d:63:2e:9d:5e:8d:f6:c2:dd:c6:34:c1:16:4b:
         3c:3a:c4:ff:71:7f:96:57:7e:f7:7c:f1:2a:b4:b0:fc:fd:6b:
         0d:fe:d7:c5:62:c5:2f:44:c8:45:26:22:79:c7:e2:2f:9c:6a:
         cb:2d:05:a8:c9:56:34:9a:01:8c:60:94:cf:ec:33:ad:d4:d2:
         3f:51:8b:79:df:65:43:6b:9f:39:64:57:d8:4c:73:5a:06:87:
         d8:c2:b7:3a:15:06:96:51:d8:0d:93:eb:42:e4:b0:06:ae:b1:
         43:bb:86:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:49:40 2025 by rpki-client