Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/323830343a346135343a3a2f33322d3334203d3e20323637323333.roa
File:                     323830343a346135343a3a2f33322d3334203d3e20323637323333.roa (raw, json)
Hash identifier:          3n8ENkztFfxpvE7GwXFFfYqL0jE2xhkB9eACs2OHuMY=
Subject key identifier:   B4:0C:56:B8:AA:E3:CD:57:0C:D3:53:16:90:97:1C:B3:15:74:B8:70
Certificate issuer:       /CN=B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1
Certificate serial:       72B5675D6A168BB17E8B8EC0BEC31CBE86B490AA
Authority key identifier: B6:B4:63:A8:37:3A:B0:F3:B6:F6:06:01:FD:AD:D7:3F:2B:30:DE:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/323830343a346135343a3a2f33322d3334203d3e20323637323333.roa
Signing time:             Tue 08 Jul 2025 14:22:08 +0000
ROA not before:           Tue 08 Jul 2025 14:17:08 +0000
ROA not after:            Tue 07 Jul 2026 14:22:08 +0000
asID:                     267233
IP address blocks:        2804:4a54::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1.crl
                          rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b5:67:5d:6a:16:8b:b1:7e:8b:8e:c0:be:c3:1c:be:86:b4:90:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1
        Validity
            Not Before: Jul  8 14:17:08 2025 GMT
            Not After : Jul  7 14:22:08 2026 GMT
        Subject: CN=B40C56B8AAE3CD570CD3531690971CB31574B870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:f1:f2:83:bc:9d:a6:60:53:69:99:e6:80:
                    58:03:ca:01:2f:3d:86:fc:dc:73:81:0e:d6:c2:87:
                    22:e7:a0:f7:5e:6f:d0:73:43:7a:27:65:58:90:03:
                    f1:18:dd:d0:73:12:15:38:fe:cf:68:c7:b6:24:43:
                    bc:a8:6a:d8:9f:25:ba:02:f4:aa:0e:f8:8b:20:fd:
                    88:04:86:00:b6:09:26:98:95:2f:66:97:f2:fe:5e:
                    51:9d:60:76:fa:31:20:91:71:3f:39:5e:6f:d0:c7:
                    c3:0a:9d:70:91:27:79:1e:f7:9e:f8:90:08:bc:1e:
                    ea:ab:5a:38:60:4d:60:75:ac:33:cf:6c:87:77:11:
                    ba:34:54:fd:80:47:c4:d9:97:a1:01:fc:1c:83:a0:
                    f2:16:c3:8d:d2:e9:22:fe:46:09:72:85:ed:39:81:
                    2d:ba:78:80:d4:b2:06:5a:4d:b0:b1:68:7e:b3:48:
                    c6:3c:b3:55:da:ef:39:75:bf:82:aa:67:c1:5b:4f:
                    84:4c:ac:b2:40:54:83:8a:56:67:3a:1a:25:06:81:
                    64:42:37:0c:c4:74:99:82:b2:a0:5a:3c:c2:e8:ec:
                    7a:e2:c9:33:04:9e:48:86:b8:ea:8d:8d:1d:95:d2:
                    94:b3:9e:09:11:12:84:2d:df:0e:c8:08:19:19:69:
                    a8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0C:56:B8:AA:E3:CD:57:0C:D3:53:16:90:97:1C:B3:15:74:B8:70
            X509v3 Authority Key Identifier:
                keyid:B6:B4:63:A8:37:3A:B0:F3:B6:F6:06:01:FD:AD:D7:3F:2B:30:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/323830343a346135343a3a2f33322d3334203d3e20323637323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a54::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:6e:31:0b:13:58:a7:45:bb:72:26:63:93:97:12:78:fe:7a:
         2f:c1:3e:24:db:5e:1f:95:86:05:a1:d7:59:10:08:4c:a2:22:
         a6:56:b7:f3:ab:c1:4c:a7:a7:1a:6e:a3:45:b7:9a:5e:c4:69:
         cc:0e:09:42:1f:aa:3b:87:74:6a:e8:5a:11:8f:10:c2:ea:2f:
         47:1c:62:5d:11:19:84:f9:6f:07:f0:5b:bb:7c:ca:9e:e7:fe:
         ad:9c:32:2b:0f:33:a8:6a:43:5c:ef:9c:b8:ed:99:b7:83:ff:
         54:ef:3b:4a:3c:10:39:b5:b9:42:ca:77:67:e7:81:5c:6f:12:
         1a:f2:60:c1:0f:67:7b:13:f3:1c:06:04:e3:12:ea:a2:ef:83:
         b1:ca:69:58:4a:70:ca:ac:03:ff:78:26:07:6e:56:3d:59:8c:
         84:9e:e9:97:c0:8d:b4:e3:3c:a5:93:61:de:64:8f:a5:6c:fc:
         b8:99:00:f7:36:ed:da:fc:3e:88:a9:1b:95:2d:c0:ba:ad:f1:
         df:ab:ae:ca:6d:0a:06:95:07:8b:be:84:e3:34:9c:12:2c:fd:
         1c:85:20:f4:11:36:7c:3d:7f:27:76:be:7c:d3:8f:31:3c:d6:
         c2:1a:44:bf:89:da:13:f0:d0:aa:c5:f4:d1:3c:56:33:3c:9c:
         72:38:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:53:36 2025 by rpki-client