Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a3a2f33322d3332203d3e20323731333637.roa
File:                     323830343a376136303a3a2f33322d3332203d3e20323731333637.roa (raw, json)
Hash identifier:          qRohoeNnKNf6cv7/p17nFmOIRtNgNQ2ZfmHXIaZ+ebE=
Subject key identifier:   08:92:32:B7:0B:B6:72:E0:2B:08:62:E9:E5:2C:5B:12:E3:0F:36:7C
Certificate issuer:       /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
Certificate serial:       4FF260EFF5B672E72F1F2C995FAB3D37CAFD2022
Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a3a2f33322d3332203d3e20323731333637.roa
Signing time:             Sat 12 Jul 2025 16:47:40 +0000
ROA not before:           Sat 12 Jul 2025 16:42:40 +0000
ROA not after:            Sat 11 Jul 2026 16:47:40 +0000
asID:                     271367
IP address blocks:        2804:7a60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl
                          rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 00:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f2:60:ef:f5:b6:72:e7:2f:1f:2c:99:5f:ab:3d:37:ca:fd:20:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
        Validity
            Not Before: Jul 12 16:42:40 2025 GMT
            Not After : Jul 11 16:47:40 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:6d:7d:9d:1d:c4:f5:00:98:8a:e6:df:6c:
                    12:de:04:9e:56:72:5c:ca:94:dc:c7:dd:06:a8:20:
                    e6:be:bd:04:f4:b3:8a:29:6b:b3:1c:2c:16:31:10:
                    7e:67:52:8f:64:18:60:a4:aa:48:b0:92:7d:e1:29:
                    03:c4:14:de:9b:ba:93:ec:39:6d:8a:28:eb:d5:f7:
                    b0:30:e2:3d:f5:75:33:4f:bd:ac:19:1c:78:c9:8b:
                    5a:b4:04:cb:46:cd:8c:c3:92:dc:1a:cc:f9:06:e1:
                    55:55:35:1d:1b:ba:6f:01:48:94:1a:7a:60:be:5b:
                    37:bb:54:51:88:0f:f8:83:f9:a1:29:ce:9a:f9:d1:
                    d8:5e:dc:af:f3:03:90:1f:70:37:54:aa:5c:b5:1a:
                    06:13:66:25:c2:de:14:85:53:90:f3:7d:74:01:d6:
                    cd:85:bd:fc:47:6b:f1:b4:bd:45:0a:0f:1a:1e:37:
                    39:65:35:b3:13:cc:34:5c:1d:a9:b0:a7:29:65:bb:
                    47:22:16:48:be:73:a8:59:9a:2d:70:22:a5:78:fc:
                    78:dc:00:9d:4f:cd:2f:16:a7:17:18:40:78:87:0f:
                    45:de:e0:14:5a:ba:bc:a9:66:f4:7a:22:1f:21:61:
                    9d:69:fc:2a:59:6f:b1:9d:5d:15:fe:b7:01:f9:da:
                    38:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:92:32:B7:0B:B6:72:E0:2B:08:62:E9:E5:2C:5B:12:E3:0F:36:7C
            X509v3 Authority Key Identifier:
                keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a3a2f33322d3332203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:b7:bb:18:86:61:fc:99:02:f8:3f:55:d2:c4:8a:ac:9a:43:
         0e:e4:26:0c:80:9c:24:ca:93:5a:a0:53:8c:5b:82:06:77:c7:
         8d:0a:2c:d3:d7:6b:59:0d:96:fb:11:0d:7a:f3:d2:9d:09:a3:
         62:43:10:90:df:96:73:50:57:c9:2c:04:f9:ed:05:a3:1e:93:
         98:dd:e4:71:09:cf:2e:21:d4:04:e2:f8:3f:b4:47:b0:56:95:
         73:f6:bf:47:f2:fe:57:24:01:a2:cb:c2:b0:81:50:5d:01:14:
         62:ef:2a:24:93:5e:9b:55:8c:05:86:2a:1e:8e:b5:b1:34:b5:
         e6:88:29:57:ca:18:d0:c5:1b:da:e8:83:f3:ca:64:bf:ea:70:
         df:5a:43:82:3a:be:11:13:cd:6f:df:81:89:7e:bf:7c:88:b8:
         cd:73:ca:94:34:37:68:b4:27:b5:8e:18:23:26:3a:af:91:7d:
         fe:93:cc:6f:0d:62:1b:fb:eb:1a:00:39:0c:97:3f:31:71:3f:
         59:94:42:3c:2d:dc:f7:ef:e1:12:3f:53:0a:b6:66:be:42:84:
         c8:70:ab:9d:8b:33:58:04:8c:dd:d0:ca:d0:01:eb:07:2f:34:
         d4:22:56:fd:e1:27:05:8f:8f:b3:55:b8:a5:ab:8a:d7:9c:ec:
         6f:d8:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:14:51 2025 by rpki-client