Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/323830343a343635383a3a2f33322d3333203d3e20323636393834.roa
File:                     323830343a343635383a3a2f33322d3333203d3e20323636393834.roa (raw, json)
Hash identifier:          bP673OKqqaZ92W7foDGJZuQnld+9A+sBfOeZCWz3ZXo=
Subject key identifier:   A6:EF:6E:6C:3A:F3:D4:74:86:A2:1E:DD:51:D6:02:EF:01:4F:CB:DA
Certificate issuer:       /CN=41107F8D71D8B83AE0B9185D5C53CC2EE346B47B
Certificate serial:       247D661229F3F884EF846B1A9C5306449AED5666
Authority key identifier: 41:10:7F:8D:71:D8:B8:3A:E0:B9:18:5D:5C:53:CC:2E:E3:46:B4:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/323830343a343635383a3a2f33322d3333203d3e20323636393834.roa
Signing time:             Thu 03 Jul 2025 20:53:09 +0000
ROA not before:           Thu 03 Jul 2025 20:48:09 +0000
ROA not after:            Thu 02 Jul 2026 20:53:09 +0000
asID:                     266984
IP address blocks:        2804:4658::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.crl
                          rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7d:66:12:29:f3:f8:84:ef:84:6b:1a:9c:53:06:44:9a:ed:56:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41107F8D71D8B83AE0B9185D5C53CC2EE346B47B
        Validity
            Not Before: Jul  3 20:48:09 2025 GMT
            Not After : Jul  2 20:53:09 2026 GMT
        Subject: CN=A6EF6E6C3AF3D47486A21EDD51D602EF014FCBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d5:2e:10:2f:21:13:2a:37:ec:30:02:a9:4c:
                    f4:ba:6f:b9:1a:30:8e:38:8d:3f:5f:9e:d4:67:7a:
                    f0:89:d4:90:ad:2f:a6:6e:74:5c:41:ae:bb:2c:fa:
                    e8:63:f6:07:2e:04:0e:28:12:f6:62:11:69:f2:df:
                    b6:b8:55:f3:4c:3e:a2:89:98:0e:49:9b:01:7e:96:
                    86:66:85:f7:46:8b:a7:04:7e:e8:49:82:d2:a2:2c:
                    95:45:b7:4c:fe:6b:01:82:b8:26:0e:b5:67:b2:b2:
                    1c:72:13:9f:f0:9e:a2:bf:d0:af:8c:41:9b:52:7b:
                    bc:3e:44:66:b3:68:5f:de:4d:db:18:93:54:72:58:
                    96:f4:2f:94:1f:4e:06:f1:9d:ab:46:03:b1:a7:3e:
                    e2:cd:52:fc:ad:39:f6:b3:87:6b:2c:fc:0d:6a:cd:
                    5e:6a:0b:86:5a:be:f6:a5:04:73:17:bb:1a:c0:94:
                    d5:5c:55:5e:fe:b2:f6:5b:b7:a0:5f:3f:69:55:9d:
                    26:9a:64:b0:d3:1d:ee:1c:70:2c:5b:d0:70:fc:13:
                    b9:6a:5b:9b:a3:06:aa:0a:3e:0f:43:a7:3c:9d:f5:
                    fc:5a:58:38:66:87:fa:3e:40:1a:73:b2:5f:c8:0d:
                    e7:2a:57:6d:f0:2f:40:87:5e:df:21:4d:e9:c8:23:
                    46:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EF:6E:6C:3A:F3:D4:74:86:A2:1E:DD:51:D6:02:EF:01:4F:CB:DA
            X509v3 Authority Key Identifier:
                keyid:41:10:7F:8D:71:D8:B8:3A:E0:B9:18:5D:5C:53:CC:2E:E3:46:B4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/323830343a343635383a3a2f33322d3333203d3e20323636393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4658::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:16:91:6f:75:7a:cb:35:5b:96:9d:bb:48:e3:ae:42:23:92:
         8d:94:72:28:74:cc:f0:4d:8d:af:0e:48:70:47:b7:30:66:bd:
         e4:47:78:27:94:9a:51:9a:be:cc:08:cc:4e:b9:0b:13:2e:60:
         ef:31:e8:5f:4b:bb:3c:4d:b1:42:b3:7e:6c:5f:33:f2:09:ea:
         02:e3:0d:3d:d6:ce:a2:b8:a0:11:b6:df:25:a9:d8:c5:02:d7:
         2b:6a:1c:db:c2:86:80:a3:21:f0:04:3b:aa:c4:2a:fb:a2:16:
         21:ed:62:63:47:e2:4b:44:9b:58:22:03:47:a2:2b:74:92:5b:
         8a:14:7f:c5:e2:39:a7:57:12:62:ef:07:a6:ef:6b:8f:a3:50:
         c0:b5:16:39:85:05:27:cf:b5:d8:02:09:ee:fb:e9:c7:6f:68:
         40:10:87:3f:0c:64:22:2d:15:29:5d:86:7a:54:12:01:39:3d:
         84:64:33:83:8b:a4:17:f9:2e:7b:2f:ea:57:d3:e5:c3:6d:5b:
         42:9a:d3:20:2e:71:1e:49:16:bc:26:8c:77:35:e7:9b:fd:72:
         2e:e0:99:94:ee:72:09:49:4a:a4:7c:51:2c:0d:db:17:9a:f6:
         c4:2f:f6:86:ad:49:f0:63:f3:dc:89:71:a6:64:c7:25:14:14:
         62:dc:46:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:11:14 2025 by rpki-client