Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/323830343a386534633a3a2f33322d3332203d3e20323733343136.roa
File:                     323830343a386534633a3a2f33322d3332203d3e20323733343136.roa (raw, json)
Hash identifier:          eDcOT/GBjtjvifiiYvrGQfeFi4lEMY/cQrBPCx164DY=
Subject key identifier:   1D:50:72:79:52:72:32:A7:0F:2C:94:5E:C0:28:63:96:74:DA:52:18
Certificate issuer:       /CN=6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60
Certificate serial:       76AFDBC93B8845F650113D119821F47E778AE755
Authority key identifier: 6E:37:DA:E4:C0:7E:1D:4A:A9:1D:9E:35:9D:CD:8A:23:C1:7E:8D:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/323830343a386534633a3a2f33322d3332203d3e20323733343136.roa
Signing time:             Wed 23 Jul 2025 18:59:06 +0000
ROA not before:           Wed 23 Jul 2025 18:54:06 +0000
ROA not after:            Wed 22 Jul 2026 18:59:06 +0000
asID:                     273416
IP address blocks:        2804:8e4c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60.crl
                          rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 16:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:af:db:c9:3b:88:45:f6:50:11:3d:11:98:21:f4:7e:77:8a:e7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60
        Validity
            Not Before: Jul 23 18:54:06 2025 GMT
            Not After : Jul 22 18:59:06 2026 GMT
        Subject: CN=1D507279527232A70F2C945EC028639674DA5218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:db:b5:54:79:35:fb:b6:f3:08:ae:d9:b3:66:
                    9a:4d:e8:9e:94:17:0d:47:b7:86:48:a2:b2:f4:8b:
                    41:ea:50:0f:75:82:4a:2a:f5:89:92:6b:6b:9c:50:
                    4d:dc:a4:e0:87:e3:d4:d2:46:7a:45:a6:84:1b:30:
                    9a:fa:bb:66:d6:4d:e3:86:ad:5d:e9:4c:b8:08:a9:
                    1a:5b:d9:e9:a9:1d:cb:aa:7a:af:2a:14:f9:15:e8:
                    99:16:ba:be:e3:3b:85:0a:82:75:3d:d0:1b:c2:6f:
                    7a:f6:ea:ea:67:b4:8a:71:aa:80:95:56:d6:1c:ef:
                    d8:1a:eb:03:d3:64:d0:fc:8f:54:62:f4:03:32:18:
                    bd:a8:75:21:a1:e6:81:46:50:34:0e:da:4a:c7:cc:
                    33:3d:5d:51:82:b4:4b:41:7d:17:0c:ec:34:41:7b:
                    6d:17:ec:82:44:e3:5e:07:43:80:6c:53:d4:61:a3:
                    f1:16:59:cb:7b:c6:d4:50:3b:09:00:ea:81:c5:80:
                    21:40:8e:1d:bc:bc:19:9b:2c:bd:24:94:72:fd:27:
                    17:1d:01:71:95:60:e7:ff:00:60:91:27:9e:ca:b2:
                    58:75:ad:f9:51:1c:74:eb:99:4d:f7:b9:5f:c7:12:
                    94:5a:58:f9:b2:a6:0d:c1:4a:ba:cb:3e:1a:6a:e0:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:50:72:79:52:72:32:A7:0F:2C:94:5E:C0:28:63:96:74:DA:52:18
            X509v3 Authority Key Identifier:
                keyid:6E:37:DA:E4:C0:7E:1D:4A:A9:1D:9E:35:9D:CD:8A:23:C1:7E:8D:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E37DAE4C07E1D4AA91D9E359DCD8A23C17E8D60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/323830343a386534633a3a2f33322d3332203d3e20323733343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:8d:be:02:d5:9d:d6:99:03:29:13:fa:be:8e:0d:6e:57:51:
         45:6e:f8:f8:1d:97:3d:8d:eb:34:30:bb:c8:13:c8:b0:6b:c2:
         f5:8f:df:ec:70:3f:a1:cc:25:97:af:45:72:dc:cc:57:a5:a7:
         b8:c9:32:d0:27:13:26:0c:0d:14:eb:85:6a:f3:9e:17:5b:ed:
         ed:04:34:fc:c9:f7:80:22:8d:ea:96:ba:10:7a:50:6f:b1:62:
         3a:32:03:09:7a:8a:84:02:5c:43:ce:60:7a:f4:4b:f9:52:09:
         29:81:19:f9:52:98:9a:58:e9:ec:e7:82:fc:1c:25:79:fd:50:
         93:11:45:4a:5f:a6:78:8c:11:45:b5:53:bd:fc:c2:48:5e:dd:
         ea:b9:0b:3e:6b:39:90:c2:59:24:a4:4d:9a:a5:09:64:92:37:
         07:a7:a4:66:00:bc:de:a3:ab:1c:b8:5e:ac:43:cc:81:d6:69:
         08:a1:b5:fe:dd:f0:36:3a:71:c0:b9:12:9e:b8:ca:3e:09:2d:
         5f:8e:e8:4e:58:f7:88:29:03:23:c1:68:fc:ce:71:9a:ab:bc:
         35:d4:57:a3:f2:dc:f0:52:2f:0b:c7:09:58:bb:c3:90:55:b1:
         12:43:03:dc:e7:63:7f:34:a5:2d:ea:79:13:32:6a:01:a4:d7:
         f2:8e:a2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:31:52 2025 by rpki-client