Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a343366343a3a2f33322d3438203d3e20323637363031.roa
File:                     323830343a343366343a3a2f33322d3438203d3e20323637363031.roa (raw, json)
Hash identifier:          bloyVjqU1jt/XZRwos2ERWhczUqY58qGeWl2CoT1WJg=
Subject key identifier:   01:0A:AE:47:7C:FC:8D:56:1A:FF:2F:1E:06:FA:59:81:ED:34:B2:FE
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       0A709C20D1D5A847A0543751C49FC6DC40C537C7
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a343366343a3a2f33322d3438203d3e20323637363031.roa
Signing time:             Fri 18 Jul 2025 01:32:53 +0000
ROA not before:           Fri 18 Jul 2025 01:27:53 +0000
ROA not after:            Fri 17 Jul 2026 01:32:53 +0000
asID:                     267601
IP address blocks:        2804:43f4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 13:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:70:9c:20:d1:d5:a8:47:a0:54:37:51:c4:9f:c6:dc:40:c5:37:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Jul 18 01:27:53 2025 GMT
            Not After : Jul 17 01:32:53 2026 GMT
        Subject: CN=010AAE477CFC8D561AFF2F1E06FA5981ED34B2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:43:9c:66:e0:06:57:65:46:8d:d1:92:8f:
                    de:e8:de:01:9b:f5:98:44:fa:cd:5d:bd:1c:9e:7e:
                    a1:90:ba:46:37:80:68:d6:bf:f7:fb:01:ff:c6:df:
                    53:a0:0a:48:37:d2:0c:7d:78:00:f4:29:bd:81:d3:
                    c1:dd:4f:79:d9:21:4b:b3:52:3e:59:99:3a:35:51:
                    4a:a4:83:1a:89:49:36:2d:d7:4b:f3:36:37:0e:e2:
                    44:7d:75:77:c1:09:be:5d:75:50:dc:3b:5c:f0:94:
                    ba:8d:32:fc:73:64:33:5e:6c:8e:78:ab:4f:db:79:
                    d3:38:f8:42:8c:75:56:a1:79:5c:c7:b4:f6:88:14:
                    bb:ba:b9:d3:95:ab:06:2e:9e:63:60:12:83:fe:46:
                    e3:24:aa:63:79:58:35:d7:87:cd:1f:02:91:11:c4:
                    66:b0:9c:be:5a:75:e2:17:a5:77:39:97:77:7d:18:
                    ec:8b:26:b2:b3:e4:51:0a:92:56:9a:a1:9a:d4:50:
                    63:a7:46:82:76:fe:a4:4e:62:d3:68:4b:61:cd:9e:
                    be:7a:d6:1d:07:59:e2:2e:fd:12:e6:f1:35:6d:f7:
                    6a:18:7f:58:5c:d1:3b:4f:d9:0e:dd:1a:40:1c:28:
                    50:7c:f2:2d:bf:b1:74:0c:11:ed:7a:4a:dd:9c:43:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0A:AE:47:7C:FC:8D:56:1A:FF:2F:1E:06:FA:59:81:ED:34:B2:FE
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a343366343a3a2f33322d3438203d3e20323637363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:0c:90:c7:ba:55:26:8d:5b:f2:48:b2:2a:34:0a:5f:d2:28:
         bb:9b:37:0b:d2:08:77:6d:74:49:9b:6f:a1:00:93:58:80:7d:
         78:39:e4:72:43:af:b4:49:6c:3e:07:43:84:6b:29:7b:d2:6f:
         aa:f4:17:4c:e8:d0:2b:be:db:ef:01:d4:45:c4:3e:b9:ff:8e:
         13:d4:64:8f:fc:41:d5:8d:e1:7c:db:44:e0:d5:d8:00:1e:e3:
         b0:e7:42:65:08:0b:b4:da:1d:ca:a2:2f:6e:eb:a3:44:cc:b6:
         62:c1:c3:ab:38:99:bc:d3:19:18:a6:73:78:66:df:2c:12:08:
         67:5b:57:96:f3:ca:94:04:a4:cc:13:d6:66:0c:6b:93:de:ae:
         e0:b1:03:4b:45:c4:b4:bb:17:d9:48:b0:37:63:fc:d5:56:e0:
         c2:2e:52:c0:d7:5b:54:2a:b1:57:b4:3e:ee:f3:b1:61:fe:66:
         ff:15:2f:d8:67:49:af:48:ae:d5:6a:e7:62:bc:7f:ae:19:e6:
         71:97:ea:e5:a1:01:94:f1:b9:3d:3d:4d:0c:d2:c2:8b:f0:bf:
         99:88:52:8f:97:b3:0f:58:14:39:4f:f3:c1:94:b6:7d:1a:e8:
         b0:18:e0:72:6b:46:62:cb:37:fb:77:e0:e0:e5:bf:53:59:01:
         86:ed:85:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:39:25 2025 by rpki-client