Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a3a2f33322d3332203d3e20323635313431.roa
File:                     323830343a326233383a3a2f33322d3332203d3e20323635313431.roa (raw, json)
Hash identifier:          sdBrwDl9ZvbzgKzCKK3D0SMxTR8slv067C5S11ppiPU=
Subject key identifier:   5E:30:A3:BE:54:81:87:CA:B1:1B:42:66:A5:9F:1B:98:C2:5E:9A:8E
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       4788F269D246B964630A034D9578B9E8DE76979E
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a3a2f33322d3332203d3e20323635313431.roa
Signing time:             Mon 26 May 2025 18:28:46 +0000
ROA not before:           Mon 26 May 2025 18:23:46 +0000
ROA not after:            Mon 25 May 2026 18:28:46 +0000
asID:                     265141
IP address blocks:        2804:2b38::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 23:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:88:f2:69:d2:46:b9:64:63:0a:03:4d:95:78:b9:e8:de:76:97:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: May 26 18:23:46 2025 GMT
            Not After : May 25 18:28:46 2026 GMT
        Subject: CN=5E30A3BE548187CAB11B4266A59F1B98C25E9A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:be:6e:66:31:f4:6d:92:50:d3:6b:0b:c2:15:
                    37:58:31:60:2d:55:4b:70:26:09:50:17:da:09:dd:
                    48:b9:47:3e:53:1e:1b:96:25:44:0a:ce:14:53:79:
                    b1:58:5d:22:13:49:cb:e7:ef:9b:e0:0c:0a:77:1c:
                    15:25:9e:7f:a9:f0:dc:24:35:8c:2e:96:f7:71:38:
                    f3:4f:35:62:2e:07:80:e6:8e:81:a1:28:be:65:37:
                    ca:6f:25:10:99:ab:3d:2a:87:13:9c:ca:52:9b:c4:
                    b7:ee:9c:c8:9e:9d:40:40:c1:ea:a4:2b:a8:97:8f:
                    f5:71:ad:52:3a:50:1e:3e:42:2e:8b:32:93:70:bd:
                    38:4e:64:6a:af:a1:80:59:e6:9e:11:f9:6f:ea:13:
                    87:5c:28:06:fb:9a:84:22:16:47:19:80:33:53:17:
                    6d:ee:fa:50:18:e9:e5:d7:37:70:cf:01:9f:46:da:
                    ba:d3:57:c5:e5:e8:12:53:dd:28:79:9d:bf:18:7f:
                    5c:89:d9:6d:ac:2a:e7:1d:23:7b:6d:f1:c2:cf:9b:
                    4a:c2:a0:4e:1c:05:fd:96:71:48:fc:d3:1e:c0:a2:
                    9d:d9:5e:3d:b2:45:c6:f3:e0:8e:0d:b0:ef:40:1f:
                    92:70:75:1b:e4:5d:48:4d:8c:88:a6:a5:ef:6c:4b:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:30:A3:BE:54:81:87:CA:B1:1B:42:66:A5:9F:1B:98:C2:5E:9A:8E
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a3a2f33322d3332203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:67:18:83:d5:e6:42:f3:98:87:68:bb:99:e9:9a:95:d1:
         42:f3:1a:a7:51:cc:5d:cb:22:e4:33:fd:36:f8:2e:a8:24:ff:
         36:ef:f2:e4:79:f2:14:fe:ee:06:7f:f1:f1:07:c9:87:9d:c6:
         a2:59:1b:30:ef:dc:d0:26:10:82:40:d0:77:a0:d6:92:80:4a:
         ce:cf:98:00:91:06:16:52:05:8f:fe:a2:dd:67:25:36:1b:be:
         39:27:91:bc:81:af:e4:6e:00:58:18:78:34:17:a0:1e:17:cd:
         ee:b6:f0:50:56:64:e4:dc:ff:f3:d0:f1:36:04:f1:25:95:ca:
         d0:ab:27:f6:7c:f9:60:9b:2d:e5:72:45:dd:f7:83:34:73:cd:
         b4:aa:f1:6d:1b:6e:bd:8e:29:1d:8e:a0:d6:35:0f:c1:06:13:
         93:74:0d:e3:1f:80:ef:9e:5d:2d:87:3f:5c:4b:53:78:fe:15:
         23:d2:c4:3d:ee:28:50:6b:ad:22:e2:3c:30:f5:05:ac:2b:33:
         39:f0:cb:ae:b2:e3:10:20:bd:6e:24:92:65:3f:7d:38:86:d3:
         1b:56:d7:1a:5f:16:44:13:4d:22:01:27:62:28:e7:96:00:2a:
         33:4f:8b:df:10:a9:76:d6:c0:9c:c4:81:91:e2:f8:fa:ec:53:
         7d:2a:b5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:33:17 2025 by rpki-client