Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d313238203d3e20323635343832.roa
File:                     323830343a333464303a3a2f33322d313238203d3e20323635343832.roa (raw, json)
Hash identifier:          Rm51naI0CND5zfoO2x5K+zXY1GlKZLxxaJaqhKYWb+I=
Subject key identifier:   17:4E:55:92:57:A6:34:D0:89:5A:04:94:96:20:75:33:2F:8F:FA:38
Certificate issuer:       /CN=D2D855C633051A76487A82C1ED0DB587A18CF1C9
Certificate serial:       6104AE44095F410E38FAB24D8CD1EDF76887D6EB
Authority key identifier: D2:D8:55:C6:33:05:1A:76:48:7A:82:C1:ED:0D:B5:87:A1:8C:F1:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D855C633051A76487A82C1ED0DB587A18CF1C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d313238203d3e20323635343832.roa
Signing time:             Fri 11 Jul 2025 17:42:39 +0000
ROA not before:           Fri 11 Jul 2025 17:37:39 +0000
ROA not after:            Fri 10 Jul 2026 17:42:39 +0000
asID:                     265482
IP address blocks:        2804:34d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/D2D855C633051A76487A82C1ED0DB587A18CF1C9.crl
                          rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/D2D855C633051A76487A82C1ED0DB587A18CF1C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D855C633051A76487A82C1ED0DB587A18CF1C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 21:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:04:ae:44:09:5f:41:0e:38:fa:b2:4d:8c:d1:ed:f7:68:87:d6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D855C633051A76487A82C1ED0DB587A18CF1C9
        Validity
            Not Before: Jul 11 17:37:39 2025 GMT
            Not After : Jul 10 17:42:39 2026 GMT
        Subject: CN=174E559257A634D0895A0494962075332F8FFA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:bd:44:e2:8f:1f:ac:95:a0:a7:40:bf:c6:
                    3e:7c:18:7d:aa:fb:83:57:b8:bc:44:26:00:31:29:
                    79:73:1d:c6:9d:c1:c1:e8:97:2c:a6:fb:39:3f:81:
                    c4:f9:51:6b:39:af:73:18:92:44:d7:8d:f3:d6:1b:
                    b5:2e:76:4d:80:4a:74:6f:5e:fb:99:33:3a:6a:46:
                    0d:37:fc:81:05:32:87:73:f4:75:8c:aa:d0:51:1e:
                    64:ba:30:ae:e9:62:63:0a:31:cb:b9:db:cb:35:01:
                    10:10:54:ac:d2:fe:28:b1:f4:a1:ae:4f:4e:bc:8f:
                    2b:9b:de:da:77:8d:d3:32:33:92:01:48:bc:6e:be:
                    8b:ab:56:87:db:55:19:28:ed:0a:ff:b1:4f:0f:5d:
                    38:b7:49:65:c9:bf:58:01:40:74:79:81:db:ad:48:
                    31:9a:66:6f:1b:c2:39:6e:bd:35:b1:e4:9c:a7:bc:
                    bb:3f:e9:aa:72:05:01:4c:82:8e:37:53:2a:32:3c:
                    dd:de:27:64:c9:3a:3d:b1:db:60:ce:b8:39:e1:2f:
                    66:97:44:19:c5:9a:f4:a4:e7:7d:32:ee:b2:83:67:
                    c0:5f:76:8f:1a:17:df:88:b6:11:54:5b:ed:66:be:
                    5f:97:90:0e:3e:5d:98:2c:89:78:58:a3:9d:a7:1f:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4E:55:92:57:A6:34:D0:89:5A:04:94:96:20:75:33:2F:8F:FA:38
            X509v3 Authority Key Identifier:
                keyid:D2:D8:55:C6:33:05:1A:76:48:7A:82:C1:ED:0D:B5:87:A1:8C:F1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/D2D855C633051A76487A82C1ED0DB587A18CF1C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D855C633051A76487A82C1ED0DB587A18CF1C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d313238203d3e20323635343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:ce:a4:63:1a:43:cf:d6:03:a6:9d:89:9f:85:62:a5:6f:4c:
         7a:a1:a3:9e:a0:52:e7:4f:f0:a6:c5:84:55:d7:36:aa:7a:0e:
         3e:55:2e:64:71:9b:96:21:b5:e2:1c:d2:6d:f6:82:0d:ec:51:
         2c:59:a0:54:05:e5:b4:4d:54:a6:18:1c:bd:b5:7f:da:33:32:
         38:70:04:dc:cc:7d:51:79:59:7f:8a:3a:39:99:11:69:63:8f:
         25:90:ae:8a:03:2b:e5:33:46:fb:06:1e:df:04:b2:31:24:ec:
         66:6f:cb:b7:49:24:65:8d:21:40:a9:37:a2:9d:79:6f:42:5d:
         be:62:1a:dd:24:97:bc:11:54:93:95:a2:b6:43:d0:fc:62:b5:
         79:da:b7:7c:9d:6e:59:66:5d:0d:b8:a7:1b:af:6f:de:27:12:
         fa:49:4c:45:bf:69:40:36:a9:b9:ff:a8:71:96:3f:be:45:89:
         29:3d:9c:99:bd:fe:48:2f:0b:e3:c2:eb:33:b4:89:c7:9b:d0:
         51:9d:a5:64:47:37:c6:b0:c7:fc:58:d4:27:86:71:c6:27:1a:
         d8:4e:f3:18:29:3d:57:9c:d6:b3:cb:bd:35:b7:90:8a:49:1d:
         f6:ab:41:dd:b0:d2:dc:8c:9b:ce:34:b5:77:c4:90:cc:ee:b2:
         78:10:1f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:43:34 2025 by rpki-client