Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a633030303a3a2f33352d3335203d3e20323636353635.roa
File:                     323830343a336466343a633030303a3a2f33352d3335203d3e20323636353635.roa (raw, json)
Hash identifier:          7bzZhjrSqaKdeu37eceKQk1zasPnAQv08ca0oeG/LRE=
Subject key identifier:   87:02:E7:8E:5D:6F:D5:9D:78:1F:E6:65:57:5C:0B:44:57:84:EC:74
Certificate issuer:       /CN=8D2922D358225395ABA691BA6723BAA778294D49
Certificate serial:       0542E13C40D495BE1D27888C7FF82FB0631E2EF7
Authority key identifier: 8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a633030303a3a2f33352d3335203d3e20323636353635.roa
Signing time:             Sat 19 Jul 2025 02:12:41 +0000
ROA not before:           Sat 19 Jul 2025 02:07:41 +0000
ROA not after:            Sat 18 Jul 2026 02:12:41 +0000
asID:                     266565
IP address blocks:        2804:3df4:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl
                          rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 02:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:42:e1:3c:40:d4:95:be:1d:27:88:8c:7f:f8:2f:b0:63:1e:2e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2922D358225395ABA691BA6723BAA778294D49
        Validity
            Not Before: Jul 19 02:07:41 2025 GMT
            Not After : Jul 18 02:12:41 2026 GMT
        Subject: CN=8702E78E5D6FD59D781FE665575C0B445784EC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:73:c3:3c:f0:23:dd:c3:3f:bb:4e:ec:77:
                    55:03:3d:b4:c4:19:5c:c9:6a:51:2b:24:db:d4:34:
                    fa:a3:60:51:fc:a0:b6:b3:e7:6c:17:37:7a:65:1d:
                    16:d4:b6:d2:55:7d:0d:2a:0e:a1:eb:e4:6d:8f:3e:
                    c9:91:0a:ce:d9:42:1f:b3:03:a4:26:4c:f6:f1:f5:
                    f5:c1:74:54:44:79:03:18:db:dd:ea:95:81:45:8e:
                    4e:77:db:2a:06:52:43:b8:d5:3c:a8:84:13:c0:20:
                    46:15:62:31:d7:04:36:6d:05:88:eb:be:7e:bc:dc:
                    24:0a:48:ce:cc:8e:90:3a:ea:42:58:7c:99:74:c3:
                    8f:ff:56:1b:a9:db:ba:ff:ab:0a:58:37:c5:b6:84:
                    cd:0d:31:ba:31:f2:4f:b5:b4:51:21:0f:8e:40:0a:
                    ac:8d:9a:c2:a7:4a:8a:9d:32:f8:94:4d:00:c1:98:
                    ea:5b:41:04:b1:e7:82:8b:5f:c5:62:d6:04:06:25:
                    2e:bd:78:cc:4a:8a:f0:b2:b1:23:64:07:c7:d6:73:
                    fc:7f:2b:82:52:6f:dd:73:d1:1e:d6:73:f2:f5:f7:
                    87:b3:97:4f:87:da:cc:58:2f:6d:4b:1b:4d:6a:0d:
                    9b:65:e5:9d:26:1e:a5:3f:ca:51:25:c8:e8:47:b2:
                    a6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:02:E7:8E:5D:6F:D5:9D:78:1F:E6:65:57:5C:0B:44:57:84:EC:74
            X509v3 Authority Key Identifier:
                keyid:8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a633030303a3a2f33352d3335203d3e20323636353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3df4:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8d:48:fb:20:74:18:33:37:e7:a0:f0:bc:dd:46:65:18:db:8d:
         54:d7:7f:74:21:e8:9e:10:76:95:a0:1d:fa:40:b6:c1:8d:87:
         ba:1e:a5:49:b2:d8:b7:e1:db:49:72:b1:70:e7:02:86:3d:b6:
         d9:78:3c:c9:aa:26:d6:cd:9d:33:a7:9d:08:e5:01:0e:aa:75:
         8e:01:fb:53:ec:c3:24:8a:b9:42:0b:f9:94:25:17:34:29:65:
         b4:a6:24:1c:d3:c3:3c:bb:14:68:2e:07:b5:44:b1:84:c6:6f:
         48:b1:58:f5:f4:d1:00:a1:c7:d1:ff:c1:b1:c3:ae:47:00:46:
         97:71:dd:3c:fc:29:41:16:83:37:43:db:2e:dd:10:6a:1e:cc:
         46:1b:f5:98:ba:cd:0d:87:c4:d1:52:cf:d6:e5:78:56:ce:4f:
         89:30:3b:ba:fb:2e:3e:1c:76:bf:8c:aa:aa:8d:27:82:64:68:
         4f:a3:db:16:9a:14:89:00:8b:cd:70:09:57:3e:bb:9c:09:21:
         a4:a2:9c:78:bd:87:c4:eb:88:92:9a:36:a3:cf:95:49:27:42:
         6e:00:da:ed:ff:17:93:20:d1:ba:ad:12:eb:68:e9:f1:a1:13:
         38:68:85:d8:cc:0a:05:42:5f:02:e5:ea:7a:05:91:88:c5:40:
         ca:48:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:52:07 2025 by rpki-client