Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/323830343a323936633a3a2f33322d3438203d3e20323634303134.roa
File:                     323830343a323936633a3a2f33322d3438203d3e20323634303134.roa (raw, json)
Hash identifier:          2dadztaER+9gyBL5gmUFWVyA0Rshw1nGZx22j2sUlE8=
Subject key identifier:   AF:CE:D0:73:39:AD:F1:FC:56:AD:4E:61:3B:E7:F7:DA:6D:1D:DD:56
Certificate issuer:       /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
Certificate serial:       734205777D8A422F6C8C5401C98B4F0DF0713EA3
Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/323830343a323936633a3a2f33322d3438203d3e20323634303134.roa
Signing time:             Wed 16 Jul 2025 20:40:33 +0000
ROA not before:           Wed 16 Jul 2025 20:35:33 +0000
ROA not after:            Wed 15 Jul 2026 20:40:33 +0000
asID:                     264014
IP address blocks:        2804:296c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 15:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:42:05:77:7d:8a:42:2f:6c:8c:54:01:c9:8b:4f:0d:f0:71:3e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
        Validity
            Not Before: Jul 16 20:35:33 2025 GMT
            Not After : Jul 15 20:40:33 2026 GMT
        Subject: CN=AFCED07339ADF1FC56AD4E613BE7F7DA6D1DDD56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a8:22:81:7a:d5:02:9d:65:0b:63:10:69:78:
                    ed:52:a7:c1:96:d5:11:84:e7:ec:75:00:d8:61:4c:
                    cb:d8:00:e3:e3:e2:49:df:5a:56:fd:4f:b2:78:6a:
                    a6:77:46:14:89:7f:9d:25:da:54:8d:5c:46:d7:01:
                    2d:c5:f9:f2:f6:f7:67:33:96:dc:68:f3:4d:95:11:
                    bd:61:69:37:04:b4:be:b3:2a:88:d4:ce:aa:78:29:
                    d2:32:b1:e4:b1:a1:0b:ed:5a:a2:69:83:0e:29:03:
                    57:4b:70:62:73:0e:83:ba:46:f8:20:fb:56:a0:d6:
                    36:91:c0:e6:2b:6c:d5:a7:0c:8e:8f:bf:cd:03:7e:
                    f9:92:aa:02:ae:52:7c:63:01:5c:46:56:6e:f6:43:
                    d5:b3:0b:39:21:55:7d:70:1d:72:f4:cc:76:74:3a:
                    67:c7:9a:eb:b4:8c:a6:4f:1a:90:b8:06:3e:36:a1:
                    39:07:d8:80:de:40:3f:d0:46:c5:35:cd:12:78:e0:
                    03:26:d9:93:2e:d1:6e:05:6f:73:84:a8:8f:a6:76:
                    99:3c:36:19:c4:2e:70:b9:a1:11:63:e9:c2:94:ff:
                    e4:da:77:b1:04:91:b9:d1:e5:71:4d:5a:92:f4:1b:
                    01:1d:47:f1:fa:f8:51:1f:88:30:99:c8:6b:af:b9:
                    3c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CE:D0:73:39:AD:F1:FC:56:AD:4E:61:3B:E7:F7:DA:6D:1D:DD:56
            X509v3 Authority Key Identifier:
                keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/323830343a323936633a3a2f33322d3438203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:296c::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:ac:fd:55:f3:ff:12:f1:64:3c:12:af:22:9d:7e:46:e0:2b:
         a8:37:e4:76:aa:5d:4a:f2:f2:cd:42:a5:8d:cf:cd:64:92:56:
         b0:28:bf:b7:f7:59:a0:cd:59:50:8c:ca:6b:0b:b4:e2:b1:31:
         31:60:40:54:81:61:72:4c:71:51:25:be:a6:05:f3:e6:41:b3:
         1c:4b:65:25:a7:63:3d:fd:0d:a5:2c:e4:32:2a:53:88:67:5e:
         22:d8:fa:3f:48:a1:39:76:0e:3d:1c:f8:cd:d6:ee:76:47:b8:
         a6:f2:96:16:79:07:f9:de:96:b7:cb:d9:be:c7:ed:83:bb:9e:
         c7:15:4a:88:f1:2f:41:48:e4:43:99:e1:cb:4d:96:19:ba:6d:
         a5:9a:33:5f:d1:27:29:29:ee:60:45:b8:b5:c4:e5:48:2d:7b:
         1b:2b:53:15:5f:7a:05:3e:5d:69:e0:07:fb:91:3e:64:6a:da:
         fb:06:af:71:b4:ee:e9:9a:0b:1c:aa:50:82:60:18:66:e6:63:
         e4:cc:f8:37:99:fc:74:05:46:8a:3f:dc:58:82:7d:6f:0a:0f:
         e9:53:68:70:c1:cb:3d:b4:d4:8d:52:a1:56:06:22:18:0e:78:
         29:a2:34:e3:e6:4f:db:74:a7:62:65:34:f2:91:43:fb:6d:02:
         bf:5a:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:01:10 2025 by rpki-client