Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa
File:                     323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa (raw, json)
Hash identifier:          6eeuwU0WHgdTYTbBzaDABMDUisPvthJVCbEbd3COd5w=
Subject key identifier:   39:DB:E0:30:20:FC:67:D1:33:F6:CF:F0:A3:BE:08:C7:A2:62:C7:32
Certificate issuer:       /CN=030432E293597EB9BE73A032AB1ED40C750C628E
Certificate serial:       653E17318520186B99D907B5EC4F78D366970077
Authority key identifier: 03:04:32:E2:93:59:7E:B9:BE:73:A0:32:AB:1E:D4:0C:75:0C:62:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030432E293597EB9BE73A032AB1ED40C750C628E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa
Signing time:             Tue 22 Jul 2025 13:34:55 +0000
ROA not before:           Tue 22 Jul 2025 13:29:55 +0000
ROA not after:            Tue 21 Jul 2026 13:34:55 +0000
asID:                     268746
IP address blocks:        2804:5a10:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030432E293597EB9BE73A032AB1ED40C750C628E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3e:17:31:85:20:18:6b:99:d9:07:b5:ec:4f:78:d3:66:97:00:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030432E293597EB9BE73A032AB1ED40C750C628E
        Validity
            Not Before: Jul 22 13:29:55 2025 GMT
            Not After : Jul 21 13:34:55 2026 GMT
        Subject: CN=39DBE03020FC67D133F6CFF0A3BE08C7A262C732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:1a:76:be:b2:01:03:59:72:9c:60:2b:68:
                    b5:6b:c0:f6:e8:36:c1:41:07:72:db:83:75:a7:c8:
                    1d:20:a0:34:1b:ae:d5:11:bd:56:a1:8d:fa:46:09:
                    81:c6:53:2d:65:8e:79:83:18:e5:52:e9:33:f3:d1:
                    73:10:4e:ee:7e:cb:7d:9c:5b:7f:eb:ba:a8:d8:7a:
                    00:c3:5b:dc:10:90:bf:98:db:bb:8d:99:5a:c6:78:
                    44:60:84:e5:d0:bc:d7:34:89:52:e1:e1:ad:32:e1:
                    79:85:9d:ac:a6:4e:b8:97:28:b8:f2:6f:d6:83:60:
                    17:85:3b:65:b3:79:1b:1e:09:71:65:b8:81:e7:69:
                    85:6b:96:2a:6a:35:1f:d6:87:3b:1c:3e:45:42:09:
                    cf:b8:b2:6b:6d:bc:b7:2b:31:91:28:af:32:22:b3:
                    60:cf:a9:67:4b:a9:3c:59:b1:c3:b3:91:4b:fc:93:
                    9d:d2:cd:9f:15:b3:99:e3:1e:b2:86:f0:3b:e0:ef:
                    ad:0e:68:b9:d8:4d:da:ca:07:b1:4e:55:f4:76:94:
                    7f:14:3a:5f:ad:df:00:b1:05:2b:b7:75:87:d4:c6:
                    94:fc:9d:c6:f1:4d:01:0c:62:d8:55:4e:73:a0:78:
                    df:5e:59:34:5c:02:0f:07:69:fa:30:95:1d:69:06:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DB:E0:30:20:FC:67:D1:33:F6:CF:F0:A3:BE:08:C7:A2:62:C7:32
            X509v3 Authority Key Identifier:
                keyid:03:04:32:E2:93:59:7E:B9:BE:73:A0:32:AB:1E:D4:0C:75:0C:62:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030432E293597EB9BE73A032AB1ED40C750C628E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         97:d1:38:99:8a:d7:a2:76:86:a0:ca:7b:3a:b4:bb:24:4e:03:
         d7:ef:f5:b1:7b:f5:75:12:6e:17:6c:e8:b6:1e:52:40:a5:bf:
         28:75:a4:36:a7:0a:0f:58:51:62:d1:1a:1c:d2:47:9f:39:7e:
         d3:0d:6a:ed:ec:c4:9b:ec:2e:9c:0b:cc:92:3e:d5:34:68:94:
         c6:c5:12:cb:6b:9e:cb:b1:d3:b0:31:c4:e4:e2:b5:95:68:06:
         f1:29:55:39:72:44:4e:83:14:b8:33:ce:23:3d:df:7e:99:6f:
         53:9f:9f:cc:71:07:07:aa:d2:c9:62:b6:b7:63:15:e3:5e:bb:
         d6:0c:af:f1:7d:81:67:3c:b0:bc:33:11:37:31:f3:d3:aa:28:
         37:d3:44:b5:bf:7c:18:e8:3e:01:67:5c:fa:24:7d:5e:f0:a8:
         54:04:a6:3d:46:5a:cf:91:a6:9d:a4:52:a1:7f:78:de:96:f0:
         ee:fb:e6:1f:b0:e7:e0:d9:db:da:fd:89:7f:b5:75:d0:75:a4:
         0c:ec:33:7b:3a:25:cc:eb:1e:cb:db:b8:e6:cc:36:43:05:85:
         ca:ab:66:5f:c7:dc:74:59:c7:b4:29:ec:18:e1:a6:60:47:51:
         28:53:26:cc:5c:0c:c2:a7:b9:ab:5d:8a:6a:52:10:4c:1b:9e:
         92:2b:ac:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:02:12 2025 by rpki-client