Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa
File:                     323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa (raw, json)
Hash identifier:          MuLCu/ebtGTRQdFTtxwflEFsRUPY8b2YKd2KzoWHrGI=
Subject key identifier:   42:14:83:27:07:A9:07:A2:49:D9:8F:0D:C5:84:52:BE:75:F9:D6:09
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       7732989B37E833D941D7D8823EFA8DACB00D482F
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa
Signing time:             Mon 14 Jul 2025 18:00:02 +0000
ROA not before:           Mon 14 Jul 2025 17:55:02 +0000
ROA not after:            Mon 13 Jul 2026 18:00:02 +0000
asID:                     267121
IP address blocks:        2804:4870:4400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:32:98:9b:37:e8:33:d9:41:d7:d8:82:3e:fa:8d:ac:b0:0d:48:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Jul 14 17:55:02 2025 GMT
            Not After : Jul 13 18:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:c1:cb:65:ce:d6:c4:04:9e:fb:72:b3:a3:
                    0a:42:49:20:a5:a7:2b:08:c4:83:36:e8:49:d4:db:
                    ec:bb:43:b5:d9:a3:9a:57:28:97:99:bc:da:54:1d:
                    b8:16:d9:b9:5b:c9:46:d9:19:b2:21:54:2e:64:f1:
                    2e:41:55:eb:86:c3:bc:65:c1:db:30:e4:5e:06:59:
                    be:f6:0f:17:fb:49:29:c0:b5:3e:a9:63:48:a7:0a:
                    83:99:1d:7d:de:bd:b4:17:61:61:6e:f0:fc:80:44:
                    3b:39:fe:37:29:4e:8e:93:bf:50:3a:ca:8e:5a:f7:
                    de:45:7c:94:89:3b:84:c7:a4:74:54:e4:53:2a:b8:
                    2a:62:08:4f:f5:7d:a1:68:ab:02:24:56:6c:8e:b6:
                    20:4e:8a:81:4d:10:30:ae:a7:6b:22:cb:e1:a8:16:
                    ed:7d:35:5c:5c:cb:be:0a:bc:25:9d:5c:1d:bd:ca:
                    e4:16:64:65:50:dc:d5:30:8a:fe:6a:bd:ce:ac:1f:
                    df:05:62:92:ca:ab:57:13:79:65:c9:16:0f:2f:ed:
                    24:a2:20:00:06:7a:99:7d:8c:62:d4:86:0a:2d:83:
                    a3:7b:c4:a9:9a:a5:85:5d:85:ce:2d:f6:d6:16:97:
                    6b:e3:c4:b5:a4:f1:8a:e0:9a:21:01:9b:07:5f:87:
                    99:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:14:83:27:07:A9:07:A2:49:D9:8F:0D:C5:84:52:BE:75:F9:D6:09
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:4400::/38

    Signature Algorithm: sha256WithRSAEncryption
         92:a4:2e:6e:c8:7f:fc:b1:13:8c:82:68:16:d3:4c:ba:84:10:
         ed:fe:68:c0:df:45:bb:8a:16:31:9b:86:c6:03:fe:25:cd:5f:
         17:cf:e3:0c:22:14:7c:00:78:c3:32:af:12:f1:b4:05:99:59:
         94:7e:c6:5a:ad:6b:fd:e1:5e:99:16:20:b8:4e:df:de:c1:b0:
         31:d7:96:df:58:16:83:e6:cc:c7:4a:43:85:e5:3b:4b:08:68:
         6b:7a:71:08:43:84:9c:82:7b:be:59:8e:1e:48:3d:42:c6:76:
         b0:77:0a:b6:32:6a:41:2f:28:d5:c6:92:30:ad:94:d4:bb:c4:
         3f:c5:b0:01:e2:55:b4:7b:94:dd:3c:a5:4d:a7:aa:2f:d4:a8:
         37:20:1d:e4:f2:6e:7b:31:9f:f8:24:02:26:25:92:17:81:59:
         e0:63:1a:80:bd:6d:9a:15:31:f7:ee:15:55:0d:8f:5f:d0:41:
         c8:12:4b:2c:2b:b1:27:a1:4c:7c:36:08:7f:5e:46:e1:c6:a8:
         fa:79:7e:09:a5:c1:76:78:8b:54:9e:f9:5d:7b:25:cc:28:51:
         42:01:41:dc:cc:1b:37:d7:ea:75:3d:8c:c6:27:73:3c:66:fb:
         df:50:ba:51:e9:b5:f0:4f:38:b6:8b:22:21:64:04:64:5b:ca:
         a3:be:18:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:27:06 2025 by rpki-client