Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/323830343a363438633a3a2f33322d3332203d3e20323639343334.roa
File:                     323830343a363438633a3a2f33322d3332203d3e20323639343334.roa (raw, json)
Hash identifier:          t+w4cKNHIrY0M1QgC42cxSSlDYiwhA1xjaaM70AYnpM=
Subject key identifier:   76:E8:DE:BA:B9:4C:DD:8F:EE:6A:70:8F:15:D8:90:39:00:51:C2:CB
Certificate issuer:       /CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Certificate serial:       25A6437155BF548BDDF7859A03051BAD5F82669D
Authority key identifier: F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/323830343a363438633a3a2f33322d3332203d3e20323639343334.roa
Signing time:             Fri 04 Jul 2025 02:21:00 +0000
ROA not before:           Fri 04 Jul 2025 02:16:00 +0000
ROA not after:            Fri 03 Jul 2026 02:21:00 +0000
asID:                     269434
IP address blocks:        2804:648c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl
                          rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 06:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a6:43:71:55:bf:54:8b:dd:f7:85:9a:03:05:1b:ad:5f:82:66:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
        Validity
            Not Before: Jul  4 02:16:00 2025 GMT
            Not After : Jul  3 02:21:00 2026 GMT
        Subject: CN=76E8DEBAB94CDD8FEE6A708F15D890390051C2CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ec:1c:ac:4e:9b:c1:81:66:83:b8:15:e6:89:
                    c3:cf:ea:6f:71:54:10:8b:65:cb:5a:e4:c1:0a:8e:
                    cf:06:c6:4b:a7:94:5d:18:aa:6f:c2:91:20:8b:08:
                    8c:f9:84:06:e8:cd:be:bd:59:98:0e:3a:13:c1:13:
                    d1:72:34:b7:b8:9e:87:39:d4:c4:c0:74:1a:45:24:
                    98:48:bc:30:15:57:91:d2:1a:a3:86:7a:0a:f8:21:
                    c4:93:80:c1:10:31:3b:5c:23:69:0b:d1:ed:3c:2a:
                    c6:44:53:50:b2:da:7c:0b:6d:74:0a:f7:18:1c:b9:
                    93:5b:70:c4:98:aa:4f:14:d2:e1:f3:55:8d:59:70:
                    25:9f:70:16:4d:19:af:93:b7:e3:6d:b3:fd:70:9f:
                    c9:a1:e1:1a:78:ee:09:98:b6:3e:db:63:28:9a:76:
                    88:37:68:53:14:10:ee:12:92:1b:2b:42:1e:2a:b6:
                    24:4a:4b:1f:47:fc:7f:8d:49:06:a8:55:83:c5:b8:
                    aa:82:4e:91:52:47:6d:c2:45:f3:66:a7:ee:11:7f:
                    b9:9d:e0:2f:b9:83:cb:5b:c9:26:20:ce:c3:f3:1a:
                    b3:33:08:c8:a0:d1:56:84:c3:9f:55:09:30:df:53:
                    4a:19:c7:8e:e3:da:71:d6:e4:7d:79:02:8c:1b:7f:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E8:DE:BA:B9:4C:DD:8F:EE:6A:70:8F:15:D8:90:39:00:51:C2:CB
            X509v3 Authority Key Identifier:
                keyid:F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/323830343a363438633a3a2f33322d3332203d3e20323639343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:648c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:c4:99:36:5c:52:a8:50:25:4d:ec:77:97:c9:e5:22:2a:e7:
         87:2c:e5:b1:81:47:05:15:95:82:9d:b8:d0:05:0a:a2:57:4b:
         47:19:50:0e:6a:9e:c7:84:5f:80:b5:be:ab:29:4a:bd:1a:2f:
         f0:0e:65:58:53:b5:a6:6c:34:d6:81:fc:45:ed:7e:3e:a8:ca:
         d1:61:21:5e:60:62:75:74:3f:d6:cf:27:52:c8:30:3f:96:fb:
         d5:df:87:bd:f2:36:c9:d1:03:84:19:d6:c8:95:72:61:b7:d5:
         53:16:27:f6:a5:37:15:aa:02:19:26:db:9c:74:92:64:ca:17:
         57:a2:94:d5:29:fe:66:11:8e:82:0d:aa:41:60:f5:5b:46:a8:
         50:2d:59:b5:9d:c7:c1:f0:f1:d4:ec:1a:54:cd:0a:56:c1:c6:
         c6:ba:56:4f:46:ca:e4:f2:2e:95:9f:b9:8a:1b:ba:0b:21:dc:
         ff:f8:01:41:62:9e:0e:05:4f:ca:4b:24:ba:50:bf:c1:ae:e2:
         ca:b1:b4:34:e6:2e:f4:f9:5b:78:a3:67:9b:5f:a0:f0:63:29:
         f3:1d:81:a8:6b:35:cc:af:b8:c5:19:b6:60:03:8a:34:f9:62:
         43:c4:a8:9b:44:cb:b6:18:3d:52:21:16:28:1d:ad:83:7f:35:
         a8:68:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:45:05 2025 by rpki-client