Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/323830343a353463343a3a2f33322d313238203d3e20323638363639.roa
File:                     323830343a353463343a3a2f33322d313238203d3e20323638363639.roa (raw, json)
Hash identifier:          i/+EMmHFMGqogYrZgaRhva6vg0d98QEkZjKWhP5qXto=
Subject key identifier:   9C:27:71:02:4B:81:89:6F:39:16:A7:A0:7C:B8:E2:F8:5D:0C:88:90
Certificate issuer:       /CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F
Certificate serial:       64131EF1A1ED2F4CE41AAAA895CD8717D8455160
Authority key identifier: 3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/323830343a353463343a3a2f33322d313238203d3e20323638363639.roa
Signing time:             Wed 16 Jul 2025 17:17:46 +0000
ROA not before:           Wed 16 Jul 2025 17:12:46 +0000
ROA not after:            Wed 15 Jul 2026 17:17:46 +0000
asID:                     268669
IP address blocks:        2804:54c4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl
                          rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 23:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:13:1e:f1:a1:ed:2f:4c:e4:1a:aa:a8:95:cd:87:17:d8:45:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F
        Validity
            Not Before: Jul 16 17:12:46 2025 GMT
            Not After : Jul 15 17:17:46 2026 GMT
        Subject: CN=9C2771024B81896F3916A7A07CB8E2F85D0C8890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:39:4b:38:96:41:00:08:3c:66:ee:8b:e8:
                    26:df:c4:e0:01:d2:5a:42:7e:04:9f:15:22:5e:f8:
                    6d:b6:ae:90:7d:9c:bc:11:ac:b2:21:ea:20:ac:06:
                    35:74:1b:3f:9c:22:ec:c2:62:a0:4c:2b:a5:c6:01:
                    2b:1c:b7:84:0f:fb:df:09:97:c9:29:27:30:e5:e7:
                    d4:ba:d6:b5:60:63:a5:a9:49:46:53:76:a1:85:d0:
                    59:82:33:ec:d2:ff:3a:21:cb:8a:ee:aa:8b:6f:e7:
                    16:f6:d2:4d:6f:11:82:69:16:c4:67:ba:4d:e5:b2:
                    e6:f6:86:85:9d:4f:35:25:f6:6c:da:6b:ec:3b:79:
                    bf:7e:ac:16:73:a7:56:c4:e2:46:77:4c:19:86:69:
                    9e:ea:89:04:3f:c7:d1:0e:d1:bf:3c:54:4c:3b:a1:
                    db:95:8d:d4:c9:95:17:d9:6d:69:f6:5e:29:14:e4:
                    0d:4f:89:38:cd:a7:68:0f:46:df:e4:1a:43:6c:04:
                    f3:10:6e:b6:36:b0:60:f3:ee:ec:f4:92:bf:25:9a:
                    0c:c9:47:fa:a1:d9:96:16:93:20:9c:72:cb:ec:02:
                    2a:b8:16:0e:74:7c:c6:aa:c8:5e:c7:c6:45:99:d8:
                    9b:b0:eb:4f:29:80:c3:76:6a:4b:8b:d3:61:ca:12:
                    d7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:27:71:02:4B:81:89:6F:39:16:A7:A0:7C:B8:E2:F8:5D:0C:88:90
            X509v3 Authority Key Identifier:
                keyid:3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/323830343a353463343a3a2f33322d313238203d3e20323638363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:f3:c2:32:30:97:39:49:4d:c9:08:39:09:a2:60:cb:57:75:
         b0:3f:7f:ed:13:00:20:73:47:86:04:41:85:f9:e8:60:9f:c4:
         dc:bd:ce:3d:9a:98:af:7b:bc:b5:97:83:fb:a2:cb:61:70:de:
         50:12:21:75:5c:6b:55:34:cf:b5:66:f5:1b:9c:a9:eb:83:1a:
         44:b0:07:82:05:c6:93:92:11:a5:e9:85:8b:d7:88:3c:7a:da:
         8d:c7:34:7f:fe:41:1c:bf:53:33:9b:6e:33:0e:83:66:a4:9c:
         ed:c0:9e:75:f3:c6:82:30:35:6f:60:b8:90:f7:51:b2:4d:9f:
         17:e9:7e:3c:46:27:25:50:b1:8b:21:bf:20:23:18:a1:7a:23:
         e2:5f:05:ff:ca:81:59:47:57:bb:67:d0:4f:3b:c1:f6:55:88:
         1b:ef:a3:48:f7:fb:fd:69:41:4e:46:06:75:bd:ac:a8:97:dc:
         ff:ae:e7:db:05:98:f7:57:30:e2:fd:9a:63:1a:a2:f9:01:45:
         8d:c2:ae:ed:6a:90:36:9d:72:34:7e:7b:a1:03:a0:cb:0f:d0:
         3c:db:56:d4:37:01:52:ec:c3:0f:34:ed:49:87:12:b6:cc:30:
         de:89:2e:cf:83:df:11:e1:86:40:98:e0:21:b4:c1:33:4c:41:
         42:b0:0e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:05:29 2025 by rpki-client