Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a3a2f33322d313238203d3e20323632343934.roa
File:                     323830343a313531303a3a2f33322d313238203d3e20323632343934.roa (raw, json)
Hash identifier:          y+cDfpeltdPcNoNogRIYofjbCo1issik9QNzofxvCuk=
Subject key identifier:   5B:B4:CE:BF:07:33:07:95:B1:3C:6B:0E:BC:6B:50:14:84:CD:00:A9
Certificate issuer:       /CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
Certificate serial:       0A264634C053E3D28F811BEACC0FA5A7F784FB01
Authority key identifier: A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a3a2f33322d313238203d3e20323632343934.roa
Signing time:             Mon 04 Aug 2025 20:22:03 +0000
ROA not before:           Mon 04 Aug 2025 20:17:03 +0000
ROA not after:            Mon 03 Aug 2026 20:22:03 +0000
asID:                     262494
IP address blocks:        2804:1510::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 20:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:26:46:34:c0:53:e3:d2:8f:81:1b:ea:cc:0f:a5:a7:f7:84:fb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
        Validity
            Not Before: Aug  4 20:17:03 2025 GMT
            Not After : Aug  3 20:22:03 2026 GMT
        Subject: CN=5BB4CEBF07330795B13C6B0EBC6B501484CD00A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:4b:8b:dc:ff:49:78:d2:ac:f8:ef:f6:d6:
                    1b:9a:21:ef:d6:9e:0d:c4:69:9e:9f:14:9b:4d:71:
                    54:d2:8c:15:69:66:53:65:fe:7d:c0:9b:e8:1f:e3:
                    d6:9f:91:5e:c9:69:d7:84:24:29:4a:b0:c0:f0:8c:
                    b4:87:43:a5:99:f8:da:c2:b1:87:5a:20:8c:e2:8a:
                    42:6a:81:49:95:b3:61:3f:88:16:5c:ea:92:81:5f:
                    26:60:5d:08:fc:41:63:1e:13:14:a2:39:28:aa:23:
                    1e:94:22:b8:94:ca:99:84:66:1c:34:10:17:84:4e:
                    21:18:c2:e1:c7:e2:b5:5a:d4:20:4e:62:e4:d9:af:
                    8d:b2:f9:15:f7:40:81:91:f3:dc:42:63:62:9f:5c:
                    11:2b:90:66:9c:b3:d4:ff:8e:a0:ab:12:f8:0d:c9:
                    47:98:02:f9:9e:cc:c8:3d:39:7e:7b:41:bc:a4:49:
                    2a:fe:64:99:79:63:92:75:a3:3f:8e:3b:0c:e0:d0:
                    91:be:7b:0e:3c:86:0b:2a:bb:df:58:36:bb:5c:27:
                    66:a9:46:99:10:54:c8:4c:12:1b:dc:61:80:70:88:
                    6e:d8:4e:37:bf:bc:c7:91:dd:63:75:70:e6:7d:74:
                    58:22:c4:10:63:88:c4:7d:a1:f8:57:69:61:7a:5c:
                    cc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B4:CE:BF:07:33:07:95:B1:3C:6B:0E:BC:6B:50:14:84:CD:00:A9
            X509v3 Authority Key Identifier:
                keyid:A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a3a2f33322d313238203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1510::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:9d:8f:eb:d3:3d:42:ba:06:ef:db:9c:61:4e:86:f2:78:40:
         44:37:9d:35:45:15:4e:1f:22:25:08:3c:99:ef:61:10:c6:47:
         37:e7:24:4a:08:1b:bd:b5:83:52:fb:c3:d3:2c:e2:b4:d5:db:
         a7:4b:a4:9f:5b:82:67:a1:7f:f9:c9:a7:55:9f:47:ff:f7:b9:
         38:9d:85:9d:67:c7:81:13:fa:10:42:9a:96:36:ef:33:7d:dc:
         3e:ce:20:de:7f:b2:b0:11:05:0e:e7:7e:0d:26:12:6e:3c:0f:
         c8:8a:65:ab:0d:a4:d3:3f:16:f4:7f:f2:48:ee:8a:3c:5a:72:
         23:14:ab:3d:0b:e6:37:48:0f:7f:5f:c0:c4:d1:ca:44:f1:60:
         92:9e:39:5f:fe:78:ef:15:bd:51:b4:3a:0d:9a:f9:c6:d9:9d:
         7f:11:a4:86:fe:90:45:45:7e:85:d8:25:3c:98:06:d1:df:16:
         2b:e1:2e:da:f4:55:da:00:4c:b5:70:bd:30:d0:90:b1:2b:d4:
         9b:6d:e6:f2:76:39:13:eb:1b:64:cd:47:c4:84:13:bd:a4:eb:
         f8:6a:af:e1:e3:b3:ae:73:8d:5d:94:d2:1e:b2:a7:dd:5f:f4:
         03:56:47:ba:04:d1:a9:eb:ce:7c:30:86:12:44:1a:9d:09:b2:
         6d:8e:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:04:23 2025 by rpki-client