Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/323830343a366163343a3a2f33322d3438203d3e203136393231.roa
File:                     323830343a366163343a3a2f33322d3438203d3e203136393231.roa (raw, json)
Hash identifier:          wwcikqASDX4qnHm8bhRNER/B+c4Ye0D8AxPC4HxQiuE=
Subject key identifier:   2C:A9:7A:4D:E8:21:F8:2F:EE:9C:60:EC:B2:1B:FB:54:72:C9:66:22
Certificate issuer:       /CN=1A6816C54D1FDAC43B441011433CC59E3BCB3648
Certificate serial:       4E5FE4E7F4FCDBE32DFFCBB56029A8E636FDB019
Authority key identifier: 1A:68:16:C5:4D:1F:DA:C4:3B:44:10:11:43:3C:C5:9E:3B:CB:36:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A6816C54D1FDAC43B441011433CC59E3BCB3648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/323830343a366163343a3a2f33322d3438203d3e203136393231.roa
Signing time:             Wed 27 Aug 2025 18:55:08 +0000
ROA not before:           Wed 27 Aug 2025 18:50:08 +0000
ROA not after:            Wed 26 Aug 2026 18:55:08 +0000
asID:                     16921
IP address blocks:        2804:6ac4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/1A6816C54D1FDAC43B441011433CC59E3BCB3648.crl
                          rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/1A6816C54D1FDAC43B441011433CC59E3BCB3648.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A6816C54D1FDAC43B441011433CC59E3BCB3648.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 13:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5f:e4:e7:f4:fc:db:e3:2d:ff:cb:b5:60:29:a8:e6:36:fd:b0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A6816C54D1FDAC43B441011433CC59E3BCB3648
        Validity
            Not Before: Aug 27 18:50:08 2025 GMT
            Not After : Aug 26 18:55:08 2026 GMT
        Subject: CN=2CA97A4DE821F82FEE9C60ECB21BFB5472C96622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:ad:16:69:4e:07:c5:c2:0e:a6:7f:7b:da:
                    e9:2c:ae:2d:55:7b:2c:d3:bc:6a:03:9b:0e:0b:da:
                    7e:14:2b:6b:60:46:f4:7e:60:68:96:1e:65:25:b7:
                    e9:0b:d4:97:76:b8:bc:03:28:d4:2d:1c:18:92:c0:
                    ad:94:01:ed:e7:b8:ba:6c:88:48:44:a8:b4:f2:35:
                    40:8b:31:75:50:fc:c1:00:10:d3:00:21:06:52:98:
                    23:ff:b8:f3:a4:a8:4e:b3:0a:b7:45:e5:13:b7:fe:
                    65:53:86:74:fa:46:9b:8b:f8:c0:a2:d8:33:d5:8e:
                    7c:8c:04:d1:24:85:a3:e5:56:c5:91:33:4b:38:7f:
                    20:a6:ab:32:30:70:c6:f0:26:68:4d:32:b4:fb:63:
                    62:bc:b3:4d:d6:30:d9:d5:40:ac:44:95:46:af:9f:
                    1e:37:1d:fd:48:65:21:86:1f:20:69:36:2c:04:cd:
                    9b:38:db:c7:18:33:11:29:fe:d2:a9:c9:bd:ea:69:
                    1b:7d:77:43:87:da:f3:58:b0:58:74:c6:3c:b2:64:
                    99:78:a0:4c:d3:0c:f0:83:1d:96:f1:0f:78:17:f9:
                    86:82:3f:f6:7b:68:3a:d6:94:d1:4a:fa:ce:fe:8f:
                    6f:f5:23:6b:ae:eb:1d:8b:42:ee:de:73:e5:b2:9a:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A9:7A:4D:E8:21:F8:2F:EE:9C:60:EC:B2:1B:FB:54:72:C9:66:22
            X509v3 Authority Key Identifier:
                keyid:1A:68:16:C5:4D:1F:DA:C4:3B:44:10:11:43:3C:C5:9E:3B:CB:36:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/1A6816C54D1FDAC43B441011433CC59E3BCB3648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A6816C54D1FDAC43B441011433CC59E3BCB3648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/323830343a366163343a3a2f33322d3438203d3e203136393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ac4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:c5:9d:c4:83:d0:36:0b:14:36:3c:6c:77:23:e5:b2:04:71:
         23:a3:cb:77:02:d0:f5:df:b2:24:25:f3:f4:b1:8a:31:b6:6d:
         07:6f:23:6e:e1:9e:1a:62:0b:74:96:29:98:1a:23:f5:78:37:
         72:38:fd:c9:b1:9e:94:40:80:01:e7:5c:e7:12:1a:85:5a:e4:
         c0:09:c6:8e:78:bc:7c:4d:b0:f5:a8:6e:fa:c7:d6:e9:5b:52:
         25:03:13:65:c0:6e:2e:23:20:70:57:80:01:0b:e3:e0:0c:71:
         1e:ed:fc:0c:53:96:01:60:f7:0f:a2:52:83:aa:fd:56:f7:36:
         4c:e3:8e:a7:4c:7a:9b:75:7e:06:17:21:02:18:5b:8b:c3:de:
         e7:c6:1e:84:c7:83:64:82:b1:b8:92:4b:7c:52:24:1e:32:22:
         bc:6c:64:86:6e:3f:d0:e1:36:3a:92:73:00:e9:19:84:3e:70:
         65:10:3a:da:f6:e4:c7:bd:87:36:b6:9b:62:fe:53:92:c5:d5:
         c2:df:74:66:d5:01:f9:02:29:19:11:11:15:83:b5:c9:1e:29:
         c6:e0:45:56:49:c7:08:64:5f:d1:3d:cc:0c:a2:63:29:dd:f3:
         46:52:d1:8a:34:a7:18:26:7a:58:7b:73:c0:bf:ac:04:4b:82:
         44:12:e0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 21:23:42 2025 by rpki-client