Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a3a2f33322d3332203d3e20323637333239.roa
File:                     323830343a346263383a3a2f33322d3332203d3e20323637333239.roa (raw, json)
Hash identifier:          lqNYx661SrY+qGR55hIOa9oY/NpdyyqdICF65esuIjA=
Subject key identifier:   E1:65:BD:15:1B:8C:2B:92:4D:11:5C:6D:6E:7D:DE:37:BF:C0:7C:EF
Certificate issuer:       /CN=794E629B0678092652C7896E669B6A838A268C5A
Certificate serial:       3B2F8EC4C5C7CC53F528C36A6F13881F0BEA7723
Authority key identifier: 79:4E:62:9B:06:78:09:26:52:C7:89:6E:66:9B:6A:83:8A:26:8C:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a3a2f33322d3332203d3e20323637333239.roa
Signing time:             Thu 07 Aug 2025 15:40:04 +0000
ROA not before:           Thu 07 Aug 2025 15:35:04 +0000
ROA not after:            Thu 06 Aug 2026 15:40:04 +0000
asID:                     267329
IP address blocks:        2804:4bc8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2f:8e:c4:c5:c7:cc:53:f5:28:c3:6a:6f:13:88:1f:0b:ea:77:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794E629B0678092652C7896E669B6A838A268C5A
        Validity
            Not Before: Aug  7 15:35:04 2025 GMT
            Not After : Aug  6 15:40:04 2026 GMT
        Subject: CN=E165BD151B8C2B924D115C6D6E7DDE37BFC07CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:0c:31:20:1e:ab:00:fb:67:52:54:b1:d0:
                    df:8c:87:a3:21:53:14:23:73:79:29:ba:83:ef:12:
                    4d:dc:6a:0d:32:b6:e2:8d:86:14:e6:d4:1c:1e:99:
                    8c:b5:a1:25:f2:6f:d6:e7:ce:81:1f:e4:6d:ef:ce:
                    a7:84:db:8a:75:b2:60:25:7e:7c:45:cb:13:7a:15:
                    f7:5e:09:8a:6b:72:c8:09:21:30:96:11:f0:ba:37:
                    78:2e:06:f8:f1:dc:cb:51:1d:6d:46:25:82:31:cd:
                    2c:e1:00:51:da:dd:89:52:1b:de:42:3e:e9:05:4e:
                    6d:ab:30:4e:d9:43:8f:dc:48:09:45:de:53:98:71:
                    c7:81:71:c2:27:63:28:12:83:5b:50:b7:a2:44:12:
                    26:95:23:58:6f:aa:4b:fd:1f:67:fb:0c:9b:3b:a1:
                    ea:c1:ba:29:6d:51:ae:a3:47:44:53:45:ef:ff:02:
                    46:ba:c0:9c:58:b8:12:42:50:85:34:ee:51:67:98:
                    48:7b:00:07:ee:21:ad:3a:c8:4b:1e:61:61:9a:b7:
                    2a:ef:8d:91:c0:aa:04:90:18:78:25:d3:8a:c7:a4:
                    33:77:ff:5f:41:9d:a9:c7:69:8c:d8:e1:68:8b:6f:
                    a1:48:17:1e:35:0f:b8:d0:f0:c0:27:fc:d6:fb:f1:
                    36:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:65:BD:15:1B:8C:2B:92:4D:11:5C:6D:6E:7D:DE:37:BF:C0:7C:EF
            X509v3 Authority Key Identifier:
                keyid:79:4E:62:9B:06:78:09:26:52:C7:89:6E:66:9B:6A:83:8A:26:8C:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a3a2f33322d3332203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:d6:d5:6f:75:b7:05:92:c4:f3:c7:47:5e:90:aa:3c:50:11:
         10:bc:6b:f3:ac:36:8a:38:e8:cf:75:ed:40:6b:8c:60:80:6d:
         eb:2b:16:cf:2d:7b:4a:40:01:82:89:ef:a9:7a:ad:41:30:cd:
         d0:b2:0a:21:5e:3c:e2:dd:2e:b1:7f:49:03:22:79:b5:7a:5f:
         6a:cb:34:64:87:fb:3e:34:6b:a4:ef:43:87:6d:09:42:aa:89:
         8f:e6:82:88:6e:16:9c:6f:a3:f2:4b:f5:0e:1c:1e:0e:89:db:
         fc:35:4f:10:95:42:77:f3:0b:ac:59:94:6a:ea:d3:05:43:1b:
         16:e6:65:32:b4:41:f0:62:f4:86:f3:a9:e8:e1:7c:9e:c0:d2:
         25:84:8c:71:9f:99:42:98:cb:b1:44:1a:09:91:06:04:a5:ae:
         65:f8:a2:ac:a0:9b:7a:8b:7f:02:a7:ad:85:17:ca:8d:81:99:
         71:47:f9:9a:e1:b0:e6:31:89:3d:3e:48:e0:15:77:be:c0:91:
         6a:ee:4b:54:43:5b:60:b9:b3:25:1e:b7:3e:e1:58:80:ea:72:
         8d:71:8d:bc:9b:37:ed:2d:44:b8:55:20:09:8d:09:84:39:ff:
         08:cb:01:62:c0:56:c8:9e:2a:d5:cc:74:8b:9c:35:31:55:9d:
         d3:88:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:33:00 2025 by rpki-client