Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a3a2f33322d3332203d3e203238353837.roa
File:                     323830343a6461303a3a2f33322d3332203d3e203238353837.roa (raw, json)
Hash identifier:          ZIWFiAwdoFQEGqyqJ/XZZEo5zOEbToFJLNOkPy4FsWs=
Subject key identifier:   6C:05:48:AC:7E:2E:05:F3:E4:69:22:F0:A9:26:0D:3B:11:14:7E:CC
Certificate issuer:       /CN=530C2AEF233AD6684B2C4E700A73F6827E2848F6
Certificate serial:       28F847B69361A9D61FEBFDA7A8F3B4700A8E321A
Authority key identifier: 53:0C:2A:EF:23:3A:D6:68:4B:2C:4E:70:0A:73:F6:82:7E:28:48:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a3a2f33322d3332203d3e203238353837.roa
Signing time:             Tue 02 Sep 2025 21:03:24 +0000
ROA not before:           Tue 02 Sep 2025 20:58:24 +0000
ROA not after:            Tue 01 Sep 2026 21:03:24 +0000
asID:                     28587
IP address blocks:        2804:da0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.crl
                          rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 11:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f8:47:b6:93:61:a9:d6:1f:eb:fd:a7:a8:f3:b4:70:0a:8e:32:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530C2AEF233AD6684B2C4E700A73F6827E2848F6
        Validity
            Not Before: Sep  2 20:58:24 2025 GMT
            Not After : Sep  1 21:03:24 2026 GMT
        Subject: CN=6C0548AC7E2E05F3E46922F0A9260D3B11147ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:e8:64:f4:c1:01:b9:cb:55:f9:8f:b2:fd:
                    f0:f2:7e:c1:37:39:f5:bb:cc:5f:86:33:0b:d2:06:
                    34:0f:00:84:82:1a:10:40:8e:6a:4c:0e:86:45:17:
                    1e:b6:89:60:a3:f3:03:c0:70:92:fd:d3:53:7f:5c:
                    5a:7c:36:6d:84:eb:4a:33:ac:17:ce:44:7e:5a:b0:
                    4e:a5:9e:2e:7b:c7:28:14:f3:60:f1:0c:53:51:8e:
                    d9:e5:0e:81:22:7a:37:df:4a:9e:66:26:1a:05:fa:
                    c8:79:c3:d3:50:7e:94:21:34:10:f9:22:92:15:a8:
                    7a:50:fe:a6:c4:53:d3:e4:a9:a5:2b:d9:a3:53:09:
                    51:03:97:83:5e:3c:41:de:bb:db:cd:3e:71:0e:37:
                    38:16:9b:d1:ff:07:c1:9b:59:94:2e:51:51:55:95:
                    98:0a:2d:bc:78:c7:4e:68:ad:29:37:e8:7c:9a:d7:
                    1e:9d:15:15:98:1d:a4:4c:ca:35:a7:45:a8:cc:99:
                    b7:23:f4:1b:89:b6:65:77:ee:86:ba:f8:1a:8b:03:
                    c1:1c:86:11:9f:db:46:31:1e:b4:48:54:ba:61:8f:
                    71:43:b6:b7:fa:60:99:54:17:0c:30:15:e6:9b:b1:
                    52:77:9a:98:7d:1f:03:53:3d:a1:62:9e:98:6d:e8:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:05:48:AC:7E:2E:05:F3:E4:69:22:F0:A9:26:0D:3B:11:14:7E:CC
            X509v3 Authority Key Identifier:
                keyid:53:0C:2A:EF:23:3A:D6:68:4B:2C:4E:70:0A:73:F6:82:7E:28:48:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a3a2f33322d3332203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:c2:5f:e7:6e:14:c0:e4:e4:39:66:19:54:52:b7:19:5e:fd:
         97:5b:3c:3d:af:67:ef:b2:dd:b9:05:4b:d2:ba:4c:7b:9e:3c:
         1f:b7:c2:17:d0:b0:ec:72:50:87:9f:a0:8b:43:fd:40:8f:c5:
         22:73:12:f1:54:3b:54:37:42:c9:6d:97:db:19:9b:17:ea:82:
         99:21:4d:63:72:20:ad:21:6d:d6:97:61:90:d9:e2:4f:e8:15:
         f0:78:a1:c2:28:b1:30:02:cb:86:3f:73:e7:bc:3f:11:4f:d5:
         6e:a4:96:39:57:f8:7b:54:d0:e5:3d:4b:30:61:62:12:7c:be:
         d9:22:aa:c2:2f:27:9c:89:ca:df:ab:a3:5e:0e:68:36:6e:71:
         8c:a6:e9:58:e1:28:5f:28:b5:c3:92:9b:5b:02:d6:db:50:55:
         48:5e:1f:a2:03:95:9e:b9:92:2c:9e:f8:1e:0f:4a:43:a8:85:
         8f:33:c6:a9:46:9a:c1:82:c6:d6:ce:41:69:b8:1d:62:55:0a:
         b7:46:5c:b8:4a:e5:73:bf:55:8d:d6:e4:27:40:d6:66:8c:e9:
         19:1b:36:92:c0:c2:b4:95:d2:b6:f6:85:3a:0f:1c:47:fc:3a:
         50:3b:ce:c0:5e:49:4a:b4:d7:22:08:2e:56:02:b3:0d:3f:58:
         d9:8b:73:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 23:12:26 2025 by rpki-client