Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643030303a3a2f33372d3337203d3e20323636353531.roa
File:                     323830343a336463303a643030303a3a2f33372d3337203d3e20323636353531.roa (raw, json)
Hash identifier:          ewJeuvwhuSmDoalh4718TAcNfu2ZtyQISU1OiCjrgWw=
Subject key identifier:   23:57:31:56:3D:55:FA:7C:3C:CE:E8:61:29:DA:00:1D:30:AA:9D:C7
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       3644BAD1AB974A53D28FE8709A2E7E1DCDC4EDCC
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643030303a3a2f33372d3337203d3e20323636353531.roa
Signing time:             Thu 17 Jul 2025 18:00:01 +0000
ROA not before:           Thu 17 Jul 2025 17:55:01 +0000
ROA not after:            Thu 16 Jul 2026 18:00:01 +0000
asID:                     266551
IP address blocks:        2804:3dc0:d000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:44:ba:d1:ab:97:4a:53:d2:8f:e8:70:9a:2e:7e:1d:cd:c4:ed:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Jul 17 17:55:01 2025 GMT
            Not After : Jul 16 18:00:01 2026 GMT
        Subject: CN=235731563D55FA7C3CCEE86129DA001D30AA9DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:b3:15:9a:36:da:13:97:11:8e:96:ab:d8:
                    e5:41:50:b9:60:bd:bb:b6:8f:5e:69:4b:19:16:a1:
                    c1:ee:75:c4:5c:06:0d:06:68:c9:6b:25:e5:ad:14:
                    e9:db:57:24:5e:ec:dd:d9:4d:df:d1:34:cb:9c:5b:
                    82:e3:25:e8:e7:4c:47:b1:7f:a9:e2:e5:5f:15:76:
                    c3:f6:fc:f9:b3:ed:e5:54:3e:f6:19:90:2d:bf:f9:
                    e2:96:7a:db:7f:8c:ca:ad:4f:81:23:5e:6f:63:a0:
                    40:73:b2:ee:eb:3b:32:26:d7:8f:13:ff:b9:a2:be:
                    96:2d:53:ce:a3:e9:84:36:bc:ad:7b:26:08:00:fe:
                    6c:98:56:66:37:3b:bd:75:56:e0:cf:15:c2:ea:68:
                    1e:d0:8b:d3:87:31:fd:6c:0e:c4:ac:35:9c:eb:57:
                    72:dc:30:75:95:2f:90:06:b9:56:d9:5a:29:b6:d8:
                    89:47:bd:65:54:57:91:62:4d:39:dc:51:71:9f:43:
                    37:f9:47:a2:a4:fe:e2:97:28:a7:a6:36:db:9a:50:
                    55:73:0c:97:37:5a:43:a0:fb:81:3a:3d:32:8a:19:
                    b5:56:50:b8:ae:3d:6e:1b:46:c6:82:1b:7b:47:e4:
                    02:87:bd:ef:14:b6:ff:3d:cb:a8:46:66:d8:f8:e7:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:57:31:56:3D:55:FA:7C:3C:CE:E8:61:29:DA:00:1D:30:AA:9D:C7
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643030303a3a2f33372d3337203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:d000::/37

    Signature Algorithm: sha256WithRSAEncryption
         40:69:68:85:7c:6d:3c:e1:5d:23:d5:e4:c5:eb:4a:47:4e:1b:
         43:15:1f:38:20:11:f3:46:2a:64:4c:00:70:a6:e8:5b:a0:89:
         e7:65:e2:ad:6e:33:16:4b:9c:44:75:3a:96:de:7f:b7:2e:d6:
         2e:d4:56:a9:2d:93:db:f7:47:cd:e4:c6:de:eb:47:ee:f6:70:
         a0:ed:3f:5e:c7:1c:0e:85:1f:81:62:e5:b1:13:ba:17:6e:8f:
         0a:0c:25:47:b4:92:42:a4:59:b9:35:1f:fd:00:89:6c:36:d1:
         e9:77:c6:43:50:5b:98:32:0e:03:cb:36:0b:7d:4a:bb:5a:4c:
         36:e2:5b:c7:08:bb:97:c2:ce:31:e0:8f:f0:7c:a0:10:50:5d:
         7f:da:b1:6e:2b:ca:1c:b3:87:93:3e:bd:c5:7d:2d:e0:c0:92:
         db:fa:29:2c:66:60:d8:a8:cd:b1:8c:8f:56:dd:d6:94:54:2c:
         c5:ee:87:4b:85:3c:0e:8a:38:b4:48:52:5e:25:89:45:57:88:
         bc:1a:cb:07:15:47:66:58:87:5c:b2:71:4a:41:4a:1a:3f:2d:
         23:1e:26:10:d9:8c:78:d1:8c:19:7c:9c:de:eb:05:57:2c:35:
         a9:20:3a:b2:47:31:44:97:bf:7c:f2:8c:58:9f:ae:e2:17:66:
         34:7f:48:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 22:21:58 2025 by rpki-client