Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/323830343a393334303a3a2f33322d3334203d3e20323734373635.roa
File:                     323830343a393334303a3a2f33322d3334203d3e20323734373635.roa (raw, json)
Hash identifier:          V1WlUoGK1WSPbI2m/05VMzlxFNYl3CU9CmvR/U/ERC8=
Subject key identifier:   18:49:63:FE:01:2C:23:EE:A4:28:C8:7A:EA:5B:9A:0D:66:FD:53:21
Certificate issuer:       /CN=B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB
Certificate serial:       206BDC7B3BF3C726C0DBCD4FCC922FB6091EFA1E
Authority key identifier: B0:2C:7E:4B:AD:2C:4D:04:ED:A1:3A:A1:D8:68:43:22:2B:03:1C:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/323830343a393334303a3a2f33322d3334203d3e20323734373635.roa
Signing time:             Fri 30 May 2025 02:49:50 +0000
ROA not before:           Fri 30 May 2025 02:44:50 +0000
ROA not after:            Fri 29 May 2026 02:49:50 +0000
asID:                     274765
IP address blocks:        2804:9340::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.crl
                          rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 03:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6b:dc:7b:3b:f3:c7:26:c0:db:cd:4f:cc:92:2f:b6:09:1e:fa:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB
        Validity
            Not Before: May 30 02:44:50 2025 GMT
            Not After : May 29 02:49:50 2026 GMT
        Subject: CN=184963FE012C23EEA428C87AEA5B9A0D66FD5321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:44:16:94:c7:6a:ea:1b:7b:52:3c:c9:29:
                    dc:9d:17:fa:4f:95:c7:49:dd:c9:db:33:48:6d:4a:
                    02:28:ab:a8:40:08:4c:60:14:7b:35:c4:0e:bb:9d:
                    38:f6:4a:29:6e:f8:89:1e:06:31:e8:af:07:3c:85:
                    11:0c:b3:72:4b:1c:0e:9d:a9:75:c7:a4:f5:8a:75:
                    81:c9:57:2d:78:0b:fc:aa:bb:ef:16:33:59:9a:2d:
                    a7:52:b2:91:8a:23:67:4d:64:ce:3b:1e:a4:08:f1:
                    c4:64:f7:15:c3:fb:cb:9b:87:f8:b2:41:24:b7:3b:
                    03:b1:d4:6e:e9:77:86:ce:ac:26:48:98:51:15:6e:
                    c6:e7:2d:6b:fa:2d:fc:49:ae:b0:27:de:70:6a:25:
                    bd:2e:41:1b:75:af:30:44:8e:ef:cb:aa:ae:12:c6:
                    94:f6:f1:4d:02:ea:f9:b5:ce:97:aa:f5:88:8b:60:
                    92:71:81:02:61:22:14:78:a5:22:a1:0d:e5:e8:69:
                    74:6e:9e:09:36:25:41:69:7c:cc:e0:a9:0b:26:11:
                    75:24:4a:00:42:09:a3:f7:fb:c7:d7:fb:12:7a:e8:
                    cf:7e:29:92:6e:7c:df:c3:db:02:9d:3e:fa:be:3e:
                    7f:99:60:df:0b:a5:e8:dc:41:22:ec:ca:01:12:52:
                    df:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:49:63:FE:01:2C:23:EE:A4:28:C8:7A:EA:5B:9A:0D:66:FD:53:21
            X509v3 Authority Key Identifier:
                keyid:B0:2C:7E:4B:AD:2C:4D:04:ED:A1:3A:A1:D8:68:43:22:2B:03:1C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/323830343a393334303a3a2f33322d3334203d3e20323734373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9340::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:52:78:d0:98:de:b9:2e:78:45:b5:79:05:4b:12:ff:bf:
         38:6c:62:c4:71:97:74:92:a4:a5:ca:94:44:ec:35:5e:6b:a4:
         41:e1:fb:cc:a2:4a:2e:8f:f6:3d:34:5f:80:46:26:7d:49:75:
         c5:ad:d3:a2:47:b4:4d:ae:79:55:ac:a3:bd:54:0f:e9:e1:bc:
         19:a4:d1:67:d9:5a:be:5a:be:b2:54:d4:4e:86:5e:91:97:2c:
         94:fe:e0:d2:55:17:a1:d8:e9:1c:ef:39:12:b8:6d:8c:4c:cd:
         16:26:13:e3:0a:a0:db:87:4d:ce:24:82:23:68:bc:57:2f:e8:
         60:01:61:54:e5:6a:68:44:40:63:47:91:b3:52:27:ab:e3:cf:
         8c:97:d4:9f:48:46:72:52:87:02:fe:33:9f:16:30:66:88:c3:
         e8:05:a9:e6:bd:a6:c7:49:fe:b3:cf:3d:d1:50:ad:68:cc:61:
         2b:86:bd:18:6f:7e:90:34:8f:1d:3a:1d:e2:f4:4c:d1:1b:1c:
         5f:af:d6:36:13:9b:28:f8:f0:0e:8c:74:34:d4:7c:54:a6:fb:
         63:95:b2:8b:73:73:b0:47:78:68:88:82:d5:df:8d:6a:7a:c9:
         ee:6d:05:3e:59:41:2b:3c:38:46:db:bc:a0:dc:5d:fe:34:e6:
         5f:cf:ae:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:56:09 2025 by rpki-client