Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/323830343a373761633a3a2f33322d3333203d3e20323731313932.roa
File:                     323830343a373761633a3a2f33322d3333203d3e20323731313932.roa (raw, json)
Hash identifier:          g22XE5ISfkN8UVTGJGMCTf9+YjnhQjRO/MJxWM6I1Xo=
Subject key identifier:   A6:98:63:FB:89:5A:03:0B:4B:62:D6:CA:8A:EE:E7:0E:48:7D:4F:18
Certificate issuer:       /CN=4E381BD703B94AA7B06975FB0FC88364AA7BA29E
Certificate serial:       5FE8F5BFEF56DAAFD562D216262C8CB80C454BCB
Authority key identifier: 4E:38:1B:D7:03:B9:4A:A7:B0:69:75:FB:0F:C8:83:64:AA:7B:A2:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/323830343a373761633a3a2f33322d3333203d3e20323731313932.roa
Signing time:             Fri 18 Jul 2025 14:07:22 +0000
ROA not before:           Fri 18 Jul 2025 14:02:22 +0000
ROA not after:            Fri 17 Jul 2026 14:07:22 +0000
asID:                     271192
IP address blocks:        2804:77ac::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.crl
                          rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e8:f5:bf:ef:56:da:af:d5:62:d2:16:26:2c:8c:b8:0c:45:4b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E381BD703B94AA7B06975FB0FC88364AA7BA29E
        Validity
            Not Before: Jul 18 14:02:22 2025 GMT
            Not After : Jul 17 14:07:22 2026 GMT
        Subject: CN=A69863FB895A030B4B62D6CA8AEEE70E487D4F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:e9:b3:1f:9f:ef:59:a5:56:2d:c8:3e:ca:
                    44:ad:9f:37:13:db:f4:c9:ca:08:f5:9c:f9:2e:a6:
                    03:80:63:c0:8e:d5:41:09:05:d5:ff:8a:0b:83:fd:
                    19:2a:9f:7c:9a:bb:08:4e:ec:1e:96:33:f0:1e:0a:
                    85:48:eb:a0:c5:e9:87:66:76:22:05:21:5b:7b:13:
                    d5:ee:49:85:3b:c1:42:6f:a3:9a:3c:f0:a4:8d:da:
                    3f:45:1f:5f:7a:c1:9d:59:54:68:3a:b3:8e:42:6f:
                    b6:ef:62:bb:fd:86:bc:91:0c:04:42:7c:fd:04:a2:
                    df:a6:7d:53:39:ca:46:cf:67:ba:00:47:1e:7b:55:
                    a1:57:50:c6:94:04:c2:9e:6c:91:d6:09:4b:fa:b1:
                    f6:48:1a:a3:0d:70:b5:bb:20:c2:9a:3f:fe:d0:7c:
                    8a:10:6e:8d:23:89:63:4c:81:90:1e:5b:fd:36:df:
                    b4:f8:a5:2b:16:55:f9:ca:d5:a1:15:92:2c:44:6f:
                    7a:66:fa:28:ff:0d:2d:19:d9:c4:37:d5:0e:2d:52:
                    c9:5b:73:01:c1:10:1b:ac:75:19:03:0d:b6:fa:98:
                    03:d6:1c:5b:17:58:58:80:38:81:57:f7:67:d3:62:
                    65:d3:95:d1:a7:71:e7:8d:63:99:2d:ca:59:41:54:
                    d7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:98:63:FB:89:5A:03:0B:4B:62:D6:CA:8A:EE:E7:0E:48:7D:4F:18
            X509v3 Authority Key Identifier:
                keyid:4E:38:1B:D7:03:B9:4A:A7:B0:69:75:FB:0F:C8:83:64:AA:7B:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/323830343a373761633a3a2f33322d3333203d3e20323731313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:0a:d2:07:ae:26:bf:a7:16:bc:54:05:ba:99:0b:18:ba:5e:
         bd:17:93:bc:39:ce:fa:ab:af:56:8a:c1:64:20:c4:93:32:90:
         9b:db:f3:4e:4f:c4:8e:b1:e8:ba:2f:77:78:da:f9:f2:96:9d:
         f3:ce:b1:f0:d2:22:40:47:5b:fe:53:85:ef:d6:59:2d:d5:35:
         b2:71:bf:a0:32:e0:c6:98:77:59:a6:80:d8:78:3e:fe:90:31:
         c8:61:aa:dc:69:2b:3c:d3:1a:ad:32:57:61:d2:c8:b5:97:36:
         47:81:0a:c5:22:0d:8c:60:ce:5a:12:47:b9:ed:ab:ff:2e:1d:
         7c:7d:17:58:24:bc:83:ff:8c:ad:a1:c5:97:fc:ad:90:66:9c:
         73:20:d6:b4:40:b1:64:ec:1a:f3:74:9f:34:0a:7a:06:75:a0:
         eb:3a:89:4e:9b:a1:cc:f3:c7:be:f8:0c:5e:f1:ae:bb:fb:64:
         5c:c8:29:e1:fd:14:12:cb:17:ab:ac:13:63:bc:fd:12:d7:aa:
         96:63:cf:d1:aa:cd:21:2c:d4:f4:65:3c:00:d3:fe:bb:8a:48:
         c3:c0:0b:fb:8f:43:7e:cc:cb:57:b7:4e:f8:a2:1a:d4:4a:29:
         b3:1c:46:8e:4e:b4:0c:ab:d8:46:ed:12:b3:5f:24:46:d9:c9:
         8f:03:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:51:45 2025 by rpki-client