Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/323830343a326665633a3a2f33322d313238203d3e203532393931.roa
File:                     323830343a326665633a3a2f33322d313238203d3e203532393931.roa (raw, json)
Hash identifier:          3my3uv7ltgNut1ncZIKASqKiMcpFfLlntY163c+uZmc=
Subject key identifier:   1E:7A:B2:FD:FB:32:99:3D:30:F1:7F:63:C1:07:39:A5:F3:D8:F8:D6
Certificate issuer:       /CN=1A38A38646592073E79DD636D868C5FD813E2EAB
Certificate serial:       6B7F2C455091F4228753A6048276370FBD4A6CF0
Authority key identifier: 1A:38:A3:86:46:59:20:73:E7:9D:D6:36:D8:68:C5:FD:81:3E:2E:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/323830343a326665633a3a2f33322d313238203d3e203532393931.roa
Signing time:             Mon 12 May 2025 16:18:51 +0000
ROA not before:           Mon 12 May 2025 16:13:51 +0000
ROA not after:            Mon 11 May 2026 16:18:51 +0000
asID:                     52991
IP address blocks:        2804:2fec::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.crl
                          rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 07:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7f:2c:45:50:91:f4:22:87:53:a6:04:82:76:37:0f:bd:4a:6c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A38A38646592073E79DD636D868C5FD813E2EAB
        Validity
            Not Before: May 12 16:13:51 2025 GMT
            Not After : May 11 16:18:51 2026 GMT
        Subject: CN=1E7AB2FDFB32993D30F17F63C10739A5F3D8F8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:fc:6c:5f:bd:df:69:5c:ca:38:32:16:66:
                    88:e3:68:d2:4a:76:62:7f:20:a1:6e:58:02:d2:63:
                    ee:4f:a7:ff:4f:f3:5c:3c:c5:e2:f7:9c:d2:c0:0d:
                    95:c6:5e:26:69:f7:5b:47:0c:43:c2:b6:94:3c:5e:
                    9d:b5:18:40:db:a8:a0:e4:54:21:ff:26:11:62:43:
                    c5:87:f8:c1:1d:66:cd:b6:71:a1:46:93:c8:08:8c:
                    04:b3:91:94:30:6a:66:d6:ff:05:f0:aa:24:8b:31:
                    3b:23:25:b3:0d:99:99:5a:8b:6c:7c:c6:0f:24:f0:
                    63:d6:01:37:13:42:a5:62:d6:01:ad:41:f5:09:f5:
                    ba:0d:ba:7b:4d:8d:c0:cc:f3:d0:50:f3:01:7b:65:
                    62:4d:ec:97:21:d0:be:96:8b:5a:39:cd:f4:fb:8d:
                    9e:22:58:4e:95:63:12:e4:02:ec:c6:af:58:d2:b7:
                    64:22:1e:fb:b2:6a:1d:9a:bd:4b:f7:45:d0:2a:c3:
                    f7:b1:5f:f6:ec:b0:55:01:b6:07:7c:30:6a:78:06:
                    96:ee:bf:17:9e:e0:4f:2b:19:07:d1:d2:d8:83:20:
                    90:92:84:c7:cb:2d:1a:c7:fd:5f:95:3a:26:59:f9:
                    c2:4d:7b:d4:52:a8:4f:6d:b1:d1:43:56:88:61:ad:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7A:B2:FD:FB:32:99:3D:30:F1:7F:63:C1:07:39:A5:F3:D8:F8:D6
            X509v3 Authority Key Identifier:
                keyid:1A:38:A3:86:46:59:20:73:E7:9D:D6:36:D8:68:C5:FD:81:3E:2E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/323830343a326665633a3a2f33322d313238203d3e203532393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fec::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:15:c2:17:6e:05:c1:94:6e:11:4b:b8:a2:a3:d0:95:67:c6:
         3c:97:c1:ae:c7:34:d7:6e:1b:5b:48:42:ba:ed:95:eb:f8:ff:
         3c:72:14:40:d9:f3:ed:c3:8c:91:fb:66:84:c6:d8:f9:df:d5:
         da:92:7a:12:5d:e5:8d:0f:00:8b:3e:e6:44:03:d2:ad:5b:0b:
         d0:2e:cf:1c:68:42:31:98:4c:17:28:e9:a9:c2:80:af:65:0f:
         ed:c1:24:23:e4:53:07:6f:87:cf:c0:65:a9:d2:2e:eb:aa:b9:
         27:df:a6:7b:a4:3d:93:26:fa:cb:d1:a7:f3:a9:17:52:3e:0c:
         79:eb:40:fe:f3:78:ab:76:2f:09:3f:5b:e0:a5:84:97:5e:95:
         35:18:09:d9:9c:fd:bf:1c:62:7f:76:13:77:69:11:42:5e:b7:
         8b:08:19:25:3e:bf:33:44:1d:d1:85:1d:c6:de:73:de:6c:7c:
         6a:51:53:f7:40:21:dc:cc:a5:bb:9e:2e:19:cd:61:c6:9f:0c:
         76:ec:4d:06:8a:74:8e:39:df:cd:d4:10:f1:61:15:f0:fe:1b:
         ec:33:03:75:d0:89:6b:84:50:d5:43:1c:09:16:3b:c9:50:95:
         b9:76:ce:39:81:06:36:d3:49:dd:b2:e8:54:25:6b:67:c3:66:
         e7:c7:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:02:56 2025 by rpki-client