Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/323830343a316466383a3a2f33322d313238203d3e20323634343034.roa
File:                     323830343a316466383a3a2f33322d313238203d3e20323634343034.roa (raw, json)
Hash identifier:          ec1Zk7JGNh5slBLz+PZID/Uvujfx1n692BGaXyzD6Jg=
Subject key identifier:   A5:00:F7:D2:1F:40:92:6F:BE:01:AA:6F:E6:50:CB:99:49:E5:4B:AF
Certificate issuer:       /CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
Certificate serial:       39DEA071FE176A01C38C21B859005FC0265E4F06
Authority key identifier: 08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/323830343a316466383a3a2f33322d313238203d3e20323634343034.roa
Signing time:             Wed 16 Jul 2025 15:50:08 +0000
ROA not before:           Wed 16 Jul 2025 15:45:08 +0000
ROA not after:            Wed 15 Jul 2026 15:50:08 +0000
asID:                     264404
IP address blocks:        2804:1df8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl
                          rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 21:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:de:a0:71:fe:17:6a:01:c3:8c:21:b8:59:00:5f:c0:26:5e:4f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
        Validity
            Not Before: Jul 16 15:45:08 2025 GMT
            Not After : Jul 15 15:50:08 2026 GMT
        Subject: CN=A500F7D21F40926FBE01AA6FE650CB9949E54BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:a0:91:4b:94:4a:ba:e0:b2:cb:dd:e8:8a:
                    75:f3:b6:e0:5c:43:8a:f2:2a:c4:54:79:0d:70:0f:
                    ef:ac:2d:03:92:1c:1a:c8:e1:e9:2e:5e:29:5a:e0:
                    58:c6:06:d1:1b:60:cc:cc:0c:22:28:35:23:20:36:
                    3c:65:7b:2a:50:34:6a:e2:b2:39:cc:57:2a:f9:21:
                    72:a8:27:0a:2d:f2:89:24:aa:0d:74:20:a3:c5:60:
                    1d:59:8b:c1:99:0c:9c:7c:c7:6f:7e:64:01:e2:8b:
                    76:92:65:b2:22:36:24:e1:4b:8d:c1:7d:d3:84:d6:
                    a5:43:d3:df:37:bc:3c:ab:d9:af:27:9b:c8:70:73:
                    f1:71:a6:71:a4:46:c0:a6:64:b2:3b:d8:b6:92:81:
                    3d:c7:93:5b:fc:3c:c4:84:17:fb:8b:17:c8:1d:42:
                    5f:c8:d3:37:dd:55:b7:c1:ed:17:45:d7:fe:1e:59:
                    d6:80:54:0b:81:33:1a:a8:f9:57:6c:73:8f:e4:db:
                    8c:ad:87:0a:0a:ad:56:22:6c:7c:2a:d7:f7:6c:b4:
                    7d:92:72:45:09:4e:93:f6:99:a6:f4:a2:47:c5:ff:
                    e1:23:28:91:df:2a:1e:0c:dd:48:87:0e:d8:d9:21:
                    c2:bd:5e:dd:6e:1c:3e:b6:98:aa:38:3c:2c:96:4a:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:00:F7:D2:1F:40:92:6F:BE:01:AA:6F:E6:50:CB:99:49:E5:4B:AF
            X509v3 Authority Key Identifier:
                keyid:08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/323830343a316466383a3a2f33322d313238203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1df8::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:51:4a:a8:42:6b:27:7c:03:7f:b9:33:99:ac:96:21:9c:e4:
         de:f6:a5:76:bd:05:92:97:9f:f0:6b:b3:f8:fb:26:59:7b:0b:
         99:00:5c:aa:70:48:8f:c6:53:71:50:e0:8f:f2:a9:95:94:ec:
         a3:84:8e:c3:9d:65:7f:bf:af:ca:0b:b6:13:9a:75:9e:f3:b9:
         02:5b:b2:e8:a8:54:8c:3d:3d:39:d6:7e:f4:e7:01:bc:b9:43:
         17:1b:c3:00:a2:da:8f:eb:cc:7a:bf:9f:de:fc:bf:06:4d:fd:
         96:dd:e7:70:be:55:98:7e:b6:06:46:8a:41:03:5d:01:74:43:
         55:87:da:b2:6c:e9:e3:be:15:5d:29:cf:d0:e0:01:a8:39:b9:
         91:26:e2:de:13:bf:86:d8:42:08:9f:73:a2:20:e4:81:97:67:
         14:a2:1c:61:e8:5b:2a:e8:1d:b7:ba:80:58:bd:23:e3:ef:8d:
         92:90:11:fb:af:89:fd:87:bc:6e:39:df:6a:58:ad:a2:0d:3d:
         f8:d1:39:f9:e1:bd:e3:31:4c:ec:53:34:dd:02:3d:39:de:7c:
         49:2d:45:0d:d7:33:b6:c5:14:14:d1:43:71:fa:ae:3e:a2:1d:
         ae:fb:85:50:0f:1b:5f:d9:3a:e3:ee:5d:75:3b:f6:d7:21:64:
         25:33:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 00:20:09 2025 by rpki-client