Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a313a3a2f34382d3438203d3e20323730363330.roa
File:                     323830343a366566383a313a3a2f34382d3438203d3e20323730363330.roa (raw, json)
Hash identifier:          A4qRM3+Pqj3Cz9Phv4pB+ipK6IXJBYltudNHnGzl1XU=
Subject key identifier:   6B:94:FB:6E:BA:5F:73:51:A2:76:98:62:F6:19:96:C6:71:34:7D:9E
Certificate issuer:       /CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
Certificate serial:       5474B66FF5B03953710FC472F646F26377A9A4E6
Authority key identifier: 3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a313a3a2f34382d3438203d3e20323730363330.roa
Signing time:             Wed 16 Jul 2025 21:15:01 +0000
ROA not before:           Wed 16 Jul 2025 21:10:01 +0000
ROA not after:            Wed 15 Jul 2026 21:15:01 +0000
asID:                     270630
IP address blocks:        2804:6ef8:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl
                          rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:74:b6:6f:f5:b0:39:53:71:0f:c4:72:f6:46:f2:63:77:a9:a4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
        Validity
            Not Before: Jul 16 21:10:01 2025 GMT
            Not After : Jul 15 21:15:01 2026 GMT
        Subject: CN=6B94FB6EBA5F7351A2769862F61996C671347D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ea:f8:70:cf:6d:e4:bc:52:d5:8c:3d:32:f4:
                    ed:7e:42:bd:54:74:3a:9d:83:45:dc:d3:69:2a:93:
                    42:88:4d:6c:06:59:99:d1:f1:b7:79:89:7b:c7:14:
                    b0:c1:25:c1:40:9f:e6:77:18:fb:d5:7a:6e:76:60:
                    bb:2b:f4:c0:4c:c4:ac:06:49:40:22:1f:ac:6b:c1:
                    c8:56:0f:f9:8b:bb:f1:c4:92:85:f4:53:49:83:9d:
                    55:33:08:8c:ae:bc:8b:27:f6:3e:17:9e:38:ba:4f:
                    4d:f1:64:49:8b:09:a4:3b:ed:2a:35:35:c9:a7:ef:
                    3d:a9:7c:00:81:eb:95:79:05:55:ec:1b:64:dc:b4:
                    68:3a:b1:d6:fb:2e:e4:ae:2d:a2:89:01:d9:cc:af:
                    41:99:62:0e:29:dc:0e:37:a3:d5:22:f7:62:c9:11:
                    08:ba:c3:b0:22:17:0d:8f:64:25:56:2b:e7:2c:61:
                    21:21:0f:25:07:fb:a8:c8:a8:bd:53:be:8b:1f:5d:
                    c3:d4:44:9d:79:75:4b:9d:80:21:2e:db:9f:c9:72:
                    a3:b5:85:6b:5c:6c:f6:c8:9e:b3:7b:da:88:78:e2:
                    0c:7a:04:77:13:2d:fc:67:1a:89:ba:77:cb:09:15:
                    75:35:fb:57:33:af:14:77:26:e8:af:bc:44:bf:8b:
                    40:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:94:FB:6E:BA:5F:73:51:A2:76:98:62:F6:19:96:C6:71:34:7D:9E
            X509v3 Authority Key Identifier:
                keyid:3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a313a3a2f34382d3438203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef8:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:36:41:ec:5b:78:78:31:2b:9f:64:e7:a1:32:51:c1:5c:dc:
         ed:0f:0e:1a:6e:4c:48:e9:93:58:0e:fe:c0:19:69:4c:d3:65:
         b8:b8:cc:9e:f8:56:f3:4a:7e:52:5f:74:b8:99:f2:98:3c:d1:
         23:3b:85:4c:79:22:a4:fd:0e:e2:50:93:29:25:f6:11:39:af:
         1e:2a:67:ca:ac:44:9c:1d:d6:26:51:c2:13:4c:c2:36:d2:d4:
         0f:c5:12:d2:39:da:ac:1a:00:c0:3e:ba:c0:75:1b:ee:41:60:
         13:72:e7:02:bf:a9:fa:f0:35:0f:39:5a:6c:07:7f:12:82:5b:
         09:3e:f8:ad:bc:3e:33:af:74:dd:36:bd:3b:9a:32:9a:2d:dd:
         7a:30:fc:bc:3c:9a:97:5e:6e:ef:ed:ea:ca:54:e5:d9:e5:b4:
         7b:a9:1c:62:92:17:d9:bb:b1:bc:ba:fc:cd:42:3b:35:27:f3:
         e0:98:5c:60:4b:0e:c6:28:ee:bd:ce:76:5c:b9:2f:df:d6:82:
         01:6a:ee:3b:8f:6b:e3:69:5e:38:e4:fa:d5:25:b0:1c:cc:09:
         68:7f:3d:7b:50:95:1b:d9:94:18:dc:1f:aa:6d:58:ea:1a:66:
         0b:ec:5b:da:b1:da:35:8f:76:74:a4:11:ce:80:5b:b7:27:5a:
         01:1b:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:52:46 2025 by rpki-client