Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a323a3a2f34382d3438203d3e20323730363330.roa
File:                     323830343a366566383a323a3a2f34382d3438203d3e20323730363330.roa (raw, json)
Hash identifier:          XoUMg10aK3QcyQUDi5HAs5oqVNiZkAbWoYhk4pSzp4M=
Subject key identifier:   7B:EE:79:CD:A3:C7:01:3C:F6:37:01:F5:BB:1B:28:ED:F1:D3:AD:6A
Certificate issuer:       /CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
Certificate serial:       6ABD513D2623A7AD25E62A874EF00848DCD42772
Authority key identifier: 3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a323a3a2f34382d3438203d3e20323730363330.roa
Signing time:             Wed 16 Jul 2025 21:14:59 +0000
ROA not before:           Wed 16 Jul 2025 21:09:59 +0000
ROA not after:            Wed 15 Jul 2026 21:14:59 +0000
asID:                     270630
IP address blocks:        2804:6ef8:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl
                          rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bd:51:3d:26:23:a7:ad:25:e6:2a:87:4e:f0:08:48:dc:d4:27:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
        Validity
            Not Before: Jul 16 21:09:59 2025 GMT
            Not After : Jul 15 21:14:59 2026 GMT
        Subject: CN=7BEE79CDA3C7013CF63701F5BB1B28EDF1D3AD6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:88:c0:c9:43:97:e0:b9:d3:bf:73:90:08:
                    30:1c:7f:15:f2:24:91:bb:80:db:be:52:e9:64:65:
                    13:2e:18:bc:15:d6:0a:5c:5d:17:c6:6d:fd:ed:52:
                    ed:ba:e1:bf:0c:ce:24:6d:1e:89:56:9a:52:4a:71:
                    c4:69:10:ad:20:15:81:b4:b9:a6:a9:fb:56:5c:5b:
                    cf:b1:6b:7e:0f:e7:b6:b4:2e:8e:41:dd:a2:34:28:
                    f6:61:f5:51:21:65:2d:4e:89:b1:3e:dd:26:41:22:
                    6a:13:46:87:f4:07:9f:8c:dd:af:b7:b7:ae:4e:4e:
                    a9:3c:ba:42:cf:8e:1f:c3:43:6d:7c:8f:54:fa:8d:
                    2b:7a:6c:2b:12:54:d8:17:2d:a7:10:a9:dd:94:78:
                    f8:34:70:9e:9d:2b:0b:65:ff:46:be:eb:a0:4f:1c:
                    1a:59:35:04:0b:05:43:d7:90:8f:b2:03:b9:41:ce:
                    91:99:a8:d4:77:26:cc:5c:aa:c7:5a:f1:4b:13:d6:
                    9c:1e:cc:04:f7:25:98:f0:17:5c:bb:89:60:ab:aa:
                    b7:e3:c4:89:ed:83:81:98:e8:bb:81:16:92:ff:48:
                    ff:93:69:18:f1:10:02:bb:8e:42:05:8d:97:fe:55:
                    be:26:7d:84:37:8b:09:56:10:43:d0:83:ad:4d:1a:
                    cf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EE:79:CD:A3:C7:01:3C:F6:37:01:F5:BB:1B:28:ED:F1:D3:AD:6A
            X509v3 Authority Key Identifier:
                keyid:3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a323a3a2f34382d3438203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef8:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:39:0d:5a:cc:38:b5:01:fb:8a:aa:cb:5f:e2:13:bb:7b:44:
         eb:a6:0c:32:ad:d7:5e:a3:ea:a1:f0:09:06:d2:5b:b6:bf:28:
         3f:ac:e0:66:fb:b9:59:17:2f:ac:70:cd:7d:07:01:35:54:9b:
         4a:b2:45:df:fb:0c:68:77:1e:53:41:87:59:60:2f:8a:72:cd:
         21:d7:ac:8e:73:b2:0e:20:88:1a:8a:76:8b:69:63:95:10:f3:
         25:de:a6:c6:54:f0:bc:83:45:5f:bd:8d:a7:11:ef:fd:db:f9:
         6f:06:9c:6e:3b:47:3a:c3:b8:fc:bd:87:5c:9a:bc:fd:0c:06:
         9b:d6:1f:ed:df:55:48:6c:da:f7:02:a3:d6:09:7e:99:55:db:
         62:d5:05:03:4d:93:a0:ce:d8:c7:73:95:ed:ea:d5:0b:0d:03:
         6d:da:22:41:d6:73:7f:56:a8:fd:73:f0:52:16:04:a7:28:1d:
         b4:c6:d5:73:c0:5e:49:f8:1b:e7:ff:a9:08:cb:8a:d1:70:bf:
         f3:fe:76:0b:2e:c9:82:21:bb:4c:b3:df:ac:9d:fb:4b:58:a9:
         93:4b:b7:c2:fb:0b:98:35:a9:c1:81:33:1c:f1:45:ab:c6:66:
         8b:5d:ef:5f:84:b9:91:86:0e:9a:8c:30:12:d1:e4:8f:41:d7:
         25:e9:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:56:17 2025 by rpki-client