Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33352d3335203d3e20323730363330.roa
File:                     323830343a366566383a3a2f33352d3335203d3e20323730363330.roa (raw, json)
Hash identifier:          wacQ5ZrcJ8xc4Ky3GM3wHeh+tX4CoyHbJUyaCoUVUGo=
Subject key identifier:   64:02:7C:70:A3:1A:55:BD:FA:FF:C1:46:65:3D:FC:E4:13:EF:92:92
Certificate issuer:       /CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
Certificate serial:       3029915FA03449D48E75CE7C783C4AF25CA40D31
Authority key identifier: 3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33352d3335203d3e20323730363330.roa
Signing time:             Wed 16 Jul 2025 21:14:59 +0000
ROA not before:           Wed 16 Jul 2025 21:09:59 +0000
ROA not after:            Wed 15 Jul 2026 21:14:59 +0000
asID:                     270630
IP address blocks:        2804:6ef8::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl
                          rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:29:91:5f:a0:34:49:d4:8e:75:ce:7c:78:3c:4a:f2:5c:a4:0d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
        Validity
            Not Before: Jul 16 21:09:59 2025 GMT
            Not After : Jul 15 21:14:59 2026 GMT
        Subject: CN=64027C70A31A55BDFAFFC146653DFCE413EF9292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e1:e4:1f:e2:4c:f1:1b:5a:a9:4c:97:7a:38:
                    f5:57:cb:cd:18:7d:d6:9a:87:d9:6a:35:a1:a4:9b:
                    b9:8a:46:ba:7e:9b:b1:5b:08:f4:1a:ac:9c:33:59:
                    fb:5a:14:8f:d0:2c:95:12:61:61:6f:39:f6:54:a7:
                    f2:1b:4a:34:95:88:ee:d6:27:ab:ff:21:03:99:f8:
                    49:97:16:b7:48:64:e1:3a:32:2f:17:d2:96:7e:e2:
                    ac:f0:da:3e:30:78:15:e7:d5:30:57:e9:02:0a:f6:
                    6f:4f:ef:32:1a:b7:1e:b3:dd:4f:0b:6e:c8:0f:b2:
                    06:48:b1:f2:90:9a:47:45:9e:c9:7b:22:b2:e4:47:
                    e5:b9:34:51:6e:91:b2:b1:b6:6e:fd:e2:e3:b1:20:
                    03:0d:fe:df:cc:6b:1c:3f:fd:33:d9:70:f3:d2:58:
                    86:bb:29:75:ca:42:4a:0b:62:4e:0d:bd:c6:07:f3:
                    13:56:b1:a4:ce:44:4e:a4:71:dd:6f:0c:c6:d6:a9:
                    ff:50:ab:ef:bf:93:49:0d:f6:dc:2b:37:0c:92:64:
                    2c:3b:62:54:98:1f:30:df:f8:eb:29:c1:52:fa:ca:
                    b4:b5:98:2a:5a:f2:19:9d:88:82:75:ac:f0:fe:a0:
                    79:d4:3f:c1:66:71:96:b3:16:5a:db:71:9a:da:b0:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:02:7C:70:A3:1A:55:BD:FA:FF:C1:46:65:3D:FC:E4:13:EF:92:92
            X509v3 Authority Key Identifier:
                keyid:3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33352d3335203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef8::/35

    Signature Algorithm: sha256WithRSAEncryption
         7c:7d:94:4f:c9:3d:94:0f:13:ae:95:32:5d:78:e5:74:23:e4:
         c8:f4:af:05:a6:16:1a:e1:7c:b8:84:41:2e:79:fd:f1:73:d9:
         37:66:eb:eb:aa:9d:50:d2:54:7e:13:a1:f6:c6:8c:c7:0d:27:
         a4:56:a2:ef:83:a7:a8:71:d7:95:06:5f:3a:c6:62:e8:20:bf:
         ca:fc:fe:7e:e9:23:bd:bb:1b:e2:9a:8b:dc:23:c0:4c:12:f6:
         c7:07:61:f3:0f:4f:c1:6a:09:93:aa:e6:ee:2b:16:cd:1d:4f:
         b9:1f:ee:e2:91:00:1c:ba:6c:68:0c:b6:16:33:20:4f:41:aa:
         e6:32:49:a4:36:3f:6d:a5:c0:82:e1:e9:96:a5:c4:29:b5:1f:
         35:69:86:3e:92:4a:57:1f:9b:3d:fd:40:81:5a:01:f8:b9:d7:
         26:56:5e:ea:f1:98:81:1d:21:c1:b6:0d:80:15:a5:d3:dc:80:
         ff:92:bb:26:6f:cd:37:c7:e9:32:bf:e0:2f:ae:09:7d:b0:4d:
         f9:e3:55:a7:d6:8a:49:a4:47:d6:17:09:d6:d0:f9:4c:d5:15:
         62:a7:37:2f:97:31:ac:2e:10:27:26:68:b4:97:ab:0a:04:a6:
         b5:d3:55:ef:fa:f2:6b:e0:5c:1e:a3:4b:c3:91:5d:4e:65:5c:
         5c:b2:ec:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:52:41 2025 by rpki-client