Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/323830343a336530303a3130303a3a2f34302d3430203d3e203238313630.roa
File:                     323830343a336530303a3130303a3a2f34302d3430203d3e203238313630.roa (raw, json)
Hash identifier:          wFyWZwS+rEZx1qnpd6rGm6oUvirCa7nyON4c//waZ6U=
Subject key identifier:   80:56:8C:53:8E:84:F3:1E:21:5D:B1:58:45:21:B5:EF:CF:13:FD:86
Certificate issuer:       /CN=07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56
Certificate serial:       474BCF199FE323D9E8B82EB344DFB976D586D686
Authority key identifier: 07:BA:B4:0D:FE:C0:A8:3E:0B:A6:12:10:DF:BE:C3:E0:BC:49:DD:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/323830343a336530303a3130303a3a2f34302d3430203d3e203238313630.roa
Signing time:             Wed 02 Jul 2025 18:55:08 +0000
ROA not before:           Wed 02 Jul 2025 18:50:08 +0000
ROA not after:            Wed 01 Jul 2026 18:55:08 +0000
asID:                     28160
IP address blocks:        2804:3e00:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4b:cf:19:9f:e3:23:d9:e8:b8:2e:b3:44:df:b9:76:d5:86:d6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56
        Validity
            Not Before: Jul  2 18:50:08 2025 GMT
            Not After : Jul  1 18:55:08 2026 GMT
        Subject: CN=80568C538E84F31E215DB1584521B5EFCF13FD86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:89:ae:73:f7:8e:f9:04:d1:d9:14:fb:3d:
                    78:c4:13:d2:a2:29:9e:55:f4:5e:f4:4e:76:c9:cd:
                    db:9f:b5:c4:0b:ad:e9:d3:cf:63:07:e6:d9:c3:4b:
                    ca:cb:2d:a7:37:9a:31:7c:6d:1b:f0:26:da:7e:8a:
                    b5:8a:53:42:02:8b:04:3a:65:de:0c:c3:c3:c2:60:
                    8f:0a:16:d0:3a:9b:5c:11:36:66:7c:70:b3:1d:47:
                    d7:f8:e3:96:bb:09:a8:72:f3:1c:ad:b4:fe:5d:1a:
                    37:cf:7a:fc:f1:c4:0b:8b:04:f1:54:b9:60:00:32:
                    91:25:16:65:6e:b0:94:1e:2e:1a:47:b5:d0:65:2d:
                    cb:f9:35:4b:23:3e:db:9c:c5:73:65:03:0a:d4:9f:
                    12:f2:57:2c:42:4d:c0:6a:2c:aa:a1:4a:e1:f0:1d:
                    3c:44:9e:1e:97:9c:a6:9e:bb:41:98:c8:b4:8e:b4:
                    85:65:49:28:2b:73:cc:16:5d:b5:ae:10:f6:1d:d6:
                    c6:ff:24:d7:63:2e:d1:df:50:be:a3:c6:02:b0:0b:
                    9d:78:c9:b2:cb:cf:5b:a9:44:0e:5a:c6:b9:fd:6a:
                    45:b9:31:df:96:f2:02:01:f6:eb:4c:24:1b:43:8d:
                    17:b6:1a:fe:0a:a0:18:b2:70:3d:3e:34:45:9d:1e:
                    86:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:56:8C:53:8E:84:F3:1E:21:5D:B1:58:45:21:B5:EF:CF:13:FD:86
            X509v3 Authority Key Identifier:
                keyid:07:BA:B4:0D:FE:C0:A8:3E:0B:A6:12:10:DF:BE:C3:E0:BC:49:DD:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/323830343a336530303a3130303a3a2f34302d3430203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e00:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:b2:0d:f5:3b:cf:08:1c:80:50:f9:54:6e:90:6b:bd:0a:15:
         5d:ca:39:dc:bc:44:56:6d:de:89:f4:7e:fa:f2:a1:58:d8:72:
         3e:d0:91:a4:f9:04:28:af:6a:93:c4:ed:87:4c:63:ed:ea:2f:
         64:5c:6c:4d:0b:db:e2:7d:fa:89:52:24:4d:98:d6:58:22:82:
         54:78:46:20:f6:a8:ab:32:5f:f5:2b:df:c1:f5:f1:b6:54:79:
         45:0b:64:0c:1a:d2:15:7f:31:76:c0:a6:02:51:ab:5d:8a:0d:
         ba:1b:14:c0:cf:27:1c:58:a3:ed:ed:58:c4:03:90:6e:a4:0f:
         b7:13:53:4a:99:5e:18:f7:d3:9f:3e:58:b4:58:e8:bd:e0:b1:
         9d:f4:f1:05:eb:3b:60:ed:d5:cc:12:68:7d:cd:16:7f:32:ad:
         f6:6a:83:6a:5c:f6:bb:22:8b:84:0b:92:80:df:7e:90:fa:b5:
         fb:1e:59:52:a5:ed:19:0e:1f:ed:1d:cc:78:25:0a:a9:e3:d9:
         34:4e:a7:cf:65:26:e7:46:33:c2:bf:5a:c4:de:ba:6b:c2:8d:
         1a:b2:ab:14:fa:55:a0:ce:a4:e0:90:da:a5:d3:8b:04:89:d2:
         15:77:52:32:00:3c:f1:2a:ba:93:42:ec:d6:f9:6b:01:eb:ab:
         9a:33:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:11:28 2025 by rpki-client