Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/323830343a323363303a3a2f33312d313238203d3e203236323138.roa
File:                     323830343a323363303a3a2f33312d313238203d3e203236323138.roa (raw, json)
Hash identifier:          VkuENuECfMS2AAHfi5VWQwqd0vgcTx20YTSMY6q/3NA=
Subject key identifier:   E3:0B:CB:3F:F7:71:A7:33:28:0D:30:92:45:27:B5:9C:2F:4D:C0:FE
Certificate issuer:       /CN=9770257936E461D669B9314A6D8D5DA9DA838EFC
Certificate serial:       573A1D31D1E160835DAEA4AA07AA53818EF5293D
Authority key identifier: 97:70:25:79:36:E4:61:D6:69:B9:31:4A:6D:8D:5D:A9:DA:83:8E:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770257936E461D669B9314A6D8D5DA9DA838EFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/323830343a323363303a3a2f33312d313238203d3e203236323138.roa
Signing time:             Wed 25 Jun 2025 15:15:03 +0000
ROA not before:           Wed 25 Jun 2025 15:10:03 +0000
ROA not after:            Wed 24 Jun 2026 15:15:03 +0000
asID:                     26218
IP address blocks:        2804:23c0::/31 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/9770257936E461D669B9314A6D8D5DA9DA838EFC.crl
                          rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/9770257936E461D669B9314A6D8D5DA9DA838EFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770257936E461D669B9314A6D8D5DA9DA838EFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3a:1d:31:d1:e1:60:83:5d:ae:a4:aa:07:aa:53:81:8e:f5:29:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9770257936E461D669B9314A6D8D5DA9DA838EFC
        Validity
            Not Before: Jun 25 15:10:03 2025 GMT
            Not After : Jun 24 15:15:03 2026 GMT
        Subject: CN=E30BCB3FF771A733280D30924527B59C2F4DC0FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:fd:e5:ef:57:81:1c:88:c7:69:9d:fd:7f:
                    72:66:8b:6e:0d:bb:37:73:f3:5d:ed:30:98:cf:40:
                    c6:ab:45:9e:a1:5c:db:64:2e:e2:6f:1a:6c:6d:6a:
                    cf:92:29:50:b1:2e:d0:3f:20:d7:7c:be:0a:16:86:
                    f5:f0:df:11:ba:e3:f1:ae:ab:ef:19:12:63:59:79:
                    73:01:1d:f9:18:b8:c4:c2:fa:5c:f4:f4:6b:b2:1a:
                    dd:b3:09:f7:65:6b:f4:c1:4b:41:6b:2c:ed:6d:8f:
                    aa:4b:36:79:ec:ca:55:97:2a:b0:08:71:70:0a:34:
                    b7:da:fe:6c:94:74:72:d0:5d:17:27:cd:93:c4:ef:
                    00:8b:04:b8:b9:cf:10:a2:1a:8c:5a:ae:58:a3:a8:
                    f9:42:dc:be:7d:43:50:ad:67:f5:50:d0:d0:0c:7b:
                    8e:1a:f3:14:2b:46:99:a8:1f:c5:1c:85:39:5b:e5:
                    80:91:0f:44:8e:07:01:a2:73:46:d9:ea:5a:c6:eb:
                    17:89:fd:50:f2:ef:36:f0:a2:f6:a4:b2:f3:8b:88:
                    e5:d6:a5:1f:c6:ca:f7:64:44:56:a8:e9:2f:38:2a:
                    95:16:0f:31:d8:5c:36:23:c2:9e:6d:a0:ad:3a:af:
                    a4:d3:17:e1:d5:19:58:5f:d0:a0:3b:9a:66:fe:48:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0B:CB:3F:F7:71:A7:33:28:0D:30:92:45:27:B5:9C:2F:4D:C0:FE
            X509v3 Authority Key Identifier:
                keyid:97:70:25:79:36:E4:61:D6:69:B9:31:4A:6D:8D:5D:A9:DA:83:8E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/9770257936E461D669B9314A6D8D5DA9DA838EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770257936E461D669B9314A6D8D5DA9DA838EFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/323830343a323363303a3a2f33312d313238203d3e203236323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c0::/31

    Signature Algorithm: sha256WithRSAEncryption
         69:91:39:f4:ac:d3:ba:03:92:5b:2e:2f:a5:af:26:ec:e2:dd:
         b4:07:44:83:11:fa:e0:93:51:ab:4a:15:b4:a3:9f:2c:74:4d:
         00:01:d3:6a:1c:b4:a0:ad:a7:51:ce:90:0c:28:22:bb:e1:69:
         27:e0:b2:b5:3f:64:40:42:da:4c:9a:f3:69:33:74:67:57:98:
         3f:ba:b0:8b:6f:b5:f3:bd:6f:4a:05:e8:a6:d6:9f:05:ea:86:
         c9:7f:60:bd:ec:77:21:67:3f:98:4c:1a:d7:e5:31:66:ff:64:
         7e:b0:1e:b0:29:e1:42:1b:9b:17:3a:d8:c5:c4:31:63:38:7b:
         5c:2f:f1:98:0a:08:22:a3:0b:22:52:64:7a:8e:e1:1b:93:39:
         4d:be:c9:cf:da:9f:78:c9:f8:34:ab:08:ac:92:5d:b1:c5:37:
         fb:37:71:00:8b:c1:97:02:62:5a:b3:68:73:61:3d:45:6a:ba:
         1a:b0:ee:32:ff:51:a1:bc:9e:6b:33:0a:c7:8e:2e:e3:04:5d:
         b7:37:d6:fc:7e:2f:18:3a:d8:c7:26:8e:93:7b:ea:58:37:89:
         b3:3f:a8:16:2a:04:97:32:13:4a:bf:8c:a6:8c:3c:a1:a9:91:
         22:1e:a8:51:fc:1c:86:23:53:0a:b5:07:be:08:e1:aa:0a:b0:
         e8:cd:f1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:20:23 2025 by rpki-client