Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/323830343a383533343a3a2f33322d3332203d3e20323732353634.roa
File:                     323830343a383533343a3a2f33322d3332203d3e20323732353634.roa (raw, json)
Hash identifier:          s+gYmnjwq4pbfpn/CQqsYroc+xXog7EiejiVhR52moo=
Subject key identifier:   25:D6:54:B7:8E:78:80:57:4D:EA:77:A8:7E:85:1E:71:7E:D9:99:58
Certificate issuer:       /CN=8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA
Certificate serial:       74469218D0BDBFEB462007EC41B0FCF4CAF866FF
Authority key identifier: 8B:8B:1C:29:5E:F2:38:6F:8F:2B:BD:18:93:D8:D1:64:EE:B2:41:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/323830343a383533343a3a2f33322d3332203d3e20323732353634.roa
Signing time:             Fri 29 Aug 2025 02:08:32 +0000
ROA not before:           Fri 29 Aug 2025 02:03:32 +0000
ROA not after:            Fri 28 Aug 2026 02:08:32 +0000
asID:                     272564
IP address blocks:        2804:8534::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl
                          rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Sep 2025 01:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:46:92:18:d0:bd:bf:eb:46:20:07:ec:41:b0:fc:f4:ca:f8:66:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA
        Validity
            Not Before: Aug 29 02:03:32 2025 GMT
            Not After : Aug 28 02:08:32 2026 GMT
        Subject: CN=25D654B78E7880574DEA77A87E851E717ED99958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:0d:49:fb:56:c5:ab:0c:60:d9:72:7b:72:
                    97:17:9c:e8:42:64:45:17:20:93:1e:89:42:fb:db:
                    ef:88:17:a1:4f:58:a1:91:d2:45:49:f6:43:f1:6e:
                    d7:97:b6:a7:a0:93:5c:4b:b6:e8:3c:93:ce:71:e0:
                    b0:53:69:7b:a8:07:32:bb:b3:72:39:37:5a:b7:5c:
                    a0:37:5e:3a:a1:24:45:12:bf:a7:80:7e:e8:11:08:
                    1e:31:4e:99:26:76:df:3b:b9:02:4d:3b:85:b5:6a:
                    e1:b8:1a:6a:38:e4:8f:ff:33:f7:90:09:6b:9b:44:
                    8c:9d:cf:93:95:ad:35:ba:26:64:26:ce:ed:4d:af:
                    6e:3b:9a:e9:d8:49:e0:cc:5d:a4:23:c6:13:67:f3:
                    a5:36:87:93:b8:df:7b:fa:a0:73:09:6a:ce:8a:b9:
                    ee:8e:7d:37:9a:71:45:81:1a:ea:5d:9b:ff:98:b2:
                    82:eb:fc:ce:2d:2c:7f:85:9d:3f:b1:56:9b:40:26:
                    ea:01:39:4e:7c:46:96:48:ee:90:6d:85:1f:86:4b:
                    74:04:5d:05:45:90:88:a3:19:7d:93:ca:92:c3:37:
                    3d:9f:6c:1d:14:0a:05:72:1a:97:13:ea:a6:07:85:
                    46:35:e2:14:8a:ff:5a:3b:d0:c6:18:94:93:c4:d2:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D6:54:B7:8E:78:80:57:4D:EA:77:A8:7E:85:1E:71:7E:D9:99:58
            X509v3 Authority Key Identifier:
                keyid:8B:8B:1C:29:5E:F2:38:6F:8F:2B:BD:18:93:D8:D1:64:EE:B2:41:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/323830343a383533343a3a2f33322d3332203d3e20323732353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8534::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:02:25:b6:5d:b1:94:4a:d0:85:f9:c3:81:1c:01:48:4b:2b:
         b4:bc:53:1f:98:97:91:07:0d:a4:59:29:b8:bc:23:ea:25:7b:
         22:be:d6:8b:1d:dd:61:f1:06:14:37:44:a8:1a:fa:ef:31:54:
         e1:68:3f:04:10:a2:eb:4c:50:c0:9b:01:dc:36:29:9b:df:9f:
         24:19:0e:28:7a:3a:3b:2d:53:4c:00:08:c9:3b:c4:14:70:fc:
         62:3e:42:c1:e9:33:c1:21:e6:6a:5e:80:60:2c:08:56:4b:13:
         cf:f6:f1:13:47:66:3e:8d:74:1f:78:6e:08:79:14:f0:90:f9:
         e1:ac:18:cd:ce:96:74:c9:62:e5:2f:c0:92:b4:f5:e2:03:52:
         84:14:fd:75:b6:c2:ab:68:b3:2b:ff:19:38:a2:c7:6b:07:4b:
         52:9f:ef:77:e7:98:25:04:20:a0:d2:4a:a7:27:89:25:03:95:
         71:b3:74:cb:0c:78:f7:d7:4c:d2:33:8f:46:26:08:40:9d:97:
         94:4b:58:b4:9b:67:58:82:5d:84:65:1b:06:2f:b2:fe:ed:43:
         05:53:e0:8e:06:b6:7b:93:e1:7a:38:17:90:b5:06:d3:53:63:
         42:a5:2f:21:6e:6e:5a:ce:a4:85:47:ee:3c:50:ec:09:96:51:
         f8:75:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:45:59 2025 by rpki-client