Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/323830343a313734303a3a2f33322d3438203d3e203533313037.roa
File:                     323830343a313734303a3a2f33322d3438203d3e203533313037.roa (raw, json)
Hash identifier:          7La5PlDUbUoZaq2R8NsmgJ7jX53yfwky05DBTrAS8SA=
Subject key identifier:   24:02:09:0A:63:86:7C:04:41:2A:11:62:72:81:7D:0C:AE:92:AD:75
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       269D6FB92144CEE881936748A41FADBEBE7165CE
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/323830343a313734303a3a2f33322d3438203d3e203533313037.roa
Signing time:             Tue 08 Jul 2025 01:04:44 +0000
ROA not before:           Tue 08 Jul 2025 00:59:44 +0000
ROA not after:            Tue 07 Jul 2026 01:04:44 +0000
asID:                     53107
IP address blocks:        2804:1740::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 09:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9d:6f:b9:21:44:ce:e8:81:93:67:48:a4:1f:ad:be:be:71:65:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jul  8 00:59:44 2025 GMT
            Not After : Jul  7 01:04:44 2026 GMT
        Subject: CN=2402090A63867C04412A116272817D0CAE92AD75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4e:5d:dc:e0:90:d9:a8:f6:fe:99:60:55:a0:
                    3e:8c:a4:88:98:ae:34:03:99:f7:eb:2b:f5:c4:3b:
                    33:23:19:b0:81:82:07:52:db:39:37:ff:e2:24:4b:
                    cb:56:8b:4b:cd:ce:ab:86:12:a3:11:c9:76:90:b3:
                    45:bc:fe:9f:7d:b3:a7:f2:74:42:13:00:25:f9:d6:
                    64:d7:c5:5a:2f:6a:94:3d:90:a6:70:d2:18:30:8b:
                    da:46:09:6d:cf:fb:e3:45:32:48:24:6c:5c:03:62:
                    74:d8:52:4f:c3:ea:2f:bb:74:18:de:33:8c:5e:fb:
                    c6:3d:69:a7:f0:ee:63:71:bf:bb:b5:a1:4e:2b:39:
                    e9:c3:f6:2f:a7:c3:fd:fe:7b:11:03:30:f0:59:54:
                    cc:e1:68:e1:ce:45:a7:a4:87:f3:4e:82:2a:e3:58:
                    36:46:b5:1a:06:8e:86:98:81:30:15:33:b4:4f:36:
                    53:cb:0f:cd:56:01:cb:fb:8c:4b:b0:be:3a:4f:26:
                    a5:16:b1:77:b2:d4:e9:ac:01:05:e5:e1:6d:86:20:
                    2d:99:e3:a1:3b:2c:cb:d5:9f:bb:40:92:11:fe:76:
                    6e:4b:04:53:ba:c9:5a:57:b2:76:cf:1e:52:9c:96:
                    71:58:c3:32:a6:39:c9:f9:33:06:38:61:3e:ba:3d:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:02:09:0A:63:86:7C:04:41:2A:11:62:72:81:7D:0C:AE:92:AD:75
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/323830343a313734303a3a2f33322d3438203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1740::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:d0:16:f0:d8:ed:fd:b4:0d:4d:a2:5f:dd:c7:7d:9f:23:df:
         b5:a4:55:40:8f:06:c6:5a:d4:2f:e1:c2:71:21:3b:6f:39:c6:
         c3:a4:25:1b:47:9c:10:6e:24:c4:17:3d:2c:71:93:bf:b5:71:
         88:04:49:46:30:95:a8:ec:07:e7:db:ec:d3:e2:bc:97:89:c3:
         3e:da:45:81:f1:0e:f8:94:47:02:72:aa:b8:02:b2:3a:36:42:
         66:f5:55:73:75:e5:f1:f4:e4:64:1e:1b:02:81:c9:61:24:2e:
         36:56:c8:80:3c:9c:77:41:2e:6c:56:1f:63:97:65:8d:9c:d7:
         58:b2:31:4b:d2:c4:50:56:5e:88:78:90:e2:69:0c:5c:11:d8:
         2f:68:46:30:9f:55:65:e8:e7:fc:d5:04:0d:74:a7:50:a9:c4:
         03:ea:2f:3a:05:7b:44:9f:66:30:5b:19:67:49:aa:ee:1e:34:
         0b:cc:1d:54:53:bf:2a:d9:7b:77:4e:de:5e:9f:14:8b:41:ff:
         14:12:1c:41:95:12:c3:bb:ab:42:bf:60:45:f0:2c:eb:c7:fb:
         d0:8c:de:ee:9b:00:34:78:5f:60:8d:26:9b:25:ca:48:4e:6c:
         73:71:0f:b5:63:c7:1f:88:89:43:e7:bc:8d:0a:40:45:7b:71:
         31:24:74:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:02:27 2025 by rpki-client