Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33332d3333203d3e20323733373238.roa
File:                     323830343a386235633a3a2f33332d3333203d3e20323733373238.roa (raw, json)
Hash identifier:          Vy4e3FOMALruubewnqZsVlklwCDtvOZFY17BF8JEQ1o=
Subject key identifier:   87:2A:4C:44:1B:93:61:4D:B9:40:2C:43:1A:4E:DA:ED:38:78:BE:C6
Certificate issuer:       /CN=2043B8FB38968B048E58247F12DDC4C0CE395D2B
Certificate serial:       268C4AB08BF1EAC0EA48C50C81A6EA5C128FA646
Authority key identifier: 20:43:B8:FB:38:96:8B:04:8E:58:24:7F:12:DD:C4:C0:CE:39:5D:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2043B8FB38968B048E58247F12DDC4C0CE395D2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33332d3333203d3e20323733373238.roa
Signing time:             Mon 07 Jul 2025 02:11:42 +0000
ROA not before:           Mon 07 Jul 2025 02:06:42 +0000
ROA not after:            Mon 06 Jul 2026 02:11:42 +0000
asID:                     273728
IP address blocks:        2804:8b5c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/2043B8FB38968B048E58247F12DDC4C0CE395D2B.crl
                          rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/2043B8FB38968B048E58247F12DDC4C0CE395D2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2043B8FB38968B048E58247F12DDC4C0CE395D2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 23:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8c:4a:b0:8b:f1:ea:c0:ea:48:c5:0c:81:a6:ea:5c:12:8f:a6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2043B8FB38968B048E58247F12DDC4C0CE395D2B
        Validity
            Not Before: Jul  7 02:06:42 2025 GMT
            Not After : Jul  6 02:11:42 2026 GMT
        Subject: CN=872A4C441B93614DB9402C431A4EDAED3878BEC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:94:70:85:e0:6d:ab:18:6c:41:20:cc:bd:
                    89:dc:69:7e:b0:ed:61:df:9a:e8:25:b4:9e:2e:38:
                    3b:34:8e:a8:78:97:2b:2e:d9:be:f7:1c:4d:eb:6e:
                    99:45:a3:de:f1:f1:0a:47:e9:49:44:8b:50:62:70:
                    83:76:95:dd:5b:23:65:21:bc:32:e2:1a:ea:fa:73:
                    6a:c0:a6:8b:aa:b1:f5:42:fb:91:3f:1e:e0:d0:62:
                    df:b6:b2:51:64:65:96:b1:03:61:ff:dc:35:48:6c:
                    7f:bd:4d:16:ba:bf:35:79:e0:c9:53:4c:cc:5b:40:
                    d6:d3:17:07:ba:ed:64:8b:cc:6c:90:f5:5f:78:44:
                    31:a1:87:df:d2:2d:64:f1:16:f0:8e:52:f6:6d:9d:
                    be:46:35:7a:84:33:76:15:66:55:70:55:6b:fe:53:
                    ec:07:0c:e9:2c:84:11:74:72:6f:6e:fe:05:3b:48:
                    f7:40:7b:6f:aa:4d:bb:da:9d:a8:fa:df:15:08:1b:
                    e9:a8:2e:5c:f6:74:98:da:ab:33:28:f2:12:f8:03:
                    45:54:70:39:d4:b2:4a:b3:a9:68:20:a8:dd:dd:38:
                    9a:97:d8:e0:94:57:c0:46:e3:e6:cc:dd:fc:53:36:
                    23:bf:6b:9e:c5:e6:67:1e:d3:41:01:32:ef:68:db:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2A:4C:44:1B:93:61:4D:B9:40:2C:43:1A:4E:DA:ED:38:78:BE:C6
            X509v3 Authority Key Identifier:
                keyid:20:43:B8:FB:38:96:8B:04:8E:58:24:7F:12:DD:C4:C0:CE:39:5D:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/2043B8FB38968B048E58247F12DDC4C0CE395D2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2043B8FB38968B048E58247F12DDC4C0CE395D2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33332d3333203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c::/33

    Signature Algorithm: sha256WithRSAEncryption
         77:1f:a9:58:f2:8a:38:a4:7d:f8:be:a5:ab:0a:78:be:a8:b5:
         6b:37:e7:1a:f5:d2:e4:5d:28:bb:3d:0c:11:d5:ca:6c:27:e1:
         90:2e:75:c1:49:e5:ff:83:c6:14:db:1e:ef:64:44:60:8f:00:
         23:73:f4:75:1f:a7:76:43:85:64:29:40:46:5b:e6:d2:eb:2c:
         56:51:ed:b7:07:6e:fd:5e:6e:3f:88:66:ca:49:50:e1:b5:35:
         a4:a3:65:1c:60:f5:90:c2:95:b6:64:3a:95:ec:df:9b:3b:38:
         08:bf:bc:5f:26:a2:94:ee:af:32:61:6f:1e:5b:13:d7:bd:9a:
         1a:3d:a4:f1:4b:99:97:73:b4:52:e5:9c:f0:0b:1b:b2:d6:d6:
         24:52:c9:2e:1f:86:bd:2a:8f:34:dc:9d:55:1d:78:5c:3c:72:
         32:5b:1d:2a:b9:e3:70:8f:1e:9a:88:4d:3f:8d:60:f7:70:1f:
         fb:0c:0e:b4:cc:5b:73:4e:55:37:3d:2e:36:2a:96:fd:da:88:
         f5:ab:66:d0:cd:b6:73:81:0a:2f:0c:8e:55:c3:f7:97:f8:fc:
         9c:29:d5:0e:7b:85:95:7f:51:38:aa:0c:39:6c:bb:31:55:dc:
         c3:09:09:58:56:7d:11:96:27:ee:0a:e6:9f:c7:5f:c5:91:92:
         b5:3d:a7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:48:05 2025 by rpki-client