Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/323830343a6234343a313030303a3a2f33362d3336203d3e20323632343438.roa
File:                     323830343a6234343a313030303a3a2f33362d3336203d3e20323632343438.roa (raw, json)
Hash identifier:          ReyDnNTlodNDuU7CMCB/fSblKsoYaR+sj0ZzBuiGVho=
Subject key identifier:   56:27:F5:65:24:AA:38:26:39:50:23:C8:04:F0:42:8B:CC:00:B0:F5
Certificate issuer:       /CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
Certificate serial:       5FFA77A6F24033EDB40AD83D2EFCCE8CE2448E63
Authority key identifier: E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/323830343a6234343a313030303a3a2f33362d3336203d3e20323632343438.roa
Signing time:             Wed 24 Sep 2025 02:17:08 +0000
ROA not before:           Wed 24 Sep 2025 02:12:08 +0000
ROA not after:            Wed 23 Sep 2026 02:17:08 +0000
asID:                     262448
IP address blocks:        2804:b44:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl
                          rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Oct 2025 02:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:fa:77:a6:f2:40:33:ed:b4:0a:d8:3d:2e:fc:ce:8c:e2:44:8e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
        Validity
            Not Before: Sep 24 02:12:08 2025 GMT
            Not After : Sep 23 02:17:08 2026 GMT
        Subject: CN=5627F56524AA3826395023C804F0428BCC00B0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:e7:ad:e9:60:b0:3d:4d:41:29:aa:5f:bf:
                    fb:2f:88:27:87:35:d0:03:0c:ee:10:91:74:f3:a2:
                    ee:71:27:24:89:e3:a2:87:ae:25:68:b8:74:5b:aa:
                    2b:c3:0d:fa:e5:12:da:0e:8a:e2:90:83:8d:44:1e:
                    08:2c:d9:99:99:51:9b:e2:0a:54:f6:be:fc:99:6e:
                    ec:91:17:e0:a6:9b:96:6e:77:33:2c:03:e9:be:c5:
                    fe:aa:2b:2a:cf:d0:65:ed:28:0d:fa:c3:9f:57:e4:
                    8a:91:05:f2:13:fd:ea:0a:eb:cc:34:3b:03:89:57:
                    f9:7d:c3:20:3f:bb:8e:a8:db:a0:ec:a4:89:a4:fb:
                    92:a5:c8:bb:57:97:c0:47:18:e9:37:20:44:31:01:
                    33:a2:e3:3d:8c:bf:53:75:64:af:dd:ba:4c:77:63:
                    58:01:09:5c:3c:63:0a:76:b2:07:5b:74:46:9e:b1:
                    f0:e4:9a:bc:a4:39:bc:36:bf:b0:95:7e:c5:d3:9f:
                    bd:95:a0:c4:8f:31:bd:e4:7b:d4:c6:44:36:b3:92:
                    7b:2a:3c:69:cc:31:e6:0c:8a:f7:5f:6b:a2:ef:83:
                    64:27:e1:12:f2:93:44:8d:18:02:63:81:8d:9a:c9:
                    b0:ed:46:48:e3:b9:23:f4:49:f6:d3:0e:31:ba:42:
                    40:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:27:F5:65:24:AA:38:26:39:50:23:C8:04:F0:42:8B:CC:00:B0:F5
            X509v3 Authority Key Identifier:
                keyid:E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/323830343a6234343a313030303a3a2f33362d3336203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:33:43:f5:b1:80:cf:b1:a1:39:f2:c7:d7:f9:8c:61:5f:
         8e:0e:38:c4:da:af:e8:5a:34:09:4d:bd:c3:ad:f0:98:51:50:
         41:89:db:13:ad:ee:a8:bf:7f:c9:b7:56:a4:d9:30:63:4b:79:
         8f:85:ff:50:8d:34:66:23:b1:56:47:24:ca:53:4a:36:42:e1:
         2f:71:32:5f:9c:33:08:92:9a:4f:9f:00:29:f6:d3:44:d8:be:
         1b:8d:1e:e3:45:f5:fb:c5:b8:84:b8:88:9a:f3:2b:1f:47:3f:
         80:54:51:3e:57:b9:00:cf:e6:1f:8c:78:0c:72:80:26:f8:83:
         6d:2b:14:3d:ad:e4:c7:f0:e6:56:2a:78:60:d7:d9:08:cb:9d:
         a5:59:40:ce:02:60:99:97:3f:ac:eb:d4:2f:16:e8:74:c4:f1:
         af:a1:59:13:83:5d:8a:91:66:c9:e5:75:f6:65:92:73:70:8c:
         45:da:ab:6c:bb:ce:c0:8f:f0:0a:17:23:eb:43:22:6d:41:31:
         ab:92:55:c9:49:f2:fe:c1:e5:22:f7:c9:1c:db:f2:be:4e:d4:
         5d:ba:31:77:75:11:59:f3:f0:4b:94:b7:fa:36:1d:c3:39:ec:
         81:4a:d9:da:9e:e3:c7:97:9a:6e:3d:29:a9:65:c9:85:94:40:
         f7:9a:55:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 14:42:43 2025 by rpki-client