Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/323830343a343335343a3330303a3a2f34302d313238203d3e20323637353633.roa
File:                     323830343a343335343a3330303a3a2f34302d313238203d3e20323637353633.roa (raw, json)
Hash identifier:          V0db29BzuxDJqVtuiLOsVXtKc4ShasUYke9RN8b/tg0=
Subject key identifier:   A9:63:71:9F:FC:C5:9C:1F:E1:36:EC:7A:89:1E:6A:1A:B8:F4:58:BC
Certificate issuer:       /CN=D158C3BF05B29EB9F5393618B97CD510D1DA2355
Certificate serial:       1F688C97AB0BCE1D5895E03D56219011FBB42E32
Authority key identifier: D1:58:C3:BF:05:B2:9E:B9:F5:39:36:18:B9:7C:D5:10:D1:DA:23:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/323830343a343335343a3330303a3a2f34302d313238203d3e20323637353633.roa
Signing time:             Tue 16 Sep 2025 00:58:03 +0000
ROA not before:           Tue 16 Sep 2025 00:53:03 +0000
ROA not after:            Tue 15 Sep 2026 00:58:03 +0000
asID:                     267563
IP address blocks:        2804:4354:300::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.crl
                          rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 01:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:68:8c:97:ab:0b:ce:1d:58:95:e0:3d:56:21:90:11:fb:b4:2e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D158C3BF05B29EB9F5393618B97CD510D1DA2355
        Validity
            Not Before: Sep 16 00:53:03 2025 GMT
            Not After : Sep 15 00:58:03 2026 GMT
        Subject: CN=A963719FFCC59C1FE136EC7A891E6A1AB8F458BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:fd:4e:77:1d:72:40:74:6b:94:52:49:d1:
                    c9:f2:d8:a2:94:b7:55:0d:17:0f:5f:05:43:73:54:
                    ec:f6:ee:81:8a:ec:b9:a6:c8:2b:a9:cb:7c:06:2b:
                    c8:6a:0e:87:0d:a7:37:fc:50:98:2f:0c:43:be:a4:
                    a1:49:7d:57:b8:24:7c:d3:30:5a:fd:62:19:c1:7f:
                    12:9e:a4:be:45:34:b7:88:f0:d5:6f:10:4a:b4:4e:
                    d0:b3:94:da:78:21:ae:25:06:07:40:60:4c:f1:e7:
                    98:2a:ce:97:7a:b7:fd:0c:51:6b:10:74:31:4b:06:
                    71:13:5e:b7:f2:7c:68:4c:ff:14:0c:71:f9:7b:1c:
                    6a:ca:a3:c1:04:ce:b1:c8:cf:3c:27:4a:3b:3a:a5:
                    ab:13:da:7d:60:4a:79:3f:de:a8:89:15:2f:f6:c6:
                    65:fa:dc:f1:89:e9:9f:bf:05:0d:7d:4d:83:84:79:
                    c7:f1:d5:d1:0b:4c:24:2c:4d:f7:49:62:c7:c8:30:
                    82:b1:f6:34:ac:62:64:cf:eb:4b:17:3f:d6:33:5c:
                    f9:cb:9e:54:5b:81:de:3c:45:69:a4:78:a6:d4:b6:
                    75:93:4d:4d:28:c0:20:cb:cb:1b:bb:42:f0:9b:ef:
                    b7:fc:f9:37:e3:03:bf:32:c2:94:fe:2e:33:d4:0c:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:63:71:9F:FC:C5:9C:1F:E1:36:EC:7A:89:1E:6A:1A:B8:F4:58:BC
            X509v3 Authority Key Identifier:
                keyid:D1:58:C3:BF:05:B2:9E:B9:F5:39:36:18:B9:7C:D5:10:D1:DA:23:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/323830343a343335343a3330303a3a2f34302d313238203d3e20323637353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4354:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:84:f7:ea:8b:f7:dc:9f:7b:a7:c9:49:33:ec:fa:28:32:6e:
         d7:8d:83:b4:12:d1:9b:06:ff:13:eb:95:30:19:c4:73:61:ff:
         ef:2d:58:a9:01:69:4a:d2:50:bf:13:1a:71:0d:e5:91:6d:e4:
         38:26:43:0e:6c:81:a4:c8:d3:91:a3:3d:f6:7d:90:d1:3b:f0:
         21:1c:f0:18:52:4e:df:7f:07:cb:0e:75:be:56:61:19:65:37:
         0e:f8:8b:5c:e1:96:74:d5:fa:35:db:cf:0f:68:db:ab:98:e3:
         b3:38:0e:c9:92:9b:f3:4f:e0:6c:0e:17:2d:ee:56:0b:ed:5a:
         ca:06:ff:91:c9:07:62:7a:b5:32:fb:eb:3e:82:52:ec:c5:df:
         cc:90:6c:3b:1b:c6:0e:f8:f1:e9:c2:e9:df:3c:7d:41:82:91:
         dc:95:48:be:ce:23:73:bb:23:44:16:3d:6f:aa:0b:7c:97:1a:
         20:f1:ff:0f:c3:22:5f:44:24:18:76:e3:82:73:61:5b:9c:88:
         8e:bf:8e:ce:c2:c3:d4:0c:f6:4f:50:bf:d9:70:94:ac:12:d9:
         33:4d:81:0f:b4:d7:eb:64:d7:5f:6e:f1:77:30:47:4d:d0:46:
         97:3f:6c:18:9f:11:f3:88:1e:98:a1:f3:74:b2:69:00:59:9d:
         a9:53:1f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:19:01 2025 by rpki-client