Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/323830343a346163633a3a2f33322d313238203d3e20323637323634.roa
File:                     323830343a346163633a3a2f33322d313238203d3e20323637323634.roa (raw, json)
Hash identifier:          Rt7ILx/xxji1O6horcaiN3EcF5Xu0Ovx8WCXpzN17NU=
Subject key identifier:   C5:E6:2F:B1:CD:D1:E3:59:8D:EE:F1:48:DC:D3:DF:13:1A:7D:B1:D7
Certificate issuer:       /CN=A63E59320D484E59D867131E56F88337804F6F1A
Certificate serial:       2D8E1E2CF13BF0FDFAF3ABA8D214E4599D422AB6
Authority key identifier: A6:3E:59:32:0D:48:4E:59:D8:67:13:1E:56:F8:83:37:80:4F:6F:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63E59320D484E59D867131E56F88337804F6F1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/323830343a346163633a3a2f33322d313238203d3e20323637323634.roa
Signing time:             Wed 05 Nov 2025 12:29:29 +0000
ROA not before:           Wed 05 Nov 2025 12:24:29 +0000
ROA not after:            Wed 04 Nov 2026 12:29:29 +0000
asID:                     267264
IP address blocks:        2804:4acc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/A63E59320D484E59D867131E56F88337804F6F1A.crl
                          rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/A63E59320D484E59D867131E56F88337804F6F1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63E59320D484E59D867131E56F88337804F6F1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 16:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8e:1e:2c:f1:3b:f0:fd:fa:f3:ab:a8:d2:14:e4:59:9d:42:2a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A63E59320D484E59D867131E56F88337804F6F1A
        Validity
            Not Before: Nov  5 12:24:29 2025 GMT
            Not After : Nov  4 12:29:29 2026 GMT
        Subject: CN=C5E62FB1CDD1E3598DEEF148DCD3DF131A7DB1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:79:d9:d1:99:4e:5d:76:89:ad:76:db:c3:
                    01:cc:41:b4:1e:67:af:e2:7d:48:e3:fb:95:69:ff:
                    a1:a5:10:9d:a5:f4:89:ea:4d:db:5c:cc:40:4d:b3:
                    f7:83:ec:d1:5b:e1:b8:62:ef:65:11:55:52:c1:f4:
                    47:3c:28:aa:3b:fb:b6:51:25:5b:6c:82:5e:ad:c5:
                    bc:ab:fd:55:40:de:a7:5b:36:63:5b:35:35:58:39:
                    f1:64:67:11:38:4a:64:e3:c4:85:a8:9c:22:b8:89:
                    1c:62:00:4a:15:cd:38:c4:80:34:b3:fc:d7:23:2b:
                    8f:76:06:3c:22:dc:ed:6e:5c:03:6e:50:1e:11:f7:
                    f4:21:3f:69:8a:26:2d:bf:18:7d:0e:5f:9f:29:f8:
                    33:a5:22:4c:87:9b:56:63:c2:9c:da:3c:34:fb:03:
                    17:18:0c:7a:14:33:4d:1e:f9:b9:09:e4:29:94:7b:
                    68:54:04:d5:99:c9:0a:0c:d4:7f:43:32:16:0c:4c:
                    25:81:84:83:c7:7b:76:9a:78:67:a3:1d:ae:41:7e:
                    6f:8d:91:60:06:e6:9c:6b:fa:9a:d7:9e:c6:ca:54:
                    ec:e6:9c:83:4f:16:f4:f4:96:b4:74:b8:1c:fe:9c:
                    cb:24:e6:eb:52:d7:56:2b:59:f4:0a:b7:17:c6:cc:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E6:2F:B1:CD:D1:E3:59:8D:EE:F1:48:DC:D3:DF:13:1A:7D:B1:D7
            X509v3 Authority Key Identifier:
                keyid:A6:3E:59:32:0D:48:4E:59:D8:67:13:1E:56:F8:83:37:80:4F:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/A63E59320D484E59D867131E56F88337804F6F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63E59320D484E59D867131E56F88337804F6F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/323830343a346163633a3a2f33322d313238203d3e20323637323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4acc::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:63:5f:3f:e0:bf:82:37:04:6c:51:22:1d:aa:0c:6f:ad:f9:
         09:7d:d8:80:47:3e:44:a0:a7:5f:0c:0c:c6:f2:42:a6:66:ec:
         83:a7:c3:e0:af:9f:9d:7f:b3:84:5e:c8:e6:ab:a8:02:d9:1d:
         51:02:84:3c:c4:f4:c3:9b:65:9b:a6:62:b7:ce:e1:fa:20:e3:
         d4:a3:60:32:9b:c2:bd:c2:23:0e:8c:06:c0:0c:d4:b6:aa:c5:
         c5:e3:d0:7f:d7:13:33:c8:cf:89:39:82:95:e5:6d:c5:12:55:
         2b:53:3f:5f:95:3c:57:28:ec:a6:ee:fd:df:2b:39:79:83:b5:
         d6:a7:bf:f6:f3:55:01:87:ab:bf:f3:7b:b6:06:cb:ba:de:89:
         d6:97:42:ef:f1:d6:c1:8b:0d:50:9e:5e:13:9c:36:7a:d6:73:
         25:21:e8:6c:a2:00:45:0a:9b:f8:f2:41:4e:38:33:01:7f:fa:
         98:5d:79:82:5c:5d:d7:8c:77:5a:51:00:0b:b5:63:95:d2:bc:
         8e:e7:8c:09:b9:68:30:9c:75:71:db:cf:0e:8b:67:d2:4a:f6:
         6c:3b:cd:59:25:3e:66:9b:d0:0b:6c:06:ab:5c:da:d3:fa:db:
         87:7f:79:ac:fc:3a:df:5a:17:62:f3:f2:5d:9f:69:44:19:b2:
         a3:fb:32:88
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIULY4eLPE78P3686uo0hTkWZ1CKrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYzRTU5MzIwRDQ4NEU1OUQ4NjcxMzFFNTZGODgzMzc4
MDRGNkYxQTAeFw0yNTExMDUxMjI0MjlaFw0yNjExMDQxMjI5MjlaMDMxMTAvBgNV
BAMTKEM1RTYyRkIxQ0REMUUzNTk4REVFRjE0OERDRDNERjEzMUE3REIxRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkHnZ0ZlOXXaJrXbbwwHMQbQe
Z6/ifUjj+5Vp/6GlEJ2l9InqTdtczEBNs/eD7NFb4bhi72URVVLB9Ec8KKo7+7ZR
JVtsgl6txbyr/VVA3qdbNmNbNTVYOfFkZxE4SmTjxIWonCK4iRxiAEoVzTjEgDSz
/NcjK492Bjwi3O1uXANuUB4R9/QhP2mKJi2/GH0OX58p+DOlIkyHm1ZjwpzaPDT7
AxcYDHoUM00e+bkJ5CmUe2hUBNWZyQoM1H9DMhYMTCWBhIPHe3aaeGejHa5Bfm+N
kWAG5pxr+prXnsbKVOzmnINPFvT0lrR0uBz+nMsk5utS11YrWfQKtxfGzAe5AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUxeYvsc3R41mN7vFI3NPfExp9sdcwHwYDVR0j
BBgwFoAUpj5ZMg1ITlnYZxMeVviDN4BPbxowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzhKczIyQnM2Z3QyWGc1cUQ1bTRaQW83blhYRHZTazRoV0RvbThTY3Vh
RW4vMC9BNjNFNTkzMjBENDg0RTU5RDg2NzEzMUU1NkY4ODMzNzgwNEY2RjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2M0U1OTMyMEQ0ODRFNTlE
ODY3MTMxRTU2Rjg4MzM3ODA0RjZGMUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM4SnMyMkJzNmd0MlhnNXFENW00WkFvN25YWER2U2s0aFdEb204U2N1YUVuLzAv
MzIzODMwMzQzYTM0NjE2MzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMjM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBErMMA0GCSqGSIb3DQEBCwUAA4IBAQBVY18/
4L+CNwRsUSIdqgxvrfkJfdiARz5EoKdfDAzG8kKmZuyDp8Pgr5+df7OEXsjmq6gC
2R1RAoQ8xPTDm2WbpmK3zuH6IOPUo2Aym8K9wiMOjAbADNS2qsXF49B/1xMzyM+J
OYKV5W3FElUrUz9flTxXKOym7v3fKzl5g7XWp7/281UBh6u/83u2Bsu63onWl0Lv
8dbBiw1Qnl4TnDZ61nMlIehsogBFCpv48kFOODMBf/qYXXmCXF3XjHdaUQALtWOV
0ryO54wJuWgwnHVx288Oi2fSSvZsO81ZJT5mm9ALbAarXNrT+tuHf3ms/DrfWhdi
8/Jdn2lEGbKj+zKI
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:38:19 2025 by rpki-client