Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a313830303a3a2f33392d3339203d3e203238323230.roa
File:                     323830343a3838303a313830303a3a2f33392d3339203d3e203238323230.roa (raw, json)
Hash identifier:          HfLqPCF7rqqo5e+pQ51fd0bavXrbSmz1SQtcxf1fxOQ=
Subject key identifier:   9E:32:9D:47:52:89:66:BC:88:0A:50:15:B3:4D:C7:C6:18:24:18:D4
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       0F02898E71AA3D0B4C46EB0780BE0BB1DB860490
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a313830303a3a2f33392d3339203d3e203238323230.roa
Signing time:             Thu 23 Oct 2025 17:43:24 +0000
ROA not before:           Thu 23 Oct 2025 17:38:24 +0000
ROA not after:            Thu 22 Oct 2026 17:43:24 +0000
asID:                     28220
IP address blocks:        2804:880:1800::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:02:89:8e:71:aa:3d:0b:4c:46:eb:07:80:be:0b:b1:db:86:04:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 23 17:38:24 2025 GMT
            Not After : Oct 22 17:43:24 2026 GMT
        Subject: CN=9E329D47528966BC880A5015B34DC7C6182418D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:bf:c3:23:e5:20:c2:d2:6f:23:74:a7:f3:
                    c4:38:ad:d7:50:fe:fe:66:b8:7f:23:a1:ad:a7:9d:
                    f0:2d:dd:1a:a0:06:8e:44:b8:cb:ae:86:0b:2f:28:
                    f7:99:d3:84:80:06:0e:76:e4:07:c6:fc:fc:3c:ee:
                    25:ae:6c:aa:30:21:c5:1e:4f:0a:6b:bc:14:e7:8c:
                    56:5b:9a:e8:f3:30:bf:e0:9b:35:01:d7:2f:9a:9e:
                    d1:86:f2:0f:4c:18:d3:61:11:f3:d2:31:1f:fa:97:
                    93:28:69:0b:03:26:20:b2:14:99:fc:0f:23:50:86:
                    db:41:5f:ad:df:05:49:bf:6e:e6:3a:97:62:37:fd:
                    2a:37:52:5e:1a:21:a2:d9:d2:d5:67:7b:5d:2a:e1:
                    13:8e:0e:3f:18:ee:a0:69:bc:5b:72:d4:6f:92:f6:
                    1b:64:f7:d7:43:c4:48:16:fd:ba:93:1f:16:b6:a1:
                    47:87:db:a2:02:1f:53:fb:c7:93:d9:73:5e:32:ee:
                    46:e8:54:e5:f6:c4:6c:5d:57:0b:a4:f0:83:ba:11:
                    ee:1e:b0:b4:b4:02:74:36:b3:96:5b:da:97:f8:fd:
                    bd:e2:5d:02:39:94:11:5d:0f:64:6c:ff:25:3f:fc:
                    cd:64:2c:71:91:2e:56:41:9f:54:f1:2f:4c:85:7f:
                    81:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:32:9D:47:52:89:66:BC:88:0A:50:15:B3:4D:C7:C6:18:24:18:D4
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a313830303a3a2f33392d3339203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:880:1800::/39

    Signature Algorithm: sha256WithRSAEncryption
         7e:eb:81:f4:2a:06:17:80:92:e6:fa:b8:10:25:e2:84:dd:17:
         c7:3a:20:9c:0d:73:64:19:02:de:18:d1:63:fd:3f:f2:93:ba:
         97:fb:b4:b1:a5:e3:7f:ae:c0:19:02:19:66:31:27:83:6c:02:
         23:81:18:d3:b7:6c:8c:3c:90:c8:0f:5c:d3:f3:55:6c:0d:e6:
         48:1d:f8:a6:26:0e:6d:c6:3a:0c:48:e1:2d:e5:de:fb:08:2e:
         bc:ff:03:91:e9:64:d8:40:55:8c:d6:2a:5c:2e:34:eb:c2:93:
         6f:30:6f:53:6b:bf:7f:ff:70:7d:93:c8:48:91:47:73:a4:b4:
         47:d5:32:7b:a0:4f:65:cd:59:6d:9f:cc:4b:4f:39:3b:bd:ec:
         d9:45:6b:a7:1b:67:94:26:e2:ee:5c:a1:61:a8:93:b9:df:08:
         46:33:0c:6d:e3:91:dd:57:16:90:1d:d6:b2:4a:24:5f:9f:12:
         5a:7b:ef:72:5e:e7:e7:94:5c:bc:b9:0c:08:d2:65:4f:95:4d:
         8e:07:51:e1:4b:56:8d:2d:37:7e:df:43:e0:f6:8b:69:32:de:
         09:3c:c3:8c:06:69:8e:2b:25:dd:38:7c:a4:61:14:32:a0:f5:
         f5:01:cd:bb:1a:c3:b8:8e:b6:1e:aa:63:bc:74:78:ca:aa:cd:
         fd:5e:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:58 2025 by rpki-client