Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa
File:                     323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa (raw, json)
Hash identifier:          XSOLNpw1HK91WxJn7yZZIyP6WKBeEMbquhD7SAI3Lok=
Subject key identifier:   47:09:64:C4:3D:BC:54:38:C6:BD:C6:C4:94:47:EC:20:11:F8:F0:52
Certificate issuer:       /CN=3C20D4743A457C18DB0FEAEA3025E1CCD51A4793
Certificate serial:       372B4A1F47C1502442D4B82D0CA0E0866E1EC182
Authority key identifier: 3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa
Signing time:             Fri 12 Sep 2025 02:41:52 +0000
ROA not before:           Fri 12 Sep 2025 02:36:52 +0000
ROA not after:            Fri 11 Sep 2026 02:41:52 +0000
asID:                     272677
IP address blocks:        2804:86f4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 14:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2b:4a:1f:47:c1:50:24:42:d4:b8:2d:0c:a0:e0:86:6e:1e:c1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C20D4743A457C18DB0FEAEA3025E1CCD51A4793
        Validity
            Not Before: Sep 12 02:36:52 2025 GMT
            Not After : Sep 11 02:41:52 2026 GMT
        Subject: CN=470964C43DBC5438C6BDC6C49447EC2011F8F052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:44:92:3b:4d:3d:d7:9a:ed:b7:5b:c2:ba:
                    35:69:b9:fb:de:9a:da:d5:b0:32:6a:53:8c:65:bd:
                    7b:02:0c:34:d4:a2:bb:67:f8:20:a8:9a:75:45:af:
                    f9:48:d1:bc:08:88:f4:2e:d5:96:29:5a:70:d5:a7:
                    bc:d7:b8:2a:82:97:d5:d6:78:df:71:4f:27:84:09:
                    c0:f6:e7:8d:b3:62:d6:f4:0c:26:21:d1:b7:3c:ac:
                    ca:07:6d:5d:ac:ef:16:e1:d9:17:89:75:ce:7f:30:
                    c0:34:0c:f4:c1:51:47:ea:e0:67:fa:7a:bf:c4:2d:
                    7d:a1:5d:14:05:a6:51:94:67:55:33:9f:75:e4:89:
                    aa:48:87:57:1a:20:d4:71:74:17:dd:4c:9f:24:9a:
                    81:d9:16:84:d2:55:ce:b5:1b:6c:11:34:de:38:f2:
                    52:44:9f:6e:98:d6:75:7a:e1:b7:5b:26:6f:d0:1d:
                    7a:71:5c:91:8d:ee:e0:39:bc:df:ef:bd:37:8f:a6:
                    7c:9f:cd:ed:98:c4:a9:40:a6:b1:3b:cc:d4:cf:c0:
                    e3:a8:db:be:55:2b:cd:f3:51:4f:3a:89:b4:3c:12:
                    16:65:7c:98:77:c4:89:71:fa:2e:f5:e2:23:08:d1:
                    66:26:01:35:99:5b:35:19:d7:00:06:e4:57:53:19:
                    63:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:09:64:C4:3D:BC:54:38:C6:BD:C6:C4:94:47:EC:20:11:F8:F0:52
            X509v3 Authority Key Identifier:
                keyid:3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86f4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0e:a6:89:ca:3d:34:1b:5e:14:b1:07:a0:24:61:0e:2a:56:03:
         af:79:3f:05:2e:05:2c:fe:94:71:71:59:c1:c5:51:16:1a:d7:
         2b:5a:59:be:ab:3b:a4:c7:90:4a:11:f4:6d:9b:15:dc:d3:56:
         da:12:cd:d2:27:1c:ac:8e:75:3b:2c:5f:dd:ea:b6:c5:c9:ca:
         da:c7:03:2e:06:5b:10:68:48:6f:27:ac:7c:17:01:e3:5f:36:
         79:4c:c8:b3:5c:34:04:02:2e:56:61:61:5e:3e:fa:c0:90:67:
         4e:69:be:12:67:f1:9d:66:4a:17:a3:69:7c:4a:0f:41:e9:43:
         ab:d0:e0:ee:97:c9:cf:47:31:00:0d:05:bf:f5:16:f3:57:19:
         b5:b3:03:3a:e0:2a:be:17:17:ee:aa:fb:4e:c3:2d:07:7f:37:
         fb:20:f4:6b:4a:d9:e3:ea:ec:e5:47:dc:7c:23:58:ff:d9:04:
         fd:96:6b:ea:1e:3a:ac:91:b0:ef:c7:73:c5:1a:b7:18:69:4c:
         f8:9b:af:c4:ec:28:9b:ab:24:c7:c2:86:7c:ea:07:a2:3b:01:
         31:af:6b:39:c2:19:dd:28:20:dc:3c:66:73:d5:6e:a4:06:86:
         eb:66:d7:4b:a2:53:1c:57:39:a1:07:60:c6:cb:79:27:3e:77:
         2f:b0:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 07:20:36 2025 by rpki-client