Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d313238203d3e203238333630.roa
File:                     323830343a31343a3a2f33322d313238203d3e203238333630.roa (raw, json)
Hash identifier:          Y6yxr1t2ucquhWthqdIZlHIrK+C1q9ZqzNpWy5p7+84=
Subject key identifier:   CE:1F:05:A9:BA:70:AE:08:25:6D:C8:37:5F:EF:63:87:63:89:DF:6A
Certificate issuer:       /CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18
Certificate serial:       19BD2E1B080D9ED0D96174BFE6CEBE241BF91D33
Authority key identifier: 00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d313238203d3e203238333630.roa
Signing time:             Sat 13 Sep 2025 22:35:44 +0000
ROA not before:           Sat 13 Sep 2025 22:30:44 +0000
ROA not after:            Sat 12 Sep 2026 22:35:44 +0000
asID:                     28360
IP address blocks:        2804:14::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl
                          rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 10:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bd:2e:1b:08:0d:9e:d0:d9:61:74:bf:e6:ce:be:24:1b:f9:1d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18
        Validity
            Not Before: Sep 13 22:30:44 2025 GMT
            Not After : Sep 12 22:35:44 2026 GMT
        Subject: CN=CE1F05A9BA70AE08256DC8375FEF63876389DF6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:26:4c:a9:02:c9:57:d8:ea:3a:8c:b8:19:
                    d1:56:03:1b:e3:a1:3a:74:ca:1a:b3:66:e6:ce:d8:
                    98:c8:e5:4c:b9:6a:b2:ca:3f:3a:78:87:24:57:1b:
                    2b:39:57:34:2c:c0:a6:a7:a4:30:c3:c6:a2:ae:2e:
                    ec:cd:c2:fe:7e:65:6b:09:5f:c5:a6:49:60:74:a7:
                    ac:0e:f6:0a:60:aa:fc:43:d9:74:f3:fd:46:6c:a9:
                    93:80:35:5c:f5:e8:eb:88:11:b9:22:54:99:bb:65:
                    30:d7:6b:3b:09:f6:c5:a9:f2:79:b9:ab:4a:76:8d:
                    aa:a0:10:9b:b1:bf:1e:39:84:a4:9a:8d:eb:f9:69:
                    8f:a7:32:63:59:b2:6e:5c:37:d7:2e:aa:0d:93:04:
                    1f:4f:9a:cb:be:a2:62:d7:3f:2b:de:a1:13:00:9b:
                    65:75:a1:55:91:aa:99:f4:c7:69:8b:17:a5:55:c3:
                    43:a0:19:10:82:26:0f:08:3b:fb:90:f6:3a:5d:6f:
                    d4:f8:21:c0:f3:ba:94:ad:db:f5:e5:4a:61:6d:e4:
                    23:7a:43:39:3b:c0:a3:89:d4:ff:1b:03:69:f5:95:
                    43:38:08:1f:4b:c3:ba:74:8f:b9:81:8d:63:8c:28:
                    6c:ad:ec:38:bc:d7:13:b6:2a:f5:5d:29:a4:d1:b5:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1F:05:A9:BA:70:AE:08:25:6D:C8:37:5F:EF:63:87:63:89:DF:6A
            X509v3 Authority Key Identifier:
                keyid:00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d313238203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:42:65:ea:b3:97:30:62:b2:51:02:f3:b6:6d:a5:54:67:5f:
         0d:81:7f:9f:ac:64:3a:0b:06:1c:17:be:fc:aa:40:33:62:70:
         d4:10:7c:5f:9c:9c:57:e3:41:87:c8:f5:a7:91:8f:49:64:c9:
         4d:d1:63:c1:2b:e5:3b:65:82:39:d8:10:c6:12:61:14:c2:ec:
         1d:ca:cb:a2:ea:a9:69:e3:fb:f0:e8:b2:1e:a4:b7:ea:8f:4c:
         43:da:6a:ac:14:d8:b9:e1:f4:6e:e7:60:1a:1d:26:ec:d7:79:
         0f:2c:2c:f2:53:5b:81:02:4e:7c:e3:20:d6:32:e6:0d:af:9e:
         f5:28:1e:dc:4a:60:4b:1c:19:cd:1c:d7:45:f4:de:e0:60:04:
         1c:72:b2:76:51:50:08:eb:a8:9a:34:d2:97:cc:78:fe:bc:f2:
         2c:bf:6b:9c:11:31:07:25:d5:68:54:1e:d3:a5:80:dc:42:55:
         11:42:0e:f1:12:e4:dc:ce:e0:0d:eb:ae:3c:c6:f6:e6:93:cf:
         da:75:db:b7:9b:d1:9d:4d:67:c3:3a:fd:d5:a0:ca:e0:f8:8a:
         3c:51:11:d9:0a:67:a6:c5:36:4e:cf:f6:3c:71:73:f6:4b:9a:
         45:ef:a9:80:fa:1d:6f:9a:ae:94:52:7d:9d:e4:24:4f:b3:bc:
         7f:81:db:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:58:20 2025 by rpki-client