Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a383030303a3a2f33332d3333203d3e20323734353138.roa
File:                     323830343a393537633a383030303a3a2f33332d3333203d3e20323734353138.roa (raw, json)
Hash identifier:          36hHf/D4ukU8mAlHpeyW/xW6TzW1Wdrh0++mjKsFN7A=
Subject key identifier:   79:4A:9E:56:8C:1D:D1:E1:96:0A:DB:CE:14:71:F9:AA:D7:F7:7F:BF
Certificate issuer:       /CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
Certificate serial:       108663FDC8544072F3FF5F244609A13A3E557F1F
Authority key identifier: CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a383030303a3a2f33332d3333203d3e20323734353138.roa
Signing time:             Fri 05 Sep 2025 19:27:48 +0000
ROA not before:           Fri 05 Sep 2025 19:22:48 +0000
ROA not after:            Fri 04 Sep 2026 19:27:48 +0000
asID:                     274518
IP address blocks:        2804:957c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl
                          rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 01:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:86:63:fd:c8:54:40:72:f3:ff:5f:24:46:09:a1:3a:3e:55:7f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
        Validity
            Not Before: Sep  5 19:22:48 2025 GMT
            Not After : Sep  4 19:27:48 2026 GMT
        Subject: CN=794A9E568C1DD1E1960ADBCE1471F9AAD7F77FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f9:6c:11:7f:69:2f:de:cb:39:83:eb:2f:8b:
                    ea:18:36:fc:3a:7f:2b:25:03:b2:36:8e:5f:c0:ee:
                    63:3b:02:76:dc:3f:58:3a:65:b4:6b:3c:48:62:9c:
                    1e:f5:37:66:8d:47:8c:ed:41:55:e5:18:c8:9e:d9:
                    9e:cb:f6:a5:9a:08:bf:8f:6d:b8:dc:aa:b8:97:ab:
                    6d:ed:86:e4:42:0d:61:de:66:39:8d:6a:0e:8f:ba:
                    ae:c2:4b:b1:33:43:fe:06:9a:07:3d:e9:15:ff:c9:
                    2a:0b:1a:72:5a:96:33:47:fc:37:11:a1:97:f3:be:
                    9c:bf:8c:91:ed:e2:ab:46:1b:07:34:72:fc:e3:cd:
                    d4:61:71:41:46:8a:21:66:07:fd:e0:fb:43:77:78:
                    e4:13:ee:7a:4e:60:5d:68:75:7d:bf:eb:08:8b:2d:
                    c5:ba:65:b0:6c:5f:a1:96:55:c4:93:0d:48:f4:34:
                    2a:56:e8:c5:b5:82:d1:36:07:50:50:02:2e:20:3e:
                    bd:14:13:2b:39:4e:19:10:89:90:07:71:a6:fd:a0:
                    41:01:0f:df:a7:2e:e5:e0:22:d4:97:95:20:bd:6d:
                    f2:b8:83:b6:ca:a8:0f:a9:de:1f:92:58:a2:02:20:
                    f4:9f:06:ef:e4:7e:e5:c7:81:06:22:c5:9b:0b:cc:
                    ee:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4A:9E:56:8C:1D:D1:E1:96:0A:DB:CE:14:71:F9:AA:D7:F7:7F:BF
            X509v3 Authority Key Identifier:
                keyid:CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a383030303a3a2f33332d3333203d3e20323734353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:957c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         45:96:49:91:7e:cb:4d:f3:9a:f0:1f:87:f4:15:b9:1f:3b:70:
         3a:a1:c0:3f:67:c5:21:72:f5:db:a8:c5:56:0d:a3:03:4d:f4:
         3b:f3:88:9a:6d:f6:31:8a:3e:fd:43:f5:dc:51:7b:5e:8d:e0:
         ed:af:59:2d:e1:df:7a:d8:c8:bf:3e:55:24:2e:e0:69:56:7e:
         21:53:df:74:27:05:8f:58:23:1a:f2:d6:4a:0a:f6:3c:4d:be:
         90:51:03:91:50:a3:13:f1:c0:4c:21:7d:97:93:42:ac:3d:e6:
         e6:6d:bb:71:a1:fc:b6:58:c5:1f:32:9a:f6:0a:3d:f0:6f:95:
         e4:ff:ba:be:7d:a6:de:a9:8e:86:42:d6:68:3e:4f:41:c1:6d:
         2c:47:ed:99:61:18:94:97:aa:e4:e6:29:59:81:5c:39:5b:25:
         96:a9:dc:52:e9:fd:4b:8c:d6:9f:87:e8:1f:2c:3f:29:66:37:
         f8:dd:81:a3:f8:48:de:24:ee:cc:14:22:e3:cc:8e:ca:c2:77:
         a9:6d:05:64:79:d1:7e:d3:fd:fe:00:ad:9f:9d:b6:9c:48:cf:
         1a:14:c9:04:5c:71:e4:3c:c2:c7:38:50:c2:7b:84:b0:1c:9d:
         de:03:92:47:df:aa:5b:52:aa:90:c5:fb:5a:31:84:c4:3c:06:
         47:68:de:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:49:46 2025 by rpki-client