Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a3a2f33322d313238203d3e20323633353731.roa
File:                     323830343a6633383a3a2f33322d313238203d3e20323633353731.roa (raw, json)
Hash identifier:          sfJHevmglWdz2enj6dv4R3C7J4wUw0YXOArNIRW+jQ8=
Subject key identifier:   D3:3C:FB:04:F7:FA:76:61:9F:73:68:6B:90:04:94:E6:7A:B6:D8:D0
Certificate issuer:       /CN=342097A4083A2B31789F16928A1E82F5C9CDA419
Certificate serial:       71FD49BC7700631F5ABF5E48071FBAFB1B2EFD07
Authority key identifier: 34:20:97:A4:08:3A:2B:31:78:9F:16:92:8A:1E:82:F5:C9:CD:A4:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342097A4083A2B31789F16928A1E82F5C9CDA419.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a3a2f33322d313238203d3e20323633353731.roa
Signing time:             Wed 03 Sep 2025 18:15:58 +0000
ROA not before:           Wed 03 Sep 2025 18:10:58 +0000
ROA not after:            Wed 02 Sep 2026 18:15:58 +0000
asID:                     263571
IP address blocks:        2804:f38::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/342097A4083A2B31789F16928A1E82F5C9CDA419.crl
                          rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/342097A4083A2B31789F16928A1E82F5C9CDA419.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342097A4083A2B31789F16928A1E82F5C9CDA419.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 01:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fd:49:bc:77:00:63:1f:5a:bf:5e:48:07:1f:ba:fb:1b:2e:fd:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342097A4083A2B31789F16928A1E82F5C9CDA419
        Validity
            Not Before: Sep  3 18:10:58 2025 GMT
            Not After : Sep  2 18:15:58 2026 GMT
        Subject: CN=D33CFB04F7FA76619F73686B900494E67AB6D8D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:69:3c:d9:6f:b4:aa:25:04:3b:1a:b0:54:
                    da:32:71:fc:af:a9:fd:10:33:10:7b:6b:4d:80:5d:
                    c7:a2:4b:f5:83:97:bb:94:98:2d:a4:b8:1b:cc:ba:
                    95:f0:73:45:98:6d:c9:ab:e7:2e:c3:fd:bb:8a:5f:
                    3a:7e:82:f0:e0:d1:13:2c:eb:70:65:c6:02:0f:52:
                    76:8d:7d:32:e6:71:d9:28:9e:91:a5:9c:49:66:52:
                    9c:b0:65:88:a8:c2:aa:5a:32:20:e4:40:68:76:49:
                    76:fd:6c:de:59:49:68:41:07:01:74:7c:7c:2d:67:
                    7f:ff:87:5c:cc:0b:77:ef:28:6f:92:0d:ad:08:c7:
                    84:99:1b:7d:10:47:7f:5b:10:37:a7:71:92:16:fd:
                    23:1d:93:8a:5e:dd:4f:78:87:d1:57:6d:d2:11:5c:
                    8e:cc:58:3c:57:32:ca:da:3c:a3:14:2a:13:76:9a:
                    49:1e:ec:eb:6e:ca:51:a3:1b:ee:8a:bb:4f:7f:78:
                    e3:bd:ca:c1:20:d7:4c:4b:03:f2:16:ff:4b:e6:27:
                    9f:b4:6c:41:f4:3d:6e:31:f2:60:a0:bc:5b:27:6b:
                    a4:b5:34:7e:ca:3b:8e:bc:fb:79:f0:74:00:e8:88:
                    1b:30:c7:24:41:82:a1:2a:13:2e:c4:02:dc:d2:e8:
                    0d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3C:FB:04:F7:FA:76:61:9F:73:68:6B:90:04:94:E6:7A:B6:D8:D0
            X509v3 Authority Key Identifier:
                keyid:34:20:97:A4:08:3A:2B:31:78:9F:16:92:8A:1E:82:F5:C9:CD:A4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/342097A4083A2B31789F16928A1E82F5C9CDA419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342097A4083A2B31789F16928A1E82F5C9CDA419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a3a2f33322d313238203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f38::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:38:ab:74:d0:77:91:4b:3a:fe:0b:8f:22:20:83:f6:03:4c:
         c0:f8:fd:59:e0:f6:29:05:f8:ef:18:9f:ff:de:cb:79:f6:cf:
         81:b5:41:c6:d8:65:ca:e3:8a:8f:87:a0:52:e0:0d:78:df:b2:
         45:95:82:0c:a1:ba:58:40:4a:05:83:22:6d:5e:e7:c4:20:69:
         7a:a9:cf:73:71:8e:ac:2f:b3:00:41:b3:62:aa:47:80:0c:5a:
         ca:27:9f:34:c6:7a:8a:e7:f9:10:22:4e:8d:55:c2:6f:e7:05:
         6a:88:3c:9b:de:a1:15:a4:53:5f:d1:0c:8f:6b:59:c0:6c:4b:
         b8:18:08:e8:c4:4d:c9:33:12:ed:ac:08:09:dd:49:a9:9a:1f:
         ad:0c:47:b2:02:1b:ad:a0:a7:5f:bb:bd:ab:48:ad:85:e6:13:
         23:34:93:4b:9a:b9:1b:f4:fd:fc:ff:fc:7c:7e:58:55:d8:f1:
         97:92:99:29:9b:2a:ec:16:e3:d1:cd:b9:f4:d3:4e:01:18:a2:
         79:fd:0c:dd:9d:3b:63:e7:76:8b:60:f2:0b:cd:c4:bd:ee:7f:
         76:8e:63:cf:9c:cc:f0:58:e7:ba:d8:39:d7:9c:e3:5e:59:9b:
         fb:e2:98:f8:1e:50:2b:73:08:52:4c:80:dc:ca:98:40:9f:21:
         93:03:67:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:06:06 2025 by rpki-client