Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/323830343a313338303a633030303a3a2f33342d3334203d3e20323633353336.roa
File:                     323830343a313338303a633030303a3a2f33342d3334203d3e20323633353336.roa (raw, json)
Hash identifier:          1oMU9o0AUsTMiTDx9Aj56oZMbeenBDD6sjgBLgVrKHg=
Subject key identifier:   5C:92:CB:04:48:8A:05:2A:5C:07:B1:94:88:16:7D:0A:BA:C5:16:40
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       17583A8F2FC449571F999CDC946804198ADA1A3A
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/323830343a313338303a633030303a3a2f33342d3334203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 16:46:47 +0000
ROA not before:           Tue 09 Sep 2025 16:41:47 +0000
ROA not after:            Tue 08 Sep 2026 16:46:47 +0000
asID:                     263536
IP address blocks:        2804:1380:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:58:3a:8f:2f:c4:49:57:1f:99:9c:dc:94:68:04:19:8a:da:1a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 16:41:47 2025 GMT
            Not After : Sep  8 16:46:47 2026 GMT
        Subject: CN=5C92CB04488A052A5C07B19488167D0ABAC51640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:c6:ec:c7:be:ed:8e:74:43:99:09:73:98:
                    3f:5e:5b:ba:38:c8:80:77:f2:6b:ee:da:2b:55:83:
                    d7:26:99:d1:2f:27:e8:be:77:af:93:c0:c3:1e:e4:
                    e7:74:9e:c0:a8:b1:11:28:a6:84:0f:9f:e7:49:9e:
                    3a:08:ec:cd:f9:ec:25:32:1d:e7:1e:d5:40:b3:a9:
                    6b:81:8a:23:49:67:8e:db:2c:26:30:7f:1d:27:0c:
                    d1:63:5c:e0:b8:ce:66:5e:54:75:57:14:fd:2d:93:
                    bc:8e:32:98:d6:d1:7c:6c:7e:54:88:4a:d8:3d:29:
                    d4:bf:4e:f3:1b:4a:d4:bf:4e:13:28:40:ab:0f:a2:
                    f7:1b:2f:9b:35:d0:5a:dc:9b:92:17:d0:e0:6a:6e:
                    46:b3:64:bb:de:07:fa:d0:62:7d:7b:42:58:c5:8b:
                    74:2b:69:75:7c:ac:f7:e5:b1:67:04:43:f5:dd:a7:
                    1d:6a:0b:dd:af:98:c8:c4:9b:b9:bf:16:fd:fe:ef:
                    12:03:61:ec:c0:d6:f4:bd:ca:20:48:8b:8c:ee:97:
                    e6:1c:4f:c4:ab:46:52:ef:7d:2f:9e:c1:d1:6d:ce:
                    8e:a1:9c:2f:74:c7:df:4d:01:31:d8:46:5e:2c:2a:
                    da:a3:74:1b:be:d8:d2:0f:63:45:95:57:a4:75:1d:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:92:CB:04:48:8A:05:2A:5C:07:B1:94:88:16:7D:0A:BA:C5:16:40
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/323830343a313338303a633030303a3a2f33342d3334203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1380:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:8d:93:e0:4c:e8:aa:dc:f0:5a:cd:37:ca:2f:1b:3f:51:c0:
         46:00:de:04:cf:02:bf:71:8a:7f:5c:22:83:f7:a2:6a:72:94:
         3e:c6:8a:23:7d:14:09:7e:bd:55:c1:0b:57:ff:31:63:13:25:
         64:77:d5:d6:a9:e1:8b:fd:ca:72:19:ef:d3:bc:3a:f7:10:aa:
         d8:6b:98:35:50:bf:8b:60:97:82:39:e5:a1:2e:2b:7f:44:1e:
         c6:71:64:9d:9f:bf:98:b1:6d:4f:97:03:c8:ef:32:34:8c:61:
         82:34:e9:19:c1:6c:55:6f:94:05:64:24:e3:eb:72:4e:81:56:
         aa:43:98:65:17:1f:ff:0e:4c:60:59:9b:6a:99:77:ea:9f:47:
         e9:6c:76:3d:54:46:65:f5:b0:fe:a1:03:bf:3f:b9:a7:b0:06:
         48:84:31:c4:48:80:57:2a:bd:a1:50:17:c3:01:df:15:a3:e8:
         3f:18:90:28:66:61:5a:dd:3e:75:e3:1a:a8:ff:b0:5d:43:17:
         42:02:19:0f:71:ff:82:b2:f3:34:d4:36:ac:32:2c:7e:2e:eb:
         c6:c0:31:13:0a:0a:82:32:3e:54:4b:65:bd:55:91:12:5c:1b:
         0b:05:40:ff:ea:5c:64:f7:38:0e:ed:ef:cc:62:a0:30:f7:94:
         c8:2b:cf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:00:41 2025 by rpki-client