Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/323830343a3831303a3a2f33322d3438203d3e20323632333434.roa
File:                     323830343a3831303a3a2f33322d3438203d3e20323632333434.roa (raw, json)
Hash identifier:          aUfa68wfYSWsbQ60Z5lQBS/ZV9FGI7Y3i3goDCLHiQU=
Subject key identifier:   C3:DD:57:0C:CF:F5:FA:A6:9B:23:4F:71:CE:43:04:48:2E:19:0D:6D
Certificate issuer:       /CN=BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571
Certificate serial:       0814E5EE947DF7CF3B29BEDF073B6BF456525C88
Authority key identifier: BA:52:32:3C:04:B0:A7:0C:E8:E3:19:19:CE:6C:C8:BF:DA:3D:25:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/323830343a3831303a3a2f33322d3438203d3e20323632333434.roa
Signing time:             Wed 03 Sep 2025 19:24:53 +0000
ROA not before:           Wed 03 Sep 2025 19:19:53 +0000
ROA not after:            Wed 02 Sep 2026 19:24:53 +0000
asID:                     262344
IP address blocks:        2804:810::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.crl
                          rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 23:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:14:e5:ee:94:7d:f7:cf:3b:29:be:df:07:3b:6b:f4:56:52:5c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571
        Validity
            Not Before: Sep  3 19:19:53 2025 GMT
            Not After : Sep  2 19:24:53 2026 GMT
        Subject: CN=C3DD570CCFF5FAA69B234F71CE4304482E190D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:79:1e:97:17:c9:20:cd:3b:8f:a9:fa:2a:
                    f0:1b:30:76:6b:23:ac:bd:28:e3:65:36:49:40:05:
                    05:60:f4:50:3b:9b:54:3b:70:ab:a9:9e:49:58:42:
                    df:84:f5:6f:89:6d:d4:33:17:d6:93:9c:9f:cb:61:
                    2e:32:bf:6c:32:ea:67:e5:4b:36:7c:13:d7:a9:ea:
                    c1:7c:26:2f:c7:44:cb:80:e4:29:c2:9c:0f:46:06:
                    1d:b6:3b:5e:e9:6b:04:32:54:56:a1:76:ed:84:de:
                    5d:ae:fe:fc:12:07:5b:a2:36:a0:b5:1a:9c:fd:d8:
                    f3:32:6e:73:cb:e3:b9:ca:a5:fb:67:5e:75:13:de:
                    3e:3e:c8:39:1d:4f:e0:d4:99:47:f2:42:84:f1:ef:
                    6a:28:64:e3:ab:a8:15:40:4c:1c:13:ea:a0:28:45:
                    b2:36:07:0c:f0:b0:10:89:c8:44:22:4e:f9:8a:a1:
                    16:ec:9b:a1:f8:50:2d:3c:6f:83:d3:06:f1:6b:9c:
                    3f:ea:f4:f4:2a:11:d6:0b:c2:ab:65:10:b3:43:76:
                    31:f2:bf:f0:6e:fd:4b:fe:31:3e:40:bd:a2:ad:0a:
                    e1:ac:df:bc:71:b6:ec:60:ac:78:3f:ca:38:e6:e2:
                    b1:95:3c:6d:b6:05:87:87:96:c0:67:9b:50:bd:bf:
                    4d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DD:57:0C:CF:F5:FA:A6:9B:23:4F:71:CE:43:04:48:2E:19:0D:6D
            X509v3 Authority Key Identifier:
                keyid:BA:52:32:3C:04:B0:A7:0C:E8:E3:19:19:CE:6C:C8:BF:DA:3D:25:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/323830343a3831303a3a2f33322d3438203d3e20323632333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:810::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:71:68:61:c4:4c:08:81:81:f7:db:42:e7:f6:dc:9e:23:ba:
         01:6e:65:de:07:72:8d:53:0d:ed:f7:4a:78:48:a7:a5:41:cb:
         08:35:2f:57:cd:02:b7:0a:66:7d:d6:d9:66:65:27:d2:ca:d1:
         3d:ab:63:23:66:a7:45:58:94:1e:36:8f:ae:52:9b:43:f4:3f:
         61:25:32:25:b3:f1:73:8b:c2:0a:76:3e:af:0a:2d:ef:25:be:
         29:14:d6:03:4b:c6:7c:74:d6:55:d3:74:04:b3:52:c9:da:b2:
         b1:f0:c6:be:91:b0:14:33:ad:41:7f:d5:53:6c:0d:0d:e6:4b:
         d7:a4:f3:b9:d5:3b:d1:e0:c2:87:3e:2e:4e:35:2c:c2:7c:d1:
         b1:ad:25:e3:49:49:41:3c:d2:5a:97:a9:11:f1:05:d6:b8:79:
         63:27:bd:e9:38:32:3e:dd:9a:1b:8f:f2:84:a6:7f:2a:38:18:
         e7:cd:03:67:c5:00:af:4c:2d:e0:a3:ac:ef:3d:c0:32:2a:8a:
         b0:36:b9:a7:15:da:0e:e5:88:fb:6e:1b:95:93:07:c6:34:a2:
         e0:68:c2:d4:ca:4d:92:cc:f7:e9:2b:e9:fb:b7:d0:8c:37:17:
         b7:f3:41:b9:45:ff:20:1b:03:bc:f1:72:ae:b7:9d:dc:f5:d1:
         d7:6a:37:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:52:43 2025 by rpki-client