Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a343030303a3a2f33342d3334203d3e20323637303234.roa
File:                     323830343a343666633a343030303a3a2f33342d3334203d3e20323637303234.roa (raw, json)
Hash identifier:          UW9H++auJqL30B3N4WqCQgHR8zJibaJGWZVn49nd/nc=
Subject key identifier:   4C:41:A1:8A:4F:05:A4:8D:99:35:B7:51:D9:EB:F0:F4:D0:6A:07:62
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       481D4ED92F5404A13984EF5FC5CBC953820413B1
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a343030303a3a2f33342d3334203d3e20323637303234.roa
Signing time:             Tue 26 Aug 2025 11:23:00 +0000
ROA not before:           Tue 26 Aug 2025 11:18:00 +0000
ROA not after:            Tue 25 Aug 2026 11:23:00 +0000
asID:                     267024
IP address blocks:        2804:46fc:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1d:4e:d9:2f:54:04:a1:39:84:ef:5f:c5:cb:c9:53:82:04:13:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Aug 26 11:18:00 2025 GMT
            Not After : Aug 25 11:23:00 2026 GMT
        Subject: CN=4C41A18A4F05A48D9935B751D9EBF0F4D06A0762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:c5:54:9c:ce:99:29:07:13:47:4a:81:0d:
                    de:78:f3:40:d2:ac:1d:f4:14:87:a2:ab:93:71:03:
                    31:77:ff:20:c2:46:5c:77:da:32:a3:aa:98:83:87:
                    bd:33:ca:16:c4:4d:66:4e:72:dd:a2:e1:07:a8:e8:
                    6f:99:10:2a:f3:80:f0:2b:95:ad:8c:04:50:22:d3:
                    13:bf:b1:9e:23:db:ae:30:81:aa:df:58:09:ab:ca:
                    e6:f5:e2:dc:5b:e4:ac:6f:76:ec:13:2b:70:59:b4:
                    a4:51:47:6e:22:19:88:98:76:1c:d5:b0:55:a1:a8:
                    04:da:3d:c5:47:d7:3d:55:63:68:63:d6:c3:79:49:
                    03:b3:00:31:53:c2:c7:e4:fc:a1:41:c5:e0:65:d7:
                    71:fa:26:92:3e:0b:ff:6a:d2:d1:cf:64:b9:73:eb:
                    4e:70:bf:91:d2:77:d3:20:08:a3:9c:bc:08:90:df:
                    24:b0:98:49:54:a4:70:2a:24:c9:0a:d4:77:76:34:
                    c6:85:1f:fc:fe:d9:2f:38:4a:ef:cf:bf:d0:f5:eb:
                    24:92:c6:d6:10:99:b5:c7:7f:0a:51:bb:f1:1e:1c:
                    60:38:2b:43:6d:2d:d3:49:c9:cc:86:57:ef:10:6e:
                    b3:85:32:d1:25:c0:a2:58:8a:21:e6:17:93:c8:48:
                    83:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:41:A1:8A:4F:05:A4:8D:99:35:B7:51:D9:EB:F0:F4:D0:6A:07:62
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a343030303a3a2f33342d3334203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8a:df:df:83:8f:b3:80:66:59:6c:7e:44:50:f7:d1:3a:d2:31:
         ce:72:20:1f:78:21:1a:95:20:93:8f:c3:f4:2a:8c:f8:fb:1a:
         50:b1:87:9e:9b:c3:2e:d1:ba:08:1a:b2:96:2a:2f:a6:ed:57:
         d7:7c:2f:ef:2f:3c:ef:85:a0:d5:b3:7a:d4:85:6f:44:d9:f7:
         10:a8:24:d7:aa:b5:09:a6:78:78:b6:19:4a:67:56:e9:1b:9e:
         77:fe:81:77:a6:1c:33:ff:0e:98:ac:46:4e:5e:8d:4d:84:da:
         06:66:9a:59:81:26:52:a2:f7:27:6e:ea:66:84:a1:ef:ae:e6:
         65:d6:0c:38:18:be:b3:d8:e0:19:b8:22:6d:cb:27:1a:71:76:
         02:7a:f3:54:e0:2d:a5:43:a9:d4:f2:6f:00:fb:75:f5:60:52:
         b1:8b:a6:c1:0e:b0:7c:c6:1e:46:9a:47:fd:e9:73:b2:a3:c5:
         14:ab:64:35:69:8d:91:93:56:0d:ce:bd:20:0d:d5:5e:ca:74:
         3c:0e:ef:9a:07:f2:03:80:2f:5b:2e:59:55:88:8e:e9:9e:39:
         64:9f:06:0c:6b:5a:a1:09:54:45:26:5f:a4:22:f2:cd:3f:57:
         ab:19:f5:9e:91:e8:e5:3b:92:0a:1c:5f:22:25:43:91:22:8f:
         03:63:7f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:29:35 2025 by rpki-client