Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/323830343a3230343a3a2f33322d3438203d3e203238313836.roa
File:                     323830343a3230343a3a2f33322d3438203d3e203238313836.roa (raw, json)
Hash identifier:          zoeb0MX4R1wuY9O+Pg5CswmX9rcvPNA7goeSP8VMaps=
Subject key identifier:   06:0D:A1:58:99:37:D7:AD:40:FF:48:5C:7A:A1:10:9F:80:9D:A2:D7
Certificate issuer:       /CN=8CAC75CE2881CD7669B1A00B98185D6B35836A16
Certificate serial:       51463D14BFDFD8517E814CA6460326A31B01A1C8
Authority key identifier: 8C:AC:75:CE:28:81:CD:76:69:B1:A0:0B:98:18:5D:6B:35:83:6A:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/323830343a3230343a3a2f33322d3438203d3e203238313836.roa
Signing time:             Wed 27 Aug 2025 21:00:39 +0000
ROA not before:           Wed 27 Aug 2025 20:55:39 +0000
ROA not after:            Wed 26 Aug 2026 21:00:39 +0000
asID:                     28186
IP address blocks:        2804:204::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.crl
                          rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:46:3d:14:bf:df:d8:51:7e:81:4c:a6:46:03:26:a3:1b:01:a1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAC75CE2881CD7669B1A00B98185D6B35836A16
        Validity
            Not Before: Aug 27 20:55:39 2025 GMT
            Not After : Aug 26 21:00:39 2026 GMT
        Subject: CN=060DA1589937D7AD40FF485C7AA1109F809DA2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:50:19:63:56:88:82:b1:46:e8:e5:b5:03:
                    e0:67:50:34:8c:b4:dc:54:37:ac:6d:59:94:04:a8:
                    ee:4c:39:80:2b:e0:ef:1f:c9:d7:71:ee:81:74:7e:
                    47:a0:88:5c:8c:62:2a:54:be:d7:95:ae:5c:21:9c:
                    00:67:ab:aa:eb:ee:07:92:d5:9c:d3:22:25:7b:d0:
                    06:bb:e3:c2:58:88:31:fd:e8:d5:21:3a:22:3d:ab:
                    ec:9a:3e:17:ff:d5:4e:22:ae:d8:08:f7:f2:ce:0d:
                    f3:b6:d6:50:51:2f:41:cf:29:c1:5a:e9:3d:0c:28:
                    6c:58:db:7a:57:ae:93:e6:c2:36:00:77:c4:95:2f:
                    c1:6b:7f:b1:1b:5e:83:84:c6:ec:08:dc:4a:bb:b6:
                    cc:15:97:9c:89:8a:9f:07:2e:36:b5:cf:9e:83:3f:
                    30:f2:75:7d:2f:c6:42:40:fc:90:4c:3a:c2:ce:35:
                    1b:0e:25:6f:d4:1c:39:98:5d:84:10:fe:46:3f:4b:
                    6b:f9:b7:27:12:0e:aa:2c:68:21:d1:1e:42:47:54:
                    12:8f:9f:3a:9b:43:c1:4e:52:4a:98:52:06:82:d1:
                    78:93:f0:3f:aa:d8:52:92:97:d0:94:47:0e:33:2a:
                    c3:22:6b:98:e1:57:59:f3:f5:6b:0f:06:5d:4d:9c:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0D:A1:58:99:37:D7:AD:40:FF:48:5C:7A:A1:10:9F:80:9D:A2:D7
            X509v3 Authority Key Identifier:
                keyid:8C:AC:75:CE:28:81:CD:76:69:B1:A0:0B:98:18:5D:6B:35:83:6A:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/323830343a3230343a3a2f33322d3438203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:204::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:22:4b:dd:3d:75:d3:f6:44:1b:a9:ed:0c:3a:d0:d5:d1:93:
         3d:6c:b4:5b:fb:36:7c:59:2f:44:9d:d2:13:b7:ba:a5:af:a1:
         84:ad:d5:a7:60:7b:0f:2d:39:b2:64:4b:e5:8b:1e:e3:3e:3b:
         20:67:29:32:45:ab:31:44:15:ce:78:a7:a7:c4:81:49:b7:c2:
         31:de:bd:71:f3:12:f2:ea:5e:eb:32:14:73:a8:29:1b:69:cd:
         ea:c6:23:45:f3:b1:48:90:8c:17:2c:5c:d9:c3:9f:64:62:16:
         de:20:01:e2:85:e3:fc:36:d2:91:f2:94:4f:4b:7d:63:6f:c0:
         9f:70:45:99:92:50:a9:14:49:69:e9:10:20:1e:f4:a6:75:1c:
         e0:b5:55:e1:ec:13:8a:a4:34:50:5d:5a:d3:12:a0:51:43:cb:
         39:ff:f1:b6:7e:4a:f7:f8:7e:73:c5:21:fb:ef:75:f0:39:df:
         73:d2:f5:d6:59:27:9d:cb:67:73:7c:52:2d:4d:20:66:39:1e:
         e2:03:70:25:8c:17:31:48:a6:af:49:02:16:bd:4c:14:80:ba:
         f3:f7:36:e8:89:b9:b6:5c:2e:62:17:cf:83:26:5e:7d:33:4d:
         e4:19:0a:2b:dd:2e:e8:7a:7f:54:0e:85:df:65:3e:bb:b8:84:
         97:2e:1c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:37:53 2025 by rpki-client