Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/323830343a323966343a3a2f33322d3332203d3e20323634303437.roa
File:                     323830343a323966343a3a2f33322d3332203d3e20323634303437.roa (raw, json)
Hash identifier:          kSfdZ5DyOYk6379Ho6Ir8JUX6nyPZZkk9pBYpteWMY4=
Subject key identifier:   99:1B:2C:9B:86:0A:8F:A4:7E:51:95:23:CE:54:B8:91:63:5A:D0:31
Certificate issuer:       /CN=A659218A22E64B9AA4A437C941E20690CB9F5BFC
Certificate serial:       627036746C0F4153EA662F4EBAF0E2E1B8BCBB47
Authority key identifier: A6:59:21:8A:22:E6:4B:9A:A4:A4:37:C9:41:E2:06:90:CB:9F:5B:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/323830343a323966343a3a2f33322d3332203d3e20323634303437.roa
Signing time:             Tue 02 Sep 2025 13:27:37 +0000
ROA not before:           Tue 02 Sep 2025 13:22:37 +0000
ROA not after:            Tue 01 Sep 2026 13:27:37 +0000
asID:                     264047
IP address blocks:        2804:29f4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.crl
                          rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:70:36:74:6c:0f:41:53:ea:66:2f:4e:ba:f0:e2:e1:b8:bc:bb:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A659218A22E64B9AA4A437C941E20690CB9F5BFC
        Validity
            Not Before: Sep  2 13:22:37 2025 GMT
            Not After : Sep  1 13:27:37 2026 GMT
        Subject: CN=991B2C9B860A8FA47E519523CE54B891635AD031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:86:96:e8:97:ad:cc:3c:f0:53:e6:b3:38:
                    d6:41:b8:b0:fb:a7:ff:38:2a:93:b2:99:12:96:04:
                    8f:fb:09:e3:e5:e8:6c:da:8e:f3:6b:c0:e3:56:7a:
                    17:d5:82:93:53:35:21:95:69:f8:6b:c6:f7:47:dc:
                    57:ef:71:52:d4:5b:4a:11:3c:6b:50:f7:c4:ec:25:
                    51:e9:9a:57:8b:9d:f6:ab:f4:11:a9:80:35:ea:a0:
                    4c:30:40:dd:35:f9:f2:29:94:ce:04:85:c9:f8:21:
                    27:5d:f1:97:68:05:4b:d0:22:a5:bd:db:7b:95:bc:
                    42:96:4e:73:02:6c:20:b3:10:ef:b2:44:7a:fe:7e:
                    47:65:0f:1b:fa:f2:47:49:da:1c:ca:aa:f5:cc:70:
                    e2:6b:e1:20:8d:42:83:b3:6a:40:81:be:ff:b7:be:
                    1a:37:ed:9f:11:5f:9d:ea:50:a5:a6:a1:e1:e3:e4:
                    59:74:eb:7e:25:b0:1c:cc:f9:4e:44:7d:a4:ba:d2:
                    da:d8:77:49:1a:fd:80:10:8a:14:e2:7f:e5:57:aa:
                    be:0c:0e:97:4a:43:c1:02:26:4a:75:98:24:ae:d1:
                    e2:77:60:5a:f7:4a:cc:6b:aa:a1:88:ac:30:93:5f:
                    86:44:15:a8:57:b2:96:38:c8:58:88:ac:ba:40:e8:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1B:2C:9B:86:0A:8F:A4:7E:51:95:23:CE:54:B8:91:63:5A:D0:31
            X509v3 Authority Key Identifier:
                keyid:A6:59:21:8A:22:E6:4B:9A:A4:A4:37:C9:41:E2:06:90:CB:9F:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/323830343a323966343a3a2f33322d3332203d3e20323634303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:50:a0:52:e3:16:3d:59:2c:0e:3d:5e:cc:36:50:63:78:4b:
         ab:0a:5b:6e:36:3b:42:7b:08:9f:65:f1:32:1e:a0:a7:0b:19:
         b8:ee:52:4b:06:cd:f0:8c:71:89:b2:6b:c7:31:33:a3:49:03:
         5e:e9:1a:6a:d0:bf:90:cf:36:e5:c2:2d:8b:8e:e5:c7:dd:4f:
         90:93:1c:34:0c:66:79:a5:dc:ab:5b:40:b9:aa:20:40:ac:18:
         c1:d5:d5:6e:d9:26:50:e6:12:66:9f:71:1e:15:46:95:e1:cd:
         f2:29:78:43:3e:90:7d:33:33:0a:15:07:18:82:23:0b:78:db:
         cd:ad:42:23:11:9c:5c:a9:3e:6b:68:74:5f:85:15:62:da:55:
         18:65:65:7c:eb:cb:2b:69:40:0f:b0:05:fd:c2:89:2c:71:75:
         de:cf:ef:3b:e9:3d:f0:43:fc:c6:5b:66:84:b3:eb:8b:67:cb:
         47:04:fb:8f:8d:ff:b9:84:94:49:3d:4b:87:1d:d8:c1:4e:51:
         30:49:78:cc:b0:30:2b:a7:56:37:29:84:24:70:93:2e:15:c8:
         53:e1:43:8e:cc:2f:6e:47:5e:b2:1d:01:12:28:03:6d:65:d4:
         57:d6:ca:55:72:b6:72:ea:9e:21:a4:5c:e7:61:df:3d:bc:97:
         61:78:40:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:17:06 2025 by rpki-client