Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/323830343a333365383a633030303a3a2f33342d3334203d3e20323635343234.roa
File:                     323830343a333365383a633030303a3a2f33342d3334203d3e20323635343234.roa (raw, json)
Hash identifier:          poYskUWAgtXlk6lHkqA5Q2PFYTJzat1bhsAEZdJIbkQ=
Subject key identifier:   D6:56:36:50:BB:76:F0:DD:28:80:C2:B6:27:6D:5B:AD:29:A1:2A:0E
Certificate issuer:       /CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
Certificate serial:       6376F405AC80E039A6A250E3DA2EC60932877AFD
Authority key identifier: 56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/323830343a333365383a633030303a3a2f33342d3334203d3e20323635343234.roa
Signing time:             Thu 18 Sep 2025 18:19:43 +0000
ROA not before:           Thu 18 Sep 2025 18:14:43 +0000
ROA not after:            Thu 17 Sep 2026 18:19:43 +0000
asID:                     265424
IP address blocks:        2804:33e8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl
                          rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:76:f4:05:ac:80:e0:39:a6:a2:50:e3:da:2e:c6:09:32:87:7a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
        Validity
            Not Before: Sep 18 18:14:43 2025 GMT
            Not After : Sep 17 18:19:43 2026 GMT
        Subject: CN=D6563650BB76F0DD2880C2B6276D5BAD29A12A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:22:02:48:56:50:59:87:55:8d:57:8b:ca:
                    28:4c:1e:ac:3c:31:b3:fa:99:24:11:b6:20:06:10:
                    00:01:fa:ee:78:f5:b7:97:1e:42:bd:4a:6a:0b:4f:
                    30:53:b0:5b:b3:39:c9:b3:cc:44:41:44:e4:65:09:
                    10:c3:06:c0:ff:60:f5:71:61:5c:64:d3:bd:16:ae:
                    c8:c8:6b:1d:72:80:f8:74:79:b5:bf:c0:ab:ea:6b:
                    50:02:74:a6:f7:a4:33:4c:55:f0:ad:82:21:83:54:
                    01:42:c5:77:18:70:fd:82:c1:8b:b6:7d:30:d3:d8:
                    e0:23:79:bf:71:ba:32:2c:1a:37:93:1d:6d:22:2b:
                    aa:56:4d:71:83:05:f9:07:6e:4a:5d:4f:e2:5b:07:
                    d1:ac:1f:8e:3c:ff:a6:2d:ec:0d:7c:82:21:d2:93:
                    39:14:e7:76:b5:81:e8:5d:30:a8:f2:fb:eb:23:42:
                    e2:91:e8:9d:f1:de:d6:da:7d:31:3d:db:f1:47:9d:
                    7b:8a:22:eb:e4:ad:f9:e1:df:50:45:7b:25:f6:fc:
                    b5:98:54:c4:4f:59:03:9a:7c:85:12:3d:01:ba:5c:
                    aa:57:5d:d9:b3:a5:54:2e:bb:78:1a:af:d0:5d:ae:
                    1c:63:0b:c1:b5:e6:97:0f:bc:c9:4e:37:d4:a2:4c:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:56:36:50:BB:76:F0:DD:28:80:C2:B6:27:6D:5B:AD:29:A1:2A:0E
            X509v3 Authority Key Identifier:
                keyid:56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/323830343a333365383a633030303a3a2f33342d3334203d3e20323635343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33e8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         80:62:80:2b:6d:2d:9d:0a:93:47:7d:bf:95:2d:d3:5b:5f:8a:
         78:93:bb:68:c4:e5:cc:5c:5e:26:4f:2c:55:61:8e:82:6e:b8:
         71:af:20:07:43:5b:62:bc:45:a4:31:9b:43:3b:fc:50:2a:da:
         c4:84:08:7e:e6:a5:b7:6a:3d:d7:90:79:0e:a0:c0:97:c3:b8:
         44:f7:c0:3f:af:63:86:bc:cc:a7:1a:88:6a:44:8f:36:08:5c:
         e4:43:57:81:a2:5b:e4:24:51:ac:f0:51:31:e5:db:67:aa:1c:
         4b:15:cd:6c:f0:29:e1:c8:a7:5a:9a:20:04:4e:c7:58:5b:4a:
         04:13:92:9c:4a:e7:1e:3f:9f:c1:0e:17:fa:29:2f:bf:a8:93:
         9a:b7:7e:58:e7:6e:5f:a0:ab:11:63:28:8b:c9:72:28:8e:7b:
         4f:f8:43:8b:9f:20:3e:ff:c4:b1:85:70:7e:3e:ce:c2:1f:99:
         92:0f:20:27:fc:63:93:6f:5e:b9:78:b6:f7:0c:6c:1c:3b:5d:
         55:91:c5:8d:65:6f:64:d5:17:54:72:9d:6b:09:c3:da:0c:d9:
         15:55:a3:46:a3:23:c9:07:9b:c6:39:05:82:dd:fc:0d:5b:bb:
         d4:9e:48:69:b0:0c:13:1c:ac:04:ed:42:9f:62:71:30:b1:4f:
         a6:61:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:38:02 2025 by rpki-client