Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a343030303a3a2f33362d3336203d3e20323636323638.roa
File:                     323830343a336435343a343030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier:          jOTJB0WRpdAkqZ6CdTNYEAzVkuzdWRVsdrBCfurVsW0=
Subject key identifier:   10:14:AE:FD:9A:46:A8:D4:94:7A:7D:E5:C6:D8:4E:1A:4D:26:CB:6E
Certificate issuer:       /CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
Certificate serial:       2999445631A1815BF29AC124D1EF56E4D8DF5808
Authority key identifier: F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a343030303a3a2f33362d3336203d3e20323636323638.roa
Signing time:             Mon 15 Sep 2025 23:58:49 +0000
ROA not before:           Mon 15 Sep 2025 23:53:49 +0000
ROA not after:            Mon 14 Sep 2026 23:58:49 +0000
asID:                     266268
IP address blocks:        2804:3d54:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:99:44:56:31:a1:81:5b:f2:9a:c1:24:d1:ef:56:e4:d8:df:58:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
        Validity
            Not Before: Sep 15 23:53:49 2025 GMT
            Not After : Sep 14 23:58:49 2026 GMT
        Subject: CN=1014AEFD9A46A8D4947A7DE5C6D84E1A4D26CB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:bf:58:b6:97:e5:1b:96:30:60:78:c5:eb:
                    cf:58:61:3d:60:2b:88:9f:a5:df:00:dc:5b:f6:f3:
                    d0:5d:11:be:64:fc:41:71:64:c9:0f:6c:ff:58:54:
                    34:30:56:5f:ac:47:f9:a0:c9:5c:b9:1e:97:4d:b3:
                    bd:28:86:31:a4:0d:62:16:4b:8a:e7:e6:7d:eb:52:
                    db:6c:c4:e1:3a:6b:ed:71:c9:46:d0:c5:e0:a2:32:
                    1c:d2:2c:59:0b:6b:9c:db:82:42:2e:8a:91:ea:49:
                    f0:0a:49:10:94:69:6b:1e:fa:fd:50:76:4c:37:86:
                    81:54:e4:67:8a:e1:72:a1:83:cf:23:be:21:c2:d0:
                    72:a1:34:07:77:70:a0:fc:81:94:b3:8f:10:b0:38:
                    69:7c:0f:3f:38:c5:49:79:34:02:78:5d:de:7d:16:
                    94:3a:3a:cc:e6:7d:f5:3d:8e:be:44:b8:fa:ef:f5:
                    8a:20:89:6b:34:7e:f8:d7:28:8c:9b:8b:21:9f:ae:
                    cf:42:f3:10:a5:aa:f3:fe:04:aa:69:f2:c0:66:76:
                    e8:a4:82:19:18:f3:6a:8a:6e:e4:73:cd:77:8b:3a:
                    da:f8:ec:fe:a5:13:48:04:a1:d9:58:48:a6:1f:9c:
                    68:8c:5c:97:c9:87:9c:6f:02:02:1d:ce:01:bf:d9:
                    1a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:14:AE:FD:9A:46:A8:D4:94:7A:7D:E5:C6:D8:4E:1A:4D:26:CB:6E
            X509v3 Authority Key Identifier:
                keyid:F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a343030303a3a2f33362d3336203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:eb:7c:54:06:c8:36:e8:5e:a0:96:6c:a0:e3:dc:ef:f4:
         48:d1:fd:a3:ae:95:69:2b:f2:96:39:7d:2c:58:bc:8a:9c:4d:
         02:35:b4:6f:0b:c2:21:9f:ac:26:f6:50:ee:58:bf:56:a0:c9:
         a1:62:7a:d7:70:c0:ed:00:eb:38:22:7b:5b:57:4b:71:b9:86:
         c5:e4:66:e2:50:da:74:d3:7c:94:e1:30:37:6e:47:25:44:6a:
         b2:58:45:04:03:f4:55:83:c0:75:78:48:dd:81:fc:bd:83:b1:
         2d:7b:f5:a4:d5:75:ac:ec:26:88:2e:49:2d:3e:ae:36:77:db:
         26:61:63:d0:ec:5d:cd:89:96:47:f5:29:d0:06:d4:24:f6:00:
         55:6d:2f:4d:01:40:a8:1e:6d:fb:42:77:c6:04:6d:83:6f:81:
         07:ef:b8:40:71:a2:5c:c6:67:39:87:00:ce:20:4c:23:e5:f1:
         40:db:83:38:2f:86:42:44:ba:b3:f4:04:98:86:93:7c:27:14:
         7c:0f:fa:eb:63:37:f4:d2:b5:07:2b:d9:86:74:b4:4a:b1:2b:
         18:50:8d:82:e5:8e:fc:3b:ca:9a:7a:4d:00:0f:bd:46:42:fd:
         3b:ca:f9:e1:14:e8:ac:2a:9a:36:00:81:2b:c2:be:db:96:3d:
         62:f0:b6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:02:04 2025 by rpki-client