Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33342d3334203d3e20323636323638.roa
File:                     323830343a336435343a3a2f33342d3334203d3e20323636323638.roa (raw, json)
Hash identifier:          EbBNHqtU6UK5/aJyX9np2yUMyn3FxthZ80hfVufm+2A=
Subject key identifier:   C8:B6:6A:B3:A4:F2:75:22:AE:69:CA:FD:C7:B3:79:11:DC:52:FC:67
Certificate issuer:       /CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
Certificate serial:       2C76625D63843DA8260E936C31F8E07BF19CCCA5
Authority key identifier: F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33342d3334203d3e20323636323638.roa
Signing time:             Mon 15 Sep 2025 23:58:45 +0000
ROA not before:           Mon 15 Sep 2025 23:53:45 +0000
ROA not after:            Mon 14 Sep 2026 23:58:45 +0000
asID:                     266268
IP address blocks:        2804:3d54::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:76:62:5d:63:84:3d:a8:26:0e:93:6c:31:f8:e0:7b:f1:9c:cc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
        Validity
            Not Before: Sep 15 23:53:45 2025 GMT
            Not After : Sep 14 23:58:45 2026 GMT
        Subject: CN=C8B66AB3A4F27522AE69CAFDC7B37911DC52FC67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:5a:ea:14:82:75:ba:5d:d3:3d:a9:7f:62:
                    65:bb:51:62:96:d4:b2:75:03:67:e7:ff:e4:18:0f:
                    c5:79:95:96:4f:21:a0:29:3b:45:b5:a6:52:88:18:
                    c5:e2:08:e0:65:4e:41:0b:dd:9e:79:e2:52:b6:1f:
                    7e:72:71:4c:62:78:f0:28:05:46:d5:38:58:f9:39:
                    3f:86:57:15:37:6e:61:f3:6d:62:b0:26:f0:7a:ac:
                    9b:c6:cf:13:de:4d:d1:48:56:96:46:9a:0c:74:89:
                    5f:8d:9c:20:55:51:8a:14:59:11:3a:e4:ae:d8:4a:
                    38:f0:1c:02:cb:3b:8a:e8:2f:9f:bd:ca:00:ff:9a:
                    22:50:4f:f9:c2:ea:92:7a:db:00:3d:5f:db:a5:44:
                    0a:3d:a4:01:30:64:7d:51:df:f3:bd:09:87:27:bc:
                    27:15:fc:f3:e8:4d:ed:4b:9e:3b:bf:88:b7:2d:0f:
                    cd:34:10:b4:07:85:6f:43:bb:00:29:98:83:d5:05:
                    9f:dc:c6:0f:e7:28:df:05:75:78:29:6d:48:8e:49:
                    4a:65:0b:eb:b6:f0:d1:0e:bd:ad:b3:f2:44:b9:47:
                    f5:06:7e:b6:8f:7f:01:1d:55:64:fb:b6:46:2a:0e:
                    e8:dc:cd:1e:d5:1a:c2:c8:89:40:81:24:b4:d9:33:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B6:6A:B3:A4:F2:75:22:AE:69:CA:FD:C7:B3:79:11:DC:52:FC:67
            X509v3 Authority Key Identifier:
                keyid:F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33342d3334203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54::/34

    Signature Algorithm: sha256WithRSAEncryption
         bd:cf:21:69:d1:3f:af:01:e6:f3:38:6a:29:30:c2:27:ca:a2:
         e7:08:cf:01:a7:0c:d3:f5:65:3f:8f:89:3d:65:fd:93:86:21:
         6d:74:f5:ee:60:ce:db:49:58:e9:c6:26:70:f7:cd:eb:c5:41:
         02:ac:48:0e:e8:67:35:d4:c6:40:ce:80:68:0c:d8:c7:d4:78:
         6b:1a:23:66:59:cb:9f:55:67:43:81:e8:76:5c:b6:2a:cf:a8:
         8e:34:21:0f:ca:16:9c:c6:28:80:90:d3:0d:10:57:d8:8c:8a:
         c0:0d:14:c6:1e:78:e7:40:c4:06:97:32:e0:fb:c3:08:1e:5f:
         aa:3b:17:6e:d0:96:5d:ea:f1:de:9b:06:a6:a0:1f:7a:3e:0a:
         41:7e:f9:75:e7:85:a8:e9:7d:f1:65:23:e1:4a:53:20:e1:3e:
         15:1e:dc:5f:1c:3c:7c:ab:17:9e:63:dd:cf:29:72:44:e7:6e:
         9b:5f:56:65:23:91:25:f7:96:ac:2a:e5:9f:0f:5b:55:a1:10:
         e0:4f:21:54:bb:fc:a0:b2:d9:83:2c:d0:2d:28:d1:7c:72:17:
         d4:d0:bb:2e:dd:12:47:4b:7e:fa:24:d1:8b:41:1f:d7:b7:df:
         9d:4a:44:5c:15:a7:f9:9c:d2:11:c7:82:43:4d:c9:0b:9e:ab:
         b9:2a:de:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:52:53 2025 by rpki-client