Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a383030303a3a2f33342d3334203d3e20323730393035.roa
File:                     323830343a373334343a383030303a3a2f33342d3334203d3e20323730393035.roa (raw, json)
Hash identifier:          zSZBOT/eEVH4NopCJ1NOtzvZrj354yQ3o7Ai1Ha7OrM=
Subject key identifier:   13:B8:1C:DE:FF:25:2B:AC:D0:0B:44:41:B3:F5:F0:94:C9:52:F9:09
Certificate issuer:       /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial:       41435A3FE192F299E5830BA645B9437E687AC915
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a383030303a3a2f33342d3334203d3e20323730393035.roa
Signing time:             Wed 01 Oct 2025 16:15:56 +0000
ROA not before:           Wed 01 Oct 2025 16:10:56 +0000
ROA not after:            Wed 30 Sep 2026 16:15:56 +0000
asID:                     270905
IP address blocks:        2804:7344:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
                          rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:43:5a:3f:e1:92:f2:99:e5:83:0b:a6:45:b9:43:7e:68:7a:c9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
        Validity
            Not Before: Oct  1 16:10:56 2025 GMT
            Not After : Sep 30 16:15:56 2026 GMT
        Subject: CN=13B81CDEFF252BACD00B4441B3F5F094C952F909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4d:32:ba:cb:5d:c3:59:af:35:48:24:c5:78:
                    a8:7a:59:a5:86:7d:6b:57:9b:d3:b5:66:10:bc:7e:
                    ff:47:cb:7e:e7:42:12:39:28:55:80:9c:8b:14:9b:
                    47:23:49:9e:82:a0:fa:57:32:6e:a7:46:ca:13:6f:
                    56:0b:13:95:9e:1c:b2:b7:47:37:ed:67:2d:8f:95:
                    fd:75:9a:38:a8:98:fc:76:ab:b8:d0:1d:6f:3d:85:
                    e0:c1:33:61:28:86:bf:e9:8b:77:a7:72:5f:36:03:
                    30:58:f5:b5:ab:56:d7:2c:a6:6f:c2:96:41:68:e7:
                    df:ed:b6:78:6a:1b:19:ea:72:57:42:5d:50:9e:5a:
                    2b:59:81:cd:ba:85:9b:a4:07:26:66:8c:1b:95:d8:
                    ac:46:7b:33:46:2b:f5:1c:d0:39:7d:48:07:fe:e1:
                    00:6a:a7:f2:07:17:33:90:c6:c8:27:91:cc:9d:7a:
                    fd:5c:79:f8:c8:69:82:c3:f5:97:0a:5c:b1:31:cf:
                    4b:2b:54:65:20:c7:d7:19:93:f2:3a:e2:96:d6:a9:
                    1c:b9:ca:11:c4:ac:26:82:33:3d:f5:5b:35:e0:d2:
                    c1:48:79:8b:54:a9:f2:18:28:6d:e1:fc:d0:e0:fb:
                    0b:16:bf:71:67:42:14:ba:5f:d1:08:42:0b:6a:87:
                    44:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B8:1C:DE:FF:25:2B:AC:D0:0B:44:41:B3:F5:F0:94:C9:52:F9:09
            X509v3 Authority Key Identifier:
                keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a383030303a3a2f33342d3334203d3e20323730393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7344:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:e2:cd:44:bf:a3:a8:83:dd:c4:1d:e5:0a:87:39:fb:76:b8:
         e1:3c:ee:02:87:fc:40:9c:b7:0b:cc:25:e7:8d:52:06:6b:c6:
         e9:61:9a:1e:7e:5b:0c:3b:ea:1e:39:0b:3e:1d:db:b5:44:fd:
         5b:5a:82:ea:94:99:90:a4:a5:f3:97:8d:e0:33:37:0f:93:3c:
         f0:47:cb:94:64:b6:30:ed:3e:b9:3f:93:40:a5:cf:b1:26:9d:
         24:a9:dd:f6:79:61:8a:95:5c:84:a5:54:37:90:5b:95:3f:65:
         ca:4c:fc:a4:a5:e1:e4:72:15:99:a1:6e:6f:b0:c5:96:fa:03:
         46:9e:30:b0:e2:f1:7d:00:bb:86:6a:c9:bc:60:7c:f2:8f:f8:
         ee:a3:47:a3:8f:7a:fb:37:95:41:dd:18:f8:56:c9:6b:d9:e4:
         a0:57:b0:ff:f5:f1:f0:56:64:99:ec:48:5a:3d:50:fd:dc:9c:
         a1:22:dd:8b:fb:77:fd:11:39:4e:08:89:9f:68:ed:05:31:f9:
         d5:bc:40:0f:5e:9d:fc:e9:7a:c8:a0:ad:19:1d:3f:f2:f6:12:
         08:5a:1f:65:0f:f2:7c:a5:15:6d:6b:e2:1c:47:2e:5b:84:a1:
         e8:e9:8f:0e:8d:a4:33:ad:b9:46:6c:64:b2:b3:cc:9e:37:0e:
         c6:be:5e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:07:44 2025 by rpki-client