Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a3a2f33322d3332203d3e20323730393035.roa
File:                     323830343a373334343a3a2f33322d3332203d3e20323730393035.roa (raw, json)
Hash identifier:          b0E96RajeTelki/RKd4yUSyPNuDlQOK6caHY9E0TRNU=
Subject key identifier:   0C:83:9A:F4:3F:7D:49:71:CA:82:8B:43:0F:0A:A1:2B:A0:3B:FA:55
Certificate issuer:       /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial:       3ECEEC2DAF55B26A0ED2B534079BBE6B61ACFD07
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a3a2f33322d3332203d3e20323730393035.roa
Signing time:             Wed 01 Oct 2025 16:15:38 +0000
ROA not before:           Wed 01 Oct 2025 16:10:38 +0000
ROA not after:            Wed 30 Sep 2026 16:15:38 +0000
asID:                     270905
IP address blocks:        2804:7344::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
                          rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ce:ec:2d:af:55:b2:6a:0e:d2:b5:34:07:9b:be:6b:61:ac:fd:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
        Validity
            Not Before: Oct  1 16:10:38 2025 GMT
            Not After : Sep 30 16:15:38 2026 GMT
        Subject: CN=0C839AF43F7D4971CA828B430F0AA12BA03BFA55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:21:cc:38:d3:e1:63:3e:cc:aa:c4:d8:c9:
                    5e:9e:5e:f0:f1:e2:6c:96:2a:6e:f0:fd:6c:35:d3:
                    20:94:91:a1:85:be:b7:98:f8:63:8a:d7:10:4b:92:
                    ad:32:fd:05:ed:7b:97:91:8e:01:81:fb:1d:b2:91:
                    00:64:24:d6:6a:c8:80:c9:bf:36:93:52:f2:4d:9b:
                    8f:90:6b:9c:db:89:86:a0:a3:b2:12:be:f8:7d:4f:
                    60:f2:a7:f6:b8:2c:78:e2:2b:24:7f:ac:e5:d2:7b:
                    a1:e5:da:91:e2:59:51:a4:2c:61:33:b7:8d:65:17:
                    72:87:2b:7f:e2:e6:5c:1a:28:c0:02:1f:fc:a8:1f:
                    1c:9f:22:44:2c:fd:58:59:c5:ef:6a:a0:65:20:4e:
                    9d:01:bd:84:3e:5d:7e:4c:ab:83:4e:b4:5a:37:d5:
                    93:84:b0:ad:05:65:d5:3d:33:0d:bd:f9:4c:a7:4e:
                    69:99:13:55:50:eb:c5:8f:de:be:eb:86:09:c5:ed:
                    fd:61:be:72:b6:74:86:31:6f:0f:78:43:ca:1b:c8:
                    c4:b1:5c:f9:ca:c7:ec:4b:84:b7:c3:de:1a:23:b3:
                    b0:68:84:cb:7f:69:43:50:47:35:eb:b9:e3:9e:f2:
                    3f:d3:00:f3:f9:1d:9f:dc:8d:4b:5b:61:80:0e:03:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:83:9A:F4:3F:7D:49:71:CA:82:8B:43:0F:0A:A1:2B:A0:3B:FA:55
            X509v3 Authority Key Identifier:
                keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a3a2f33322d3332203d3e20323730393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7344::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:e5:b9:88:16:a5:b0:78:06:c4:e1:b5:9d:09:ac:8d:c8:cf:
         3a:6a:f1:ba:32:72:89:02:1b:47:e0:97:88:74:51:cc:a4:a9:
         af:81:ac:c3:46:96:71:12:52:42:6d:ae:65:65:94:91:af:84:
         17:90:98:66:0e:46:85:d4:ec:bc:3c:1c:0d:20:01:af:2c:83:
         3c:74:1a:6a:ea:6c:ef:e6:4f:d3:03:c8:6a:db:9d:e6:cf:36:
         75:83:98:6f:10:dd:93:59:2b:3d:9f:e9:13:2a:b5:8d:84:ca:
         94:e8:43:34:ba:db:43:73:6d:69:b2:0d:4d:ff:ae:cb:8c:c9:
         ff:e7:2b:97:29:e0:85:40:c5:f2:e4:77:cb:f7:eb:a4:d1:cb:
         74:60:4c:12:8d:10:c0:3b:a5:b5:0a:58:14:1f:d0:15:c7:71:
         b4:83:d8:fe:d2:1c:c0:b4:c2:01:95:ef:52:b3:b9:0d:8d:c5:
         b6:f2:c1:0f:c8:c8:61:79:10:0f:4f:52:08:67:d2:47:65:05:
         cf:4d:74:b7:61:ec:4f:c9:55:78:91:96:d1:60:fb:40:5c:2c:
         3e:61:05:82:40:90:e6:5d:67:09:7c:d8:82:34:b5:17:60:93:
         23:b0:4b:58:18:c3:b5:fc:45:79:b2:93:6e:46:6c:31:8a:f0:
         1f:77:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:07:45 2025 by rpki-client