Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030303a3a2f33362d3336203d3e203533303532.roa
File:                     323830343a326634383a343030303a3a2f33362d3336203d3e203533303532.roa (raw, json)
Hash identifier:          i+HC1DDB2921eTVEjjqDNcq5RxoE+kOgojnIe172JKk=
Subject key identifier:   BF:81:E8:73:20:7F:8A:2D:C5:52:D3:62:B9:05:FE:2A:D3:8D:C5:F3
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       1A9500883DE5086065AC9821E593E8B22A1F555E
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030303a3a2f33362d3336203d3e203533303532.roa
Signing time:             Mon 01 Sep 2025 18:45:28 +0000
ROA not before:           Mon 01 Sep 2025 18:40:28 +0000
ROA not after:            Mon 31 Aug 2026 18:45:28 +0000
asID:                     53052
IP address blocks:        2804:2f48:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 19:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:95:00:88:3d:e5:08:60:65:ac:98:21:e5:93:e8:b2:2a:1f:55:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep  1 18:40:28 2025 GMT
            Not After : Aug 31 18:45:28 2026 GMT
        Subject: CN=BF81E873207F8A2DC552D362B905FE2AD38DC5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:df:a0:07:4e:60:e9:9c:92:a3:d0:10:ea:30:
                    31:46:4b:db:86:6e:70:cc:e7:be:25:d0:c0:92:0a:
                    47:b5:31:ba:8a:1f:af:5c:a6:c2:19:e3:7e:08:b9:
                    e1:2a:fe:4b:ae:05:ce:78:71:df:fd:3c:87:4b:f8:
                    f7:2e:9a:ab:30:3f:d4:12:de:05:e6:2f:7d:17:02:
                    fe:aa:e0:2d:9b:69:e7:41:4b:ce:d8:fb:0d:33:21:
                    a1:17:d1:d7:23:a5:b3:aa:2a:6b:50:6d:e9:c3:6f:
                    46:7d:44:6a:44:d0:70:be:b4:ad:b7:ce:cc:d9:dc:
                    2c:e2:5d:d3:0f:fe:af:ee:fb:a8:ac:ef:4a:a0:f3:
                    98:1d:33:e0:8c:22:84:17:85:40:e2:ae:cb:2a:18:
                    c2:24:02:05:b3:51:70:a5:3f:65:9a:a5:44:9f:3a:
                    ce:3f:f6:78:82:8f:b5:67:b1:ef:1c:48:bb:b5:83:
                    f1:fc:2b:19:08:eb:f1:de:ee:99:f4:3d:e7:07:a5:
                    2d:cc:bc:ee:16:3c:b7:2f:7a:67:5b:61:8c:4b:ae:
                    1d:0f:7f:ab:97:20:70:09:c5:5b:83:26:2f:d8:8b:
                    75:8b:bd:98:d3:44:f6:29:de:c1:e6:24:50:c3:2c:
                    42:7d:78:d9:75:47:c5:18:07:90:24:10:57:de:17:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:81:E8:73:20:7F:8A:2D:C5:52:D3:62:B9:05:FE:2A:D3:8D:C5:F3
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030303a3a2f33362d3336203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f48:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         69:0f:2a:c7:77:f1:cf:ac:e4:c8:15:bb:a6:ef:0b:90:27:50:
         ab:d5:7b:2c:96:5d:67:cd:55:97:f5:c9:5a:7c:3c:ee:3c:79:
         71:67:33:b9:cc:26:0d:db:5a:a1:38:65:31:87:c7:c6:5b:07:
         7d:2f:5e:a0:af:c9:48:7a:b9:84:62:f3:9e:22:e0:ba:a9:24:
         ce:7d:e0:42:2e:27:1e:12:c8:2b:44:02:be:57:6d:de:4f:e0:
         28:80:45:35:92:31:9a:3c:d0:62:de:46:66:c8:de:71:3a:44:
         58:42:1b:65:7f:1a:de:c6:7e:cf:6a:ef:ad:ab:05:ae:33:9f:
         26:fd:8f:a2:d1:49:ad:79:10:cd:8c:d0:77:ba:fc:39:5e:8b:
         80:90:ab:24:9a:c4:6f:91:f6:b5:ad:8b:01:27:18:35:8e:7d:
         15:c9:f3:ca:15:bb:2d:86:06:3e:96:e5:98:32:dc:94:38:46:
         f4:c0:42:3e:7b:ff:1e:c3:7d:8c:39:92:03:d9:0c:a3:5d:3f:
         25:cc:4b:8f:12:b6:11:e9:42:3f:09:ee:d4:03:65:17:c8:62:
         9b:12:ad:75:76:fe:76:42:59:41:03:6f:84:65:89:e0:2f:fa:
         61:18:06:01:b5:a9:aa:6c:f0:e8:0d:bb:6f:d7:52:c1:bb:1e:
         0f:e6:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:38:57 2025 by rpki-client