Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a383030303a3a2f33362d3336203d3e20323635343631.roa
File:                     323830343a333437633a383030303a3a2f33362d3336203d3e20323635343631.roa (raw, json)
Hash identifier:          s4H7RD1QdFKwlJnXkSn5OJflItXFXtkdrjv1Nu8OQxU=
Subject key identifier:   5B:25:61:DA:8E:91:9C:08:80:17:29:16:D8:5D:95:C6:35:70:03:CB
Certificate issuer:       /CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
Certificate serial:       5CD281E24EE7A9B82FE86942DDFA53356C919273
Authority key identifier: 8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a383030303a3a2f33362d3336203d3e20323635343631.roa
Signing time:             Fri 12 Sep 2025 15:36:26 +0000
ROA not before:           Fri 12 Sep 2025 15:31:26 +0000
ROA not after:            Fri 11 Sep 2026 15:36:26 +0000
asID:                     265461
IP address blocks:        2804:347c:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 23:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d2:81:e2:4e:e7:a9:b8:2f:e8:69:42:dd:fa:53:35:6c:91:92:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
        Validity
            Not Before: Sep 12 15:31:26 2025 GMT
            Not After : Sep 11 15:36:26 2026 GMT
        Subject: CN=5B2561DA8E919C0880172916D85D95C6357003CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:b2:25:b6:f5:84:ab:2e:fb:58:95:7b:c4:
                    42:37:09:21:6a:6b:26:90:d9:cb:8c:18:92:e0:cf:
                    0a:77:8a:e4:0e:0c:3c:38:6a:e5:0d:69:c0:38:1e:
                    c2:48:0b:b7:80:18:47:cc:bf:00:d4:2b:ec:9c:73:
                    f7:28:c7:d4:d8:1f:b7:b3:6b:b5:13:a5:e9:b8:c1:
                    c8:63:c6:af:9e:61:e5:d6:05:b4:45:6a:f7:2a:5c:
                    d9:bf:59:e8:f4:7e:7e:2a:b8:df:e2:5f:1b:ae:f4:
                    40:49:a3:71:82:40:fd:aa:37:6b:74:18:60:c6:26:
                    b8:ab:83:16:8c:36:af:4d:1a:1f:d4:66:dd:a6:80:
                    0d:cf:ad:43:0e:09:67:35:5e:29:cb:44:f1:8c:c1:
                    97:7c:34:c0:50:b0:91:75:ff:60:01:1f:e6:17:56:
                    66:f1:0c:ea:18:00:ab:13:41:f5:a8:a7:46:9a:89:
                    79:c7:c6:e6:d5:3c:0a:45:5c:54:cc:10:d8:37:b5:
                    b9:51:00:67:fd:6a:34:e6:b8:64:05:a9:dc:7f:b0:
                    e6:60:c2:a9:3f:eb:f7:26:36:f3:d0:75:d2:fb:c0:
                    4a:fc:56:c3:50:fe:94:ab:a8:8d:eb:2d:76:c9:4d:
                    da:3d:29:fe:5d:15:45:84:a9:50:e3:a8:ef:53:aa:
                    a1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:25:61:DA:8E:91:9C:08:80:17:29:16:D8:5D:95:C6:35:70:03:CB
            X509v3 Authority Key Identifier:
                keyid:8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a383030303a3a2f33362d3336203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:347c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:e8:41:e8:f1:ec:3d:4c:0b:9d:44:ff:59:d0:8a:da:f8:
         67:90:99:22:42:09:71:33:50:0a:a6:99:4d:49:d5:8a:b0:91:
         ce:d9:a8:4a:a8:08:e0:06:ca:15:29:11:36:22:09:90:83:1a:
         2d:2b:4e:1d:f7:90:d9:e0:e7:78:80:6b:d7:ee:1f:fb:2a:23:
         87:c9:87:9e:a5:49:8a:40:c4:aa:45:d1:7c:9e:8a:75:6a:ca:
         2c:8a:ae:98:f9:40:07:72:4e:cc:f7:7d:95:22:1b:2d:da:3b:
         8e:21:3b:77:0f:36:19:0e:d7:4f:35:95:cd:1f:d4:66:05:ce:
         52:cc:7e:d7:72:c7:c9:5b:c0:e8:98:0a:a9:d1:34:b2:ca:a6:
         56:14:07:b5:cd:f4:c5:61:5f:ed:a6:0c:dd:0b:66:72:30:5e:
         98:9a:84:fc:77:d5:1b:17:fb:94:22:44:bc:aa:83:84:fe:bf:
         52:d7:90:e5:43:e9:b2:06:32:d3:32:ea:9f:ba:fd:ef:09:68:
         f2:a1:aa:a6:e7:41:b5:cf:c4:2b:b2:60:aa:61:d5:a0:09:e9:
         c0:46:3f:fe:27:48:47:2b:ad:a5:2c:b6:a6:ff:74:0b:87:c8:
         2e:dc:d9:c3:05:5f:33:b7:f1:4e:40:3f:5e:51:e8:a9:3c:c5:
         56:da:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:15:32 2025 by rpki-client