Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/323830343a3339633a3a2f33322d313238203d3e203238333239.roa
File:                     323830343a3339633a3a2f33322d313238203d3e203238333239.roa (raw, json)
Hash identifier:          YEOXqs+yZaFNQH86O1WzslT/+FDAS8FaGBtQJuxSRm0=
Subject key identifier:   F9:C5:90:C1:A3:40:4C:03:18:09:D4:DC:6A:F7:05:A5:13:8E:96:2C
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       1F02CDFA20ECE3813C917E395861F48852164BC2
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/323830343a3339633a3a2f33322d313238203d3e203238333239.roa
Signing time:             Thu 28 Aug 2025 14:55:20 +0000
ROA not before:           Thu 28 Aug 2025 14:50:20 +0000
ROA not after:            Thu 27 Aug 2026 14:55:20 +0000
asID:                     28329
IP address blocks:        2804:39c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:02:cd:fa:20:ec:e3:81:3c:91:7e:39:58:61:f4:88:52:16:4b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:20 2025 GMT
            Not After : Aug 27 14:55:20 2026 GMT
        Subject: CN=F9C590C1A3404C031809D4DC6AF705A5138E962C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f5:03:6d:62:4b:9e:26:87:24:65:f4:37:ce:
                    09:a7:fc:03:96:18:4d:51:c1:fb:05:26:0b:9f:af:
                    fa:5e:30:c6:64:9b:81:52:f3:b5:e9:9e:66:69:04:
                    e4:5b:de:05:fb:eb:02:01:93:4f:c1:99:ba:15:b0:
                    a7:2b:06:2a:b7:d4:61:00:ba:ba:42:00:cc:b6:00:
                    71:d8:16:ea:ca:13:e1:c4:d3:2b:05:70:9c:ab:07:
                    9a:22:4c:fb:af:2a:79:ea:03:98:d3:ee:9e:d4:3a:
                    7d:50:94:a9:47:0c:7a:be:36:7d:b8:8a:76:b3:3f:
                    6e:ee:4b:70:8e:a4:c0:a9:b3:98:3e:dc:2c:99:8d:
                    c2:ab:25:31:eb:69:0e:61:1c:1a:6d:3c:f3:05:18:
                    ab:a1:5f:aa:b5:37:ff:6b:9e:08:57:23:56:54:aa:
                    1b:bd:d9:14:4f:10:ce:f1:1f:6e:19:d4:a4:a9:04:
                    05:25:70:38:09:57:a0:15:00:e8:cc:75:6d:09:a8:
                    ef:60:5b:3e:9b:88:c3:51:b3:98:5f:d6:e9:dd:d5:
                    a2:cf:96:1f:b4:f5:a1:f2:75:45:50:32:f2:3d:da:
                    cb:05:1b:2f:02:1a:51:aa:9f:99:fd:ff:97:f4:b2:
                    5a:05:8a:f3:a7:2b:3f:66:24:f0:2c:3a:70:2c:d9:
                    2c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C5:90:C1:A3:40:4C:03:18:09:D4:DC:6A:F7:05:A5:13:8E:96:2C
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/323830343a3339633a3a2f33322d313238203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39c::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:00:c5:9d:ad:20:ac:76:a6:87:5f:0d:17:64:e5:58:82:6a:
         14:d6:0a:57:3a:46:61:e5:1d:58:33:72:87:aa:e2:f2:12:91:
         67:5e:2d:83:88:b7:13:92:9b:eb:7e:bb:55:dc:db:94:07:63:
         78:36:bc:fc:8c:63:e5:96:87:54:f4:f1:b6:ac:b4:9c:03:08:
         9e:de:8d:bf:fa:fd:10:2d:49:fb:d6:d0:70:90:bc:c0:4f:01:
         ce:fe:b8:12:90:30:14:d0:21:f6:44:1d:d5:af:6d:60:ca:0d:
         96:2b:f1:ba:bf:d3:57:99:18:b6:d8:ed:7c:03:48:11:47:83:
         3a:b7:06:c4:f0:93:97:87:f6:bf:0a:39:41:1c:f0:46:b8:d3:
         23:18:11:fc:66:a0:35:c1:d3:4a:e9:01:78:03:b0:ff:01:74:
         98:19:60:ae:37:9f:f7:4d:ca:49:9a:0b:6a:c6:e3:e4:24:f1:
         d2:74:7c:10:a9:50:1c:9d:1c:b6:bf:56:c3:6c:f8:05:f1:9d:
         2a:57:e8:a4:d8:ef:04:32:a8:b7:a9:8d:32:b9:ff:4a:89:94:
         48:18:7d:b2:fa:e6:ca:27:40:57:00:c8:53:7e:f8:22:75:49:
         dc:3c:65:a1:6a:51:60:39:fd:b4:e3:f7:a3:e3:87:6e:72:ef:
         25:5a:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:13:42 2025 by rpki-client