Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/323830343a356238343a3a2f33322d313238203d3e203238333239.roa
File:                     323830343a356238343a3a2f33322d313238203d3e203238333239.roa (raw, json)
Hash identifier:          VMKuyGCteVx3fL+GnSeOGF/2MphUI5c9lmQDyIP3sSs=
Subject key identifier:   56:2B:B7:32:3E:82:C5:88:DA:51:8B:19:27:3C:A4:49:C3:2D:B5:18
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       21D3F06C527F54BFA3F9A5FD19261A4EC677F5E5
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/323830343a356238343a3a2f33322d313238203d3e203238333239.roa
Signing time:             Thu 28 Aug 2025 14:55:22 +0000
ROA not before:           Thu 28 Aug 2025 14:50:22 +0000
ROA not after:            Thu 27 Aug 2026 14:55:22 +0000
asID:                     28329
IP address blocks:        2804:5b84::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d3:f0:6c:52:7f:54:bf:a3:f9:a5:fd:19:26:1a:4e:c6:77:f5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:22 2025 GMT
            Not After : Aug 27 14:55:22 2026 GMT
        Subject: CN=562BB7323E82C588DA518B19273CA449C32DB518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:1c:d6:f9:d7:08:9e:10:ba:30:01:45:6a:
                    b9:6c:b1:01:5c:f9:4f:f6:19:d7:87:5e:4a:46:fb:
                    00:62:ae:06:cb:57:90:0d:cc:24:9f:26:e9:d1:08:
                    a2:ad:b8:bd:e0:ea:2e:7c:8a:45:6e:b2:d3:bb:5a:
                    31:23:13:6a:62:1c:25:52:42:e4:ae:9f:1e:00:e5:
                    88:03:32:95:73:43:27:a5:65:94:1f:48:5d:d1:23:
                    9f:11:2a:c7:e0:af:52:48:f7:09:75:93:7e:98:8d:
                    ab:12:d3:c7:19:2b:62:55:d2:9e:16:ee:e9:e7:7e:
                    47:ed:d8:f5:d3:b6:a8:f0:c5:fa:d0:71:69:30:50:
                    ea:a3:b5:4d:09:9f:ce:ca:c0:5d:be:fb:60:0c:76:
                    db:8a:dd:aa:0b:23:80:23:4d:03:77:bc:4e:c0:7c:
                    8b:4b:11:1f:da:59:81:8d:20:ea:d0:bd:3e:5e:e7:
                    b4:45:f3:7e:21:9c:38:2d:07:14:82:eb:a1:01:5e:
                    5b:3d:0e:6c:21:e0:24:ee:5b:7c:e5:b3:5a:ac:81:
                    0a:95:e0:70:72:0f:b1:10:10:0a:d8:19:0c:56:64:
                    78:7f:03:ef:d0:4d:63:d3:e0:86:f4:f5:10:12:b6:
                    fc:68:92:97:a1:fc:68:85:2b:e8:e8:5b:f5:bb:5e:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2B:B7:32:3E:82:C5:88:DA:51:8B:19:27:3C:A4:49:C3:2D:B5:18
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/323830343a356238343a3a2f33322d313238203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b84::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:67:78:3c:ce:bc:86:b3:9a:30:ea:9d:d5:08:3f:86:0f:36:
         b2:2e:ae:8e:3b:7f:a7:9d:56:ad:dc:9f:9b:49:f4:58:f7:c0:
         8c:90:04:d9:32:f1:99:d2:9d:cf:72:d7:e2:2c:80:94:ad:5a:
         c9:0f:70:8c:96:54:c0:92:30:2a:87:40:ca:68:1c:92:ea:cf:
         3d:72:2d:dd:bd:1f:01:0c:13:c4:67:f8:ba:39:57:da:13:31:
         74:47:aa:5c:50:be:25:ce:31:e7:c8:d9:7b:77:c3:7c:99:98:
         6f:67:d2:ee:0b:c9:d3:81:c0:46:c6:02:c9:64:6f:26:98:16:
         6b:e4:0b:46:69:94:42:55:f5:20:ca:68:d3:07:98:6f:97:7f:
         4e:80:a5:d2:1d:a0:54:8a:c0:17:2e:fe:59:22:8d:28:6f:d3:
         6d:57:f1:83:3c:7e:d3:73:f1:a6:3f:af:b4:05:dd:11:66:e1:
         7f:2a:d9:db:c5:45:4e:43:de:5d:44:b8:b1:10:8c:4c:8b:f0:
         0d:3c:7f:65:51:d1:0e:22:77:14:4b:36:83:c2:06:97:8d:70:
         56:20:92:4c:86:ce:d0:bd:3f:3b:3b:b5:c9:a9:38:31:51:d8:
         c4:72:57:c7:0f:3b:f4:30:22:d1:09:a3:7c:36:b1:6e:1b:22:
         bd:9e:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:14:42 2025 by rpki-client