Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33332d3333203d3e20323634393438.roa
File:                     323830343a333036343a3a2f33332d3333203d3e20323634393438.roa (raw, json)
Hash identifier:          /rO3jJafFeOGEAtNapgVox9P4yXMEg+mLPayRxjv7no=
Subject key identifier:   50:DE:51:A8:AC:11:9C:0D:E8:D6:57:D9:3E:F6:E9:CD:C0:72:F5:2C
Certificate issuer:       /CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
Certificate serial:       084A82C5DFB06D4B30D14A3057CF3F4223D79F30
Authority key identifier: 2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33332d3333203d3e20323634393438.roa
Signing time:             Thu 18 Sep 2025 18:14:03 +0000
ROA not before:           Thu 18 Sep 2025 18:09:03 +0000
ROA not after:            Thu 17 Sep 2026 18:14:03 +0000
asID:                     264948
IP address blocks:        2804:3064::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl
                          rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4a:82:c5:df:b0:6d:4b:30:d1:4a:30:57:cf:3f:42:23:d7:9f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
        Validity
            Not Before: Sep 18 18:09:03 2025 GMT
            Not After : Sep 17 18:14:03 2026 GMT
        Subject: CN=50DE51A8AC119C0DE8D657D93EF6E9CDC072F52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1e:bc:19:31:5a:ee:83:c8:66:02:5c:3b:53:
                    86:16:50:1c:69:13:e6:e1:7d:29:48:90:ee:32:d9:
                    ab:9d:6e:29:e8:0e:8b:87:ad:fc:3b:87:07:cf:08:
                    4e:93:59:31:b3:1b:7c:c9:4f:ea:b6:30:7b:76:7c:
                    e0:f1:52:6f:6c:1f:c2:3e:79:b8:b6:82:f0:f2:81:
                    85:2f:b6:f4:8e:54:a0:f4:6a:f5:24:ee:42:11:ad:
                    35:04:c1:93:8a:22:b5:84:f6:1b:52:39:61:46:f1:
                    34:49:14:6b:df:c4:57:24:31:f2:35:21:1d:3c:9d:
                    e4:75:99:16:de:27:6c:41:a3:0e:92:5c:43:9e:35:
                    d8:35:73:0b:c5:cc:af:e7:37:f0:85:85:a5:a6:8d:
                    03:e4:f1:a0:b0:79:49:8b:a9:cc:b8:e8:87:86:30:
                    1e:0f:e1:4d:83:dd:ab:8c:60:87:46:21:ee:42:7e:
                    a5:d4:f0:91:a4:03:9f:74:ed:22:dc:cc:b1:ee:c9:
                    6f:37:49:e0:8e:c1:95:24:46:c4:66:d3:6b:45:89:
                    7c:de:79:88:7a:2f:3f:8f:70:8c:38:e3:79:1e:13:
                    bd:0b:be:c3:14:b7:bd:c7:d7:96:64:14:06:bd:72:
                    30:d1:15:02:a5:d6:05:10:3f:e6:70:37:1f:6f:65:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DE:51:A8:AC:11:9C:0D:E8:D6:57:D9:3E:F6:E9:CD:C0:72:F5:2C
            X509v3 Authority Key Identifier:
                keyid:2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33332d3333203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3064::/33

    Signature Algorithm: sha256WithRSAEncryption
         15:ed:3c:9b:88:10:de:87:2d:c9:22:08:2c:f2:53:23:22:4a:
         f0:7e:41:93:00:e7:4a:02:f4:6d:84:79:55:f6:b4:2d:e9:66:
         2f:50:af:d5:1c:cf:a0:36:68:76:50:ff:79:9d:1a:b1:52:26:
         52:da:03:82:20:a9:2b:2d:26:dc:15:cc:6a:97:c7:42:fd:28:
         83:57:39:bc:bf:ab:00:87:ee:f6:a5:ca:74:f7:5e:e2:dd:97:
         1b:f6:bf:e5:79:c9:74:aa:47:30:39:26:5e:a2:23:ff:64:6f:
         c9:c7:cb:fc:1f:ff:a9:a5:15:22:09:29:5d:7e:e6:55:84:17:
         e5:e1:43:3f:a6:8f:34:52:03:b9:98:5c:c7:a9:65:0a:e5:e7:
         bb:63:b7:1b:7f:77:0b:33:8d:ff:00:a9:6a:5c:08:dc:62:ec:
         7f:f1:9e:e3:be:ef:ed:95:b9:c2:e6:c3:21:4c:b8:54:ee:75:
         1f:50:6c:7a:2e:13:f0:de:54:36:3e:b7:ef:e8:03:ff:f4:35:
         dd:97:06:aa:65:28:76:5c:89:51:4f:e2:42:d0:ec:bb:1f:bb:
         5e:70:71:f6:70:32:dc:92:7b:bd:37:ce:81:40:01:f3:66:42:
         1c:2d:e6:ba:c7:b7:8a:35:1f:e6:47:a7:97:65:15:eb:9b:fc:
         f1:44:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 01:13:53 2025 by rpki-client