Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a3a2f33322d3332203d3e20323635343638.roa
File:                     323830343a333439633a3a2f33322d3332203d3e20323635343638.roa (raw, json)
Hash identifier:          r66Aeqw8b147aSMsrCsymAMKAh4gmmWCOyQTkSDTGwM=
Subject key identifier:   26:96:D6:25:B4:EE:66:B3:2B:D6:B5:AE:07:31:1F:C3:BC:1C:65:0F
Certificate issuer:       /CN=D122D268516BC498BFD4DFF4B38F0B442647ABE4
Certificate serial:       502114B1A98495FC87AE07327DBAE6B89495518C
Authority key identifier: D1:22:D2:68:51:6B:C4:98:BF:D4:DF:F4:B3:8F:0B:44:26:47:AB:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a3a2f33322d3332203d3e20323635343638.roa
Signing time:             Tue 16 Sep 2025 15:49:16 +0000
ROA not before:           Tue 16 Sep 2025 15:44:16 +0000
ROA not after:            Tue 15 Sep 2026 15:49:16 +0000
asID:                     265468
IP address blocks:        2804:349c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:21:14:b1:a9:84:95:fc:87:ae:07:32:7d:ba:e6:b8:94:95:51:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D122D268516BC498BFD4DFF4B38F0B442647ABE4
        Validity
            Not Before: Sep 16 15:44:16 2025 GMT
            Not After : Sep 15 15:49:16 2026 GMT
        Subject: CN=2696D625B4EE66B32BD6B5AE07311FC3BC1C650F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:22:95:3e:a6:69:57:90:ba:d7:47:16:1e:45:
                    3f:ff:f5:8f:34:47:dc:d4:82:68:73:9c:00:e2:30:
                    ea:6b:30:64:2c:3b:c0:ed:f9:42:4e:3a:9f:5b:d1:
                    b8:4a:02:59:da:f2:b1:8f:3b:b4:f5:79:37:e5:68:
                    53:e2:bf:f0:93:0e:92:56:7d:8a:d2:ae:33:97:d7:
                    65:dc:8a:52:cb:dd:45:bf:ad:c5:dd:f6:4b:c5:1f:
                    13:36:d1:2f:82:fd:eb:d2:05:e5:e0:65:81:e8:93:
                    e7:fe:09:6b:b9:26:f1:67:8a:5e:31:65:58:95:0b:
                    1a:4a:01:d8:3d:f3:4d:9e:73:f0:db:70:32:92:c2:
                    2d:66:d9:e3:22:23:5c:ff:90:27:cd:4c:fc:8f:b5:
                    54:1a:46:87:3e:cc:2c:08:e4:3d:07:76:2e:e3:68:
                    9e:d8:81:36:9b:30:fa:95:5f:fc:c8:58:90:f7:b1:
                    80:3c:a2:2c:d4:e4:63:81:86:d9:55:8b:0e:ca:66:
                    8b:3a:c2:4c:c5:a6:dc:c1:63:0d:8f:2b:d3:80:c3:
                    a7:fe:5a:e6:4b:17:b0:87:f9:62:66:59:8d:44:62:
                    cd:ab:5e:2f:69:23:59:02:3e:57:bd:ce:28:9a:38:
                    90:d8:c2:ee:db:9e:92:91:f5:9a:1e:44:a2:0f:99:
                    05:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:96:D6:25:B4:EE:66:B3:2B:D6:B5:AE:07:31:1F:C3:BC:1C:65:0F
            X509v3 Authority Key Identifier:
                keyid:D1:22:D2:68:51:6B:C4:98:BF:D4:DF:F4:B3:8F:0B:44:26:47:AB:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a3a2f33322d3332203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:349c::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:61:26:45:9e:22:1d:ea:eb:07:3e:9d:2c:de:62:69:3f:59:
         d3:a6:6c:c9:d5:bd:ab:6b:2c:f3:e0:7c:31:59:fb:a9:f0:1a:
         52:be:64:a0:cc:23:30:98:61:34:8a:41:ee:ee:9a:c2:b9:1b:
         07:6d:16:87:3d:5a:ad:14:66:e7:f8:e0:19:38:2b:6b:0e:5c:
         cf:b9:1f:0d:7e:0c:c4:78:31:4a:ca:38:8c:df:b3:e3:14:65:
         46:65:86:86:10:2c:98:8c:a4:06:bb:02:ca:8e:fd:6a:ec:da:
         9d:7b:26:64:77:82:8b:55:f4:c1:8a:16:9c:b2:f1:af:5c:9c:
         5f:22:e6:7a:23:76:54:a6:b8:55:9f:88:bf:85:dd:eb:20:40:
         bd:df:11:34:d4:fa:64:d5:9a:6a:f3:99:78:20:5d:3c:7e:c9:
         19:03:e6:d1:75:a6:6e:eb:a4:c9:20:ce:32:f1:03:46:06:f1:
         0a:49:a7:8d:05:1e:06:b3:18:19:9e:26:b5:38:ce:ec:00:a0:
         3b:3b:86:d8:86:58:3a:5b:be:f8:07:b7:59:f8:d9:48:13:b1:
         46:83:23:4e:3a:2c:e6:fb:c9:61:92:0f:9b:a4:7f:3b:65:f4:
         29:6f:c0:b3:d7:e3:d7:0c:48:70:8a:c1:6c:b9:8e:88:4b:74:
         44:cb:7a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:55:47 2025 by rpki-client