Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/323830343a363631303a3a2f33322d313238203d3e20323639353331.roa
File:                     323830343a363631303a3a2f33322d313238203d3e20323639353331.roa (raw, json)
Hash identifier:          9zlnMDHFWOHlvdtPPxPPY5HR/JwtsCGOJ8/AsCE7Hm8=
Subject key identifier:   42:4C:0B:75:1B:EB:94:91:32:76:02:F0:C6:5D:7F:CC:62:77:7F:91
Certificate issuer:       /CN=603EA2C2136D2EB2EB32BEEC7D15647AD29324A7
Certificate serial:       5AD585893FAF89E2CE0CA37CE202F211DEA29E56
Authority key identifier: 60:3E:A2:C2:13:6D:2E:B2:EB:32:BE:EC:7D:15:64:7A:D2:93:24:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/323830343a363631303a3a2f33322d313238203d3e20323639353331.roa
Signing time:             Sat 25 Oct 2025 22:43:54 +0000
ROA not before:           Sat 25 Oct 2025 22:38:54 +0000
ROA not after:            Sat 24 Oct 2026 22:43:54 +0000
asID:                     269531
IP address blocks:        2804:6610::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.crl
                          rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 00:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d5:85:89:3f:af:89:e2:ce:0c:a3:7c:e2:02:f2:11:de:a2:9e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603EA2C2136D2EB2EB32BEEC7D15647AD29324A7
        Validity
            Not Before: Oct 25 22:38:54 2025 GMT
            Not After : Oct 24 22:43:54 2026 GMT
        Subject: CN=424C0B751BEB9491327602F0C65D7FCC62777F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:f8:ef:27:7b:4b:3c:d8:fa:76:be:d1:74:
                    17:29:cc:cb:98:14:3b:3f:da:73:5d:22:6d:af:87:
                    29:e3:de:b2:a7:12:be:bc:4f:fd:76:12:f1:1a:42:
                    77:46:41:27:33:ca:a9:c1:c8:1b:8d:1b:d2:da:c5:
                    2b:0f:96:5d:a1:d1:84:27:e0:d7:54:47:58:48:7a:
                    51:c2:67:41:7d:e7:4c:63:46:7a:38:6e:18:b0:72:
                    a5:36:69:1e:c2:5d:2b:83:c2:f5:e2:aa:2e:c1:91:
                    bb:72:4a:06:57:46:8e:24:68:b5:f7:19:8a:15:f2:
                    09:bb:6c:5c:3d:a5:5d:13:ca:8e:61:64:98:9e:9d:
                    c0:02:2f:10:fd:71:5f:e9:b5:2d:61:5d:61:03:b1:
                    9b:31:5c:84:b2:c7:cd:28:8e:ee:3a:88:42:81:d8:
                    57:01:78:e9:51:9a:8c:98:fa:6b:ca:78:7c:68:56:
                    3b:32:c0:27:74:87:6f:31:5b:06:4e:d9:71:15:96:
                    70:0c:7c:bc:d4:5f:c1:f9:f7:b1:f3:03:1c:f0:4e:
                    61:94:9f:49:d9:9a:0c:fb:7c:91:89:fa:67:08:05:
                    33:31:b6:bd:84:17:77:01:03:1f:30:bd:56:e8:e6:
                    27:54:d4:2c:06:cb:32:4d:b7:70:4b:37:cd:bc:cf:
                    a0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4C:0B:75:1B:EB:94:91:32:76:02:F0:C6:5D:7F:CC:62:77:7F:91
            X509v3 Authority Key Identifier:
                keyid:60:3E:A2:C2:13:6D:2E:B2:EB:32:BE:EC:7D:15:64:7A:D2:93:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/323830343a363631303a3a2f33322d313238203d3e20323639353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6610::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:43:9b:41:3f:98:ee:69:b9:12:fb:89:4c:d4:aa:e9:55:fb:
         08:3f:24:53:cd:74:1d:e8:fd:0f:54:43:2c:50:e6:b7:56:4f:
         99:38:75:95:c1:ca:89:0e:66:e3:6b:d7:f6:00:94:2a:b2:00:
         b3:a8:8d:f9:e5:eb:e7:53:b0:4a:2a:d8:c3:ee:41:d7:a0:0d:
         ee:08:72:29:9d:65:11:c4:88:f3:e5:72:ff:45:3f:fe:11:52:
         72:71:ec:e7:6d:dd:78:82:86:e6:89:8d:c3:28:a1:41:52:0e:
         9f:e1:79:08:65:6a:7b:4c:f4:55:a4:83:ae:4a:51:79:cc:97:
         04:39:19:e7:f4:91:f3:29:28:78:72:5a:54:0f:bd:28:04:5f:
         e2:fa:89:26:e1:d0:f9:ae:57:15:81:59:80:4c:29:29:dd:e4:
         ca:bf:c8:de:ee:c6:e5:c0:19:64:60:de:8a:af:2d:37:70:5e:
         3e:2b:22:b0:c7:97:4e:85:72:f5:bb:1a:38:d0:d6:c3:83:ee:
         e5:be:69:dc:8c:e9:d0:53:e5:bc:f4:be:5b:9a:a0:35:ff:5a:
         dc:12:b1:9b:b4:bf:92:a7:78:c0:07:20:3d:da:4b:05:e5:f4:
         10:8d:fa:42:46:1d:bd:a5:9c:6e:b1:db:17:17:6f:83:e6:0e:
         1a:8a:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:10:43 2025 by rpki-client