Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/323830343a323132383a3a2f33322d3332203d3e20323634353339.roa
File:                     323830343a323132383a3a2f33322d3332203d3e20323634353339.roa (raw, json)
Hash identifier:          mtFyYI4oR+v9OhkBApc0gpSGpzMpgE/jNAouJHN1Vh0=
Subject key identifier:   1A:61:55:1A:27:8D:94:7C:13:32:20:73:C6:38:3E:E7:98:0B:77:F3
Certificate issuer:       /CN=08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4
Certificate serial:       0463867B3DE21AC16376BC21C59CEEBED876FBBF
Authority key identifier: 08:B1:D7:2F:42:6C:63:FA:24:93:BC:63:B6:A7:4B:4F:4B:4E:F6:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/323830343a323132383a3a2f33322d3332203d3e20323634353339.roa
Signing time:             Mon 01 Sep 2025 16:48:08 +0000
ROA not before:           Mon 01 Sep 2025 16:43:08 +0000
ROA not after:            Mon 31 Aug 2026 16:48:08 +0000
asID:                     264539
IP address blocks:        2804:2128::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.crl
                          rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 18:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:63:86:7b:3d:e2:1a:c1:63:76:bc:21:c5:9c:ee:be:d8:76:fb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4
        Validity
            Not Before: Sep  1 16:43:08 2025 GMT
            Not After : Aug 31 16:48:08 2026 GMT
        Subject: CN=1A61551A278D947C13322073C6383EE7980B77F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9c:d3:87:5f:17:ba:51:d0:fe:0d:ab:6f:c8:
                    41:ad:00:6d:18:eb:0e:74:0b:99:cd:3d:87:76:4c:
                    ad:b9:4c:93:b4:35:73:f5:01:2e:bc:62:b0:99:b4:
                    6d:40:a4:86:4d:98:23:de:47:74:b9:91:48:19:01:
                    0e:7b:1e:ed:c4:e0:c7:89:7e:0f:2b:64:bd:10:65:
                    22:12:fe:f1:ab:19:2b:50:87:c9:f1:4f:cb:1a:dc:
                    48:57:60:a4:79:53:90:98:6a:b7:34:f0:c8:a6:e1:
                    b2:8d:4b:71:c8:1a:91:f1:7d:9b:28:13:9d:c6:1e:
                    70:97:27:7e:93:74:77:0e:95:a8:3c:54:a6:c1:ef:
                    08:17:7f:15:65:60:27:1d:7f:f8:19:14:a0:b2:f9:
                    95:92:10:f2:54:26:80:4e:8a:dd:f4:c3:da:11:4b:
                    37:3c:65:c4:46:6a:0c:66:a2:d1:4e:fe:7c:20:94:
                    72:53:37:5a:95:75:3e:42:24:a8:eb:c1:eb:07:90:
                    99:91:69:61:41:d2:97:ce:0b:40:28:18:82:df:9a:
                    3e:70:38:03:31:7d:5e:1e:6f:b2:4e:48:dc:04:f2:
                    9c:8d:9d:39:60:c3:7d:7f:30:d0:f6:ea:7e:cd:82:
                    98:0f:43:86:d5:b6:ef:ea:d6:04:1e:4a:63:e7:67:
                    ab:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:61:55:1A:27:8D:94:7C:13:32:20:73:C6:38:3E:E7:98:0B:77:F3
            X509v3 Authority Key Identifier:
                keyid:08:B1:D7:2F:42:6C:63:FA:24:93:BC:63:B6:A7:4B:4F:4B:4E:F6:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/323830343a323132383a3a2f33322d3332203d3e20323634353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2128::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:f3:7c:11:43:64:21:ad:63:88:d4:6a:c9:fa:98:50:e9:b0:
         65:87:e2:2a:42:c0:7f:b3:9b:ff:d5:11:50:33:e3:26:3c:91:
         67:da:b3:6e:08:90:16:da:d0:2b:80:c6:98:59:3d:7d:87:fe:
         1f:8e:23:5c:e1:3c:f5:b5:59:f9:12:42:ef:97:d8:ea:c7:ef:
         0f:b1:7d:d9:41:94:49:98:8f:64:9f:a4:b4:a8:ab:6c:b2:d3:
         a7:70:c6:9e:8b:71:d1:a1:78:5e:45:f4:7b:fe:21:f5:4d:0b:
         6a:6d:39:71:07:81:09:79:e2:30:70:74:8f:2c:dc:10:28:e4:
         7c:e0:3f:0e:6d:a4:a6:d5:0a:ad:7e:e2:2f:cc:d7:0f:a0:e6:
         62:b6:75:c2:1f:3b:2e:66:e8:12:ec:30:24:bd:ae:13:fd:2c:
         9d:26:0a:8e:be:7a:d6:73:d7:4c:19:0e:fc:97:32:e8:6a:d7:
         2e:48:82:70:ec:4d:d4:8f:81:97:61:2a:7d:b8:90:d7:0b:6e:
         2d:3d:ec:36:03:aa:90:40:1d:cd:db:9b:b6:b0:11:9d:1a:2a:
         e9:a6:a8:fd:09:4f:9e:cb:35:e5:97:39:5c:14:9c:0d:39:80:
         74:28:f1:7b:4c:dd:1c:02:72:b6:1b:29:ad:a0:77:68:3f:2a:
         71:75:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:35:16 2025 by rpki-client