Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/323830343a356132303a3a2f33322d313238203d3e20323638373530.roa
File:                     323830343a356132303a3a2f33322d313238203d3e20323638373530.roa (raw, json)
Hash identifier:          KTpCP5+yYRNR+V93Ak7K+33CiAxupoTZH+z8ERWiROk=
Subject key identifier:   9C:35:27:D4:71:16:10:90:B4:B4:D2:8E:E0:26:1A:DA:0C:E3:55:4C
Certificate issuer:       /CN=3502231E80F0117DD8B11A5E9D1CFD0C46B27859
Certificate serial:       636577912FA2C309FB8B5AD03F7A7BADB5D5506A
Authority key identifier: 35:02:23:1E:80:F0:11:7D:D8:B1:1A:5E:9D:1C:FD:0C:46:B2:78:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/323830343a356132303a3a2f33322d313238203d3e20323638373530.roa
Signing time:             Sat 13 Sep 2025 17:27:07 +0000
ROA not before:           Sat 13 Sep 2025 17:22:07 +0000
ROA not after:            Sat 12 Sep 2026 17:27:07 +0000
asID:                     268750
IP address blocks:        2804:5a20::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl
                          rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 18:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:65:77:91:2f:a2:c3:09:fb:8b:5a:d0:3f:7a:7b:ad:b5:d5:50:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3502231E80F0117DD8B11A5E9D1CFD0C46B27859
        Validity
            Not Before: Sep 13 17:22:07 2025 GMT
            Not After : Sep 12 17:27:07 2026 GMT
        Subject: CN=9C3527D471161090B4B4D28EE0261ADA0CE3554C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:96:9f:39:77:7d:7c:80:4c:05:ae:1f:0b:
                    21:32:2c:5f:b2:da:17:39:bb:5b:23:be:26:c3:d3:
                    ce:06:fe:c2:a0:3b:5c:d2:cd:b8:75:50:57:eb:6a:
                    e6:4f:08:d1:0e:b9:ae:d3:e5:55:cd:da:90:84:e0:
                    97:15:0c:ef:96:98:98:1e:e6:90:4b:13:b0:9a:23:
                    48:cd:fc:65:1d:9c:2f:6d:20:cc:80:f5:5c:3a:67:
                    c4:84:1b:73:d2:c1:a7:8f:ee:b0:f6:ce:3b:69:89:
                    18:09:37:14:8d:19:1b:f7:b6:b9:29:5d:7a:e6:1f:
                    1f:a6:d8:23:72:2b:18:97:e4:a3:6d:ab:cf:9b:84:
                    11:3f:40:7e:33:e7:71:ff:dc:1a:ab:1f:fa:e8:4b:
                    7c:58:3a:fc:3f:9c:f0:ce:d0:90:b1:de:92:57:37:
                    24:1c:29:ce:02:4d:b7:78:6a:e1:4d:a3:b1:6f:e9:
                    18:18:a2:5b:28:c2:bb:a6:06:bb:15:f1:85:30:41:
                    67:f7:94:2c:dc:52:a2:40:87:5d:0f:be:cf:7a:45:
                    ab:52:95:aa:9e:46:58:6b:14:35:be:3d:04:28:6d:
                    34:4a:b5:a2:63:0b:a7:0a:72:05:af:56:3c:06:dc:
                    7e:66:d9:e3:c8:1b:7c:f2:bf:4b:e6:32:63:fa:7b:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:35:27:D4:71:16:10:90:B4:B4:D2:8E:E0:26:1A:DA:0C:E3:55:4C
            X509v3 Authority Key Identifier:
                keyid:35:02:23:1E:80:F0:11:7D:D8:B1:1A:5E:9D:1C:FD:0C:46:B2:78:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/323830343a356132303a3a2f33322d313238203d3e20323638373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:49:c2:00:f5:34:73:cc:4b:02:fd:82:43:e1:1d:5b:93:31:
         87:c6:94:e0:bf:ed:ca:34:00:1b:e7:87:12:4c:49:dc:60:92:
         c2:1a:07:0e:cc:bc:b5:52:72:d8:85:47:7b:f3:4e:81:b8:21:
         db:72:0c:7d:11:27:35:26:80:72:90:ae:9e:3c:40:cd:47:ef:
         6c:5d:5f:33:66:51:ea:a2:8d:9e:41:c3:3d:8a:01:18:57:cb:
         39:b2:07:57:3b:5e:3f:86:3a:61:91:29:03:88:63:6b:89:b1:
         62:fc:d0:b5:da:86:6b:b7:97:72:8c:8e:91:44:ac:83:1b:c3:
         43:3d:a5:93:39:79:e5:5b:40:12:0c:df:5d:0e:cb:dc:a7:26:
         04:92:50:df:5f:a3:d3:4b:10:16:8f:fb:9f:35:6d:40:94:3b:
         0b:ca:c2:5c:3e:c2:a9:9d:8f:03:36:78:fe:01:53:36:01:81:
         e1:3c:6c:48:46:02:c3:6e:26:64:96:90:be:9e:e1:e9:77:4f:
         f3:7f:15:74:fc:40:5e:dd:ff:3a:21:c1:d5:90:d0:04:fe:29:
         d1:a9:80:bf:d5:9e:f3:78:54:9c:cc:a4:11:c2:74:47:8d:d4:
         49:5b:8b:21:9b:fc:87:90:9a:8a:82:d5:98:c0:61:1f:b0:95:
         4b:c5:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:52:32 2025 by rpki-client