Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/323830343a333734303a343030303a3a2f33342d3334203d3e20323636333939.roa
File:                     323830343a333734303a343030303a3a2f33342d3334203d3e20323636333939.roa (raw, json)
Hash identifier:          WawZLpMewvwzEWXVHlO6BbCEi4IYtbQefzVBpnwgCo8=
Subject key identifier:   B3:4F:F5:8C:C8:08:53:23:05:D3:49:E9:89:8F:AF:4D:1B:E9:7F:76
Certificate issuer:       /CN=52C828C27EEBBFF1E4B815AD151841CD2C9E17CA
Certificate serial:       74E6717F421CD58033DD95D632B018B62C42DC71
Authority key identifier: 52:C8:28:C2:7E:EB:BF:F1:E4:B8:15:AD:15:18:41:CD:2C:9E:17:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/323830343a333734303a343030303a3a2f33342d3334203d3e20323636333939.roa
Signing time:             Thu 11 Sep 2025 20:42:32 +0000
ROA not before:           Thu 11 Sep 2025 20:37:32 +0000
ROA not after:            Thu 10 Sep 2026 20:42:32 +0000
asID:                     266399
IP address blocks:        2804:3740:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.crl
                          rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 09:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e6:71:7f:42:1c:d5:80:33:dd:95:d6:32:b0:18:b6:2c:42:dc:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C828C27EEBBFF1E4B815AD151841CD2C9E17CA
        Validity
            Not Before: Sep 11 20:37:32 2025 GMT
            Not After : Sep 10 20:42:32 2026 GMT
        Subject: CN=B34FF58CC808532305D349E9898FAF4D1BE97F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:48:6d:97:35:b8:43:64:00:40:76:a2:01:
                    ba:4a:6e:32:ee:80:7d:0c:27:12:f4:d8:d7:06:c8:
                    13:cb:0b:56:07:fe:e1:5f:60:bc:26:f1:4f:47:58:
                    4b:1b:85:04:02:62:ed:05:8a:b0:ad:96:45:fe:08:
                    41:0f:de:b1:6b:7e:1e:9e:2c:93:28:78:a1:65:75:
                    b5:cb:33:a3:36:c5:ee:88:22:47:41:9c:61:95:6a:
                    db:e6:30:39:44:e9:63:cd:7b:fe:72:18:bf:ee:35:
                    61:22:a9:5e:53:14:18:7b:72:b5:74:81:eb:3c:e0:
                    12:58:29:f0:fa:14:6c:0c:e1:b2:3d:6a:61:35:a1:
                    6f:b5:f3:df:fd:5b:57:2e:71:ff:c4:35:bc:74:39:
                    2b:7d:73:f1:c9:eb:68:0c:60:f2:7c:3b:b2:6a:33:
                    08:cf:26:af:1c:a0:47:3a:15:d5:61:e6:4a:1c:54:
                    24:3d:c8:be:8d:93:43:6f:aa:c5:74:17:a8:96:8d:
                    64:1c:9a:8f:09:f0:7c:27:bd:b8:7b:2f:9f:dd:8a:
                    12:a2:b9:2d:a3:00:98:1e:40:49:16:3e:d3:63:86:
                    96:21:61:b1:6c:11:55:a3:1b:d3:33:89:c2:7f:a5:
                    9d:38:41:3a:d1:56:d0:8b:3d:96:fd:f1:45:5a:d6:
                    2f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4F:F5:8C:C8:08:53:23:05:D3:49:E9:89:8F:AF:4D:1B:E9:7F:76
            X509v3 Authority Key Identifier:
                keyid:52:C8:28:C2:7E:EB:BF:F1:E4:B8:15:AD:15:18:41:CD:2C:9E:17:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/323830343a333734303a343030303a3a2f33342d3334203d3e20323636333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3740:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:71:5e:8e:ba:f6:4c:8a:13:c9:ee:43:5d:d6:cb:42:d2:5d:
         31:19:1a:b3:5b:a2:b7:23:83:ee:c8:50:ca:6d:5f:69:95:48:
         a1:23:f2:5f:87:df:f0:21:04:f1:08:19:32:2f:f7:ee:94:87:
         ae:91:5e:a8:6d:78:4e:a7:46:5a:ca:45:9c:c5:74:de:3e:3f:
         93:8e:76:07:af:fa:a5:51:f2:ab:27:9f:8f:31:b3:f5:ed:d3:
         c6:7a:dc:69:90:1f:1f:bc:b5:ef:5b:11:72:0c:e8:20:5e:dd:
         46:8a:02:da:d0:9a:c1:83:9a:0d:5b:ce:25:2b:24:3b:c4:52:
         9d:8a:50:29:ee:d9:06:f7:ac:32:06:10:ac:be:82:40:9e:70:
         10:7a:dd:e5:7f:8f:00:9e:24:be:91:df:f9:d8:59:3b:0c:c3:
         73:cb:49:c9:24:7c:95:58:1d:bb:5d:05:0e:f9:6d:db:b3:b6:
         7e:c2:80:81:17:a2:36:ef:e3:ae:d7:c2:89:bc:a0:26:98:24:
         46:e6:af:cb:a2:75:38:48:69:b1:a2:96:50:78:47:20:5e:18:
         21:51:d5:d0:09:b1:47:12:87:46:b1:ce:bf:18:1b:01:3d:17:
         f9:ac:8e:46:b2:f7:72:0a:07:cc:d8:d5:63:96:05:d5:02:bc:
         f0:22:63:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:10:16 2025 by rpki-client