Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/323830343a333734303a3a2f33332d3333203d3e20323636333939.roa
File:                     323830343a333734303a3a2f33332d3333203d3e20323636333939.roa (raw, json)
Hash identifier:          H0/3TEPkl0HT0m1Nfg51Z4MJzSmcSJMq2yY96RCm9Wc=
Subject key identifier:   DB:CB:13:A4:50:34:97:07:E9:BA:E8:A6:B0:82:BC:C3:6D:6B:0C:19
Certificate issuer:       /CN=52C828C27EEBBFF1E4B815AD151841CD2C9E17CA
Certificate serial:       2BDB1FD8DC792A08496C577695EC3349EA053C08
Authority key identifier: 52:C8:28:C2:7E:EB:BF:F1:E4:B8:15:AD:15:18:41:CD:2C:9E:17:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/323830343a333734303a3a2f33332d3333203d3e20323636333939.roa
Signing time:             Thu 11 Sep 2025 20:42:30 +0000
ROA not before:           Thu 11 Sep 2025 20:37:30 +0000
ROA not after:            Thu 10 Sep 2026 20:42:30 +0000
asID:                     266399
IP address blocks:        2804:3740::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.crl
                          rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 09:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:db:1f:d8:dc:79:2a:08:49:6c:57:76:95:ec:33:49:ea:05:3c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C828C27EEBBFF1E4B815AD151841CD2C9E17CA
        Validity
            Not Before: Sep 11 20:37:30 2025 GMT
            Not After : Sep 10 20:42:30 2026 GMT
        Subject: CN=DBCB13A450349707E9BAE8A6B082BCC36D6B0C19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fa:48:4e:c5:34:87:04:aa:4b:17:02:19:92:
                    ba:ef:9f:fe:0b:24:6a:5e:33:a0:24:b2:77:2e:2d:
                    39:82:9c:d4:06:4a:81:f8:e6:e7:2f:60:25:4b:25:
                    47:c4:25:96:4c:67:a4:09:fd:fb:a5:41:ee:93:dd:
                    91:6c:1d:0f:fe:0c:c1:3c:5a:94:82:4f:5e:aa:58:
                    6e:27:1c:f3:24:cb:de:7d:47:10:96:20:3b:ea:55:
                    e6:d5:3a:fb:cb:61:ec:3c:d3:d6:33:51:6c:51:97:
                    d4:c1:10:3b:d4:1a:0b:2a:07:1d:ae:15:42:da:1f:
                    4d:9a:a6:be:1d:e0:2e:58:0b:7b:1b:84:ee:ac:d1:
                    97:b6:c5:c7:73:53:90:b3:5c:43:93:42:af:9f:c8:
                    c4:6d:25:5b:fb:1f:0d:55:ba:af:40:f4:05:a0:96:
                    44:d0:12:83:2a:30:7a:e6:63:32:c1:a6:84:fd:bb:
                    fb:3c:5e:7b:4c:91:14:83:e4:e0:73:50:91:32:7c:
                    54:64:fc:88:80:90:c5:d0:84:40:78:14:ef:98:46:
                    bf:08:56:4e:5c:b7:60:1e:a8:54:37:67:54:96:ed:
                    87:83:29:d4:7d:f9:fd:36:d6:e5:79:20:92:b8:ff:
                    20:43:11:a2:1c:22:e6:fd:9e:df:1c:03:3e:86:d5:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CB:13:A4:50:34:97:07:E9:BA:E8:A6:B0:82:BC:C3:6D:6B:0C:19
            X509v3 Authority Key Identifier:
                keyid:52:C8:28:C2:7E:EB:BF:F1:E4:B8:15:AD:15:18:41:CD:2C:9E:17:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/323830343a333734303a3a2f33332d3333203d3e20323636333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3740::/33

    Signature Algorithm: sha256WithRSAEncryption
         46:fe:31:77:6a:b5:5a:e5:2c:b6:17:cc:f3:e0:b4:41:47:8c:
         23:71:84:2f:00:b1:d9:54:06:58:76:8c:2d:fe:50:99:8d:09:
         9d:77:22:c8:e8:17:52:d9:0f:a0:87:33:3e:9d:14:da:be:37:
         86:6b:70:db:60:68:8b:32:f5:07:b2:5d:2c:b1:82:f7:e3:af:
         2f:bd:70:7e:86:2b:11:4e:82:4d:3c:a0:22:e8:57:9b:1c:f9:
         7f:f5:71:8a:ba:72:56:2f:d4:ac:d2:b7:87:43:38:48:09:c9:
         f9:b1:35:c7:c5:69:1e:2e:e3:f3:0f:cb:24:87:a0:21:23:1d:
         27:52:fe:f8:b3:3e:49:6e:79:22:f3:1d:40:7e:4a:98:0d:78:
         97:7f:61:23:b7:1a:e9:a6:dc:df:ca:52:b0:16:b6:a2:8a:3f:
         50:62:f8:38:01:e3:70:8d:f3:b0:6d:52:e4:7c:57:e1:88:70:
         f2:c9:c5:90:5f:7b:17:b7:9e:d5:99:5e:f9:db:03:50:57:ff:
         39:02:c5:3d:7e:a3:7e:44:54:87:e5:84:fa:79:ab:92:2f:b9:
         b6:3c:73:71:47:bd:2c:0a:85:4f:67:0d:a1:70:3b:ce:7b:b7:
         52:b9:3c:d1:30:0e:be:76:05:7e:db:e7:59:a8:d1:0a:4d:85:
         a2:a4:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:35:01 2025 by rpki-client