Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa
File:                     323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa (raw, json)
Hash identifier:          dRmjkGxP4PAE9inQUIHZoOWcU84AF8/ZAHi9PP/8sfg=
Subject key identifier:   49:3E:13:C5:17:1F:D4:1A:CB:2A:B1:35:E6:E9:4A:7B:A0:E1:8B:BA
Certificate issuer:       /CN=D40B256042895F431460325AC5DB0F0088D3437F
Certificate serial:       35302695CBF735D4D492406F3ECCB251D5972CA9
Authority key identifier: D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa
Signing time:             Tue 26 Aug 2025 01:04:12 +0000
ROA not before:           Tue 26 Aug 2025 00:59:12 +0000
ROA not after:            Tue 25 Aug 2026 01:04:12 +0000
asID:                     265500
IP address blocks:        2804:3518:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 12:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:30:26:95:cb:f7:35:d4:d4:92:40:6f:3e:cc:b2:51:d5:97:2c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40B256042895F431460325AC5DB0F0088D3437F
        Validity
            Not Before: Aug 26 00:59:12 2025 GMT
            Not After : Aug 25 01:04:12 2026 GMT
        Subject: CN=493E13C5171FD41ACB2AB135E6E94A7BA0E18BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:e5:99:9a:96:62:d0:3a:9a:2b:52:28:6c:
                    41:c5:4a:5c:46:46:cc:22:81:9d:c4:19:32:22:5c:
                    e6:38:3f:78:9f:4d:02:7a:8d:82:17:34:69:d0:6f:
                    71:08:06:79:fa:5e:ca:4e:dd:7b:60:d4:78:e0:da:
                    4f:c5:ce:16:38:c7:e7:0d:27:68:c5:aa:3c:2d:43:
                    bf:84:4c:ae:40:6b:58:5c:f8:58:04:32:66:92:2f:
                    e0:22:8f:65:08:73:55:43:dd:fb:67:30:81:72:0c:
                    1a:79:c0:69:ca:5d:b7:de:76:09:84:45:60:fb:fd:
                    27:ad:25:46:77:41:d4:2d:a6:43:13:34:30:55:af:
                    10:b4:d1:b8:b5:85:f7:a1:6b:cc:d2:23:07:55:30:
                    c8:66:c8:d5:b3:5a:57:f3:82:10:dd:f6:ab:3e:49:
                    5e:de:04:85:66:54:44:8a:6c:89:ac:32:97:b0:ee:
                    6f:34:99:b4:9c:b3:71:b9:78:f6:3d:d4:b9:65:18:
                    f1:d5:33:c7:ff:62:5a:75:42:0f:19:5c:9b:a9:2b:
                    f9:d3:12:71:45:a9:c0:1b:2d:fc:94:62:33:6f:4c:
                    b8:0b:73:b2:f1:9c:0e:7c:13:e7:97:23:99:86:cc:
                    de:05:87:bb:69:d8:04:be:6d:29:c2:92:89:2f:55:
                    ba:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3E:13:C5:17:1F:D4:1A:CB:2A:B1:35:E6:E9:4A:7B:A0:E1:8B:BA
            X509v3 Authority Key Identifier:
                keyid:D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:92:5b:eb:c0:e7:91:65:e1:1d:37:ac:f2:28:d9:e3:4b:1a:
         03:03:9d:54:2c:cb:87:44:a1:06:94:6d:17:3c:86:52:af:83:
         ca:e1:ae:c8:8b:8a:19:31:85:ce:2a:43:98:50:92:6a:53:b0:
         78:82:71:5d:51:d5:92:90:80:3d:16:40:f1:bf:f9:02:73:9f:
         36:98:5d:7d:61:04:92:fa:f8:6e:dd:9c:ec:05:61:44:26:71:
         6c:e2:47:8b:13:78:c9:98:87:d8:4c:48:b5:ab:f3:45:a7:a0:
         00:81:c9:58:93:d8:77:01:bd:ff:e2:97:7b:16:5a:ca:f1:62:
         66:34:f7:5e:c7:23:ba:87:ce:55:49:71:4a:ff:0a:12:bb:77:
         a2:ee:6d:77:bc:de:e8:be:6e:be:ea:e9:b2:71:bd:98:bc:83:
         9e:c2:4f:20:43:5f:4b:71:d5:dc:c3:8b:2c:33:6b:6e:62:e2:
         31:3b:03:5f:9c:7f:ec:05:97:e5:bd:3e:b3:e6:3a:06:5b:04:
         39:25:04:3a:07:76:80:04:c8:e1:bd:38:9d:b5:85:6d:cc:ca:
         25:f5:9f:2e:14:23:74:cb:65:14:ee:2c:96:89:e7:96:c7:aa:
         fb:e8:b3:78:a5:3d:3e:6a:40:b0:bf:df:64:8f:ea:51:8d:7f:
         96:63:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:55:44 2025 by rpki-client