Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3332203d3e20323635353030.roa
File:                     323830343a333531383a3a2f33322d3332203d3e20323635353030.roa (raw, json)
Hash identifier:          NIgBDiK1Ps/90G0bFof3ft2u+F3j8ctCPSLp/VeUrjo=
Subject key identifier:   C7:F8:28:E3:6E:6D:4A:B9:49:8E:89:49:6D:96:7A:DA:99:66:BD:EF
Certificate issuer:       /CN=D40B256042895F431460325AC5DB0F0088D3437F
Certificate serial:       5DEB1552ACF5BDD5DF7D46F9E6C8478AF1FECF4D
Authority key identifier: D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3332203d3e20323635353030.roa
Signing time:             Tue 26 Aug 2025 01:04:02 +0000
ROA not before:           Tue 26 Aug 2025 00:59:02 +0000
ROA not after:            Tue 25 Aug 2026 01:04:02 +0000
asID:                     265500
IP address blocks:        2804:3518::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 12:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:eb:15:52:ac:f5:bd:d5:df:7d:46:f9:e6:c8:47:8a:f1:fe:cf:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40B256042895F431460325AC5DB0F0088D3437F
        Validity
            Not Before: Aug 26 00:59:02 2025 GMT
            Not After : Aug 25 01:04:02 2026 GMT
        Subject: CN=C7F828E36E6D4AB9498E89496D967ADA9966BDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:f7:b9:97:46:03:3e:64:4d:77:a0:a3:eb:
                    82:04:1b:ea:76:85:19:4f:40:c9:08:e2:7d:82:c9:
                    88:fe:c0:97:9b:ab:26:5c:42:6c:69:b7:00:5e:d5:
                    bb:5e:33:d0:34:56:bd:7d:97:af:9f:f3:48:7f:68:
                    02:29:e5:09:d5:43:40:7f:ad:09:cc:5d:5d:39:25:
                    c1:15:ac:ba:b6:03:24:ff:90:9b:b3:ab:f1:ea:ec:
                    fa:47:ab:49:86:1f:48:1c:51:fb:8d:da:2c:e8:e9:
                    c1:1d:e7:da:50:d5:a1:95:a8:51:0e:d1:83:a1:cb:
                    e9:de:fc:f2:8a:cb:69:21:ac:44:43:9f:9b:05:55:
                    37:7b:e0:4f:20:02:33:06:ce:72:bf:22:9a:95:2e:
                    eb:da:95:a8:1e:ef:3c:ce:bf:55:b8:29:97:2d:19:
                    e2:a1:ed:7b:5d:9c:32:5b:5f:55:bb:2a:8e:e6:ea:
                    47:0e:50:b6:08:e3:54:26:94:f0:22:5c:42:72:57:
                    38:48:d7:cd:5f:c3:d2:ee:c6:3b:63:b3:62:ad:bf:
                    6b:31:ca:9f:64:4b:f5:22:ce:9d:05:77:b1:a5:b2:
                    7f:05:01:28:57:f3:d7:c6:42:47:68:46:ce:36:ff:
                    fe:51:d1:b2:a3:e5:80:10:b0:36:e7:4c:5c:e4:8c:
                    80:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F8:28:E3:6E:6D:4A:B9:49:8E:89:49:6D:96:7A:DA:99:66:BD:EF
            X509v3 Authority Key Identifier:
                keyid:D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3332203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:7c:52:1f:74:af:f6:7a:d0:38:d8:b6:3f:06:76:ec:96:49:
         09:d7:00:7b:92:42:b6:a7:d2:7a:d7:d3:63:ae:1e:ed:52:f2:
         59:15:16:7d:52:ca:f2:01:97:4e:31:77:95:1f:c2:b5:56:80:
         72:08:88:fb:5b:30:80:fb:05:5d:9d:54:a4:b4:22:69:37:12:
         e2:05:9e:df:ec:9b:21:23:01:89:c5:19:8d:7f:40:56:7f:60:
         6e:a3:0d:34:21:36:47:b1:c5:2f:c4:d5:67:ab:60:0e:fa:cd:
         a6:bb:14:30:54:f4:75:58:00:91:87:00:87:22:69:73:24:44:
         d7:6f:76:9c:b9:a7:68:f1:0c:c5:1b:1e:f4:14:40:88:89:b5:
         8d:53:c3:08:0e:41:e9:4e:0b:83:1c:c5:c9:db:5f:32:40:61:
         21:2e:62:95:7a:af:69:da:38:29:a8:a1:4e:38:59:43:cc:5c:
         6f:8b:e2:30:75:67:26:c2:ba:e5:6c:cc:d6:31:43:2a:a4:b7:
         5c:30:81:6e:7a:99:40:64:7f:c1:15:5e:c5:7b:13:0c:cc:2d:
         8c:7d:39:9c:d5:62:c5:0d:6b:73:67:80:b9:d5:e9:2a:4c:99:
         9b:e4:3f:2f:79:6e:1d:ea:d7:c0:2f:89:6e:30:04:4c:cb:ff:
         6b:2a:21:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:47:35 2025 by rpki-client