Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a313030303a3a2f33362d3336203d3e20323632373937.roa
File:                     323830343a3233633a313030303a3a2f33362d3336203d3e20323632373937.roa (raw, json)
Hash identifier:          Ags4O0NczxSNJ3k6xeDyrWGLLINV+hZRxJQuR+/ej30=
Subject key identifier:   73:34:58:88:6A:5E:BF:ED:E2:02:5B:15:1D:61:47:F9:CB:7B:6E:C4
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       30FEF623FE2C37E88FB90BFB1764569883326D28
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a313030303a3a2f33362d3336203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:15 +0000
ROA not before:           Thu 23 Oct 2025 14:08:15 +0000
ROA not after:            Thu 22 Oct 2026 14:13:15 +0000
asID:                     262797
IP address blocks:        2804:23c:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fe:f6:23:fe:2c:37:e8:8f:b9:0b:fb:17:64:56:98:83:32:6d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:15 2025 GMT
            Not After : Oct 22 14:13:15 2026 GMT
        Subject: CN=733458886A5EBFEDE2025B151D6147F9CB7B6EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:d4:d4:35:da:3c:d5:ca:dd:81:0c:11:7d:
                    12:27:66:e3:e7:cd:90:cc:12:8f:55:a4:5e:42:be:
                    0f:30:a9:fb:91:14:ec:5e:46:a5:fa:bc:e0:20:67:
                    4a:b4:0d:82:b1:7a:95:3c:1d:3b:b6:2c:a6:48:ee:
                    04:69:53:31:1e:ec:59:23:ba:f7:f6:b2:78:fa:4f:
                    c5:50:47:2c:ea:77:c9:22:4c:63:b9:58:10:db:30:
                    f5:a5:f9:df:0e:92:e3:87:cb:fe:4b:a9:cf:f0:59:
                    ed:cf:dc:24:12:a7:b6:76:83:0d:a3:49:82:a6:40:
                    63:7e:35:78:f7:e7:ad:b2:8d:90:41:6a:af:84:ff:
                    b9:49:c9:63:3e:50:7d:08:21:67:ad:12:e8:d0:cf:
                    8c:1c:2e:6a:16:40:e0:a0:ce:11:42:f8:87:54:72:
                    a4:03:77:68:86:e3:d5:75:1e:1a:0e:45:60:a8:9f:
                    19:a4:20:bd:33:f0:18:17:56:65:e5:d1:13:35:ef:
                    dd:0a:9c:41:be:a0:d8:e6:aa:9e:6c:99:15:7a:6c:
                    69:1d:fe:bb:e1:b5:59:e9:c0:ed:bc:a2:7e:5f:41:
                    a7:65:3b:f2:33:b3:03:05:02:bb:b8:a7:86:52:68:
                    0c:71:4a:45:a8:4f:07:47:16:94:88:db:0b:ca:c7:
                    52:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:34:58:88:6A:5E:BF:ED:E2:02:5B:15:1D:61:47:F9:CB:7B:6E:C4
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a313030303a3a2f33362d3336203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:68:14:33:dd:9e:a1:ff:2a:49:07:2a:21:5f:12:49:f3:9f:
         f3:82:19:b5:8d:40:d4:59:f0:84:a7:c4:7e:c9:fe:74:67:41:
         2b:96:84:d4:35:cb:b4:ec:41:5d:60:18:a8:a9:b6:9b:50:e3:
         c1:bc:1e:f3:9d:72:8c:9b:90:93:bd:af:29:ce:7c:82:75:11:
         bc:20:b4:07:37:fa:36:33:9e:c8:58:c9:e0:eb:c5:44:56:3a:
         5c:30:95:53:b4:f9:ed:d7:0a:12:fc:22:0a:38:d0:e0:0c:ca:
         ae:ed:a1:18:78:5f:21:ef:fb:64:81:29:80:09:8f:18:de:51:
         22:26:90:4d:0a:33:9b:92:83:e3:de:c2:4b:70:6c:d5:2e:ee:
         3c:85:3d:a6:67:e5:ad:3a:f4:3d:fb:d3:5c:6e:10:c2:2b:ea:
         af:8c:29:52:af:7f:c4:d6:91:73:7b:dc:78:9d:51:4e:37:62:
         5c:45:4b:cc:17:fc:02:ab:d5:b6:1c:b6:8a:9e:0a:98:ed:c4:
         77:57:4f:20:12:94:b7:10:67:0e:b0:c7:df:0e:f0:47:d9:ed:
         23:90:7c:64:6e:e4:a2:39:f7:67:33:c9:3b:71:56:dc:82:92:
         4b:8c:00:84:be:35:7b:9b:ef:d6:10:a7:db:ee:eb:f4:73:9b:
         45:7e:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:29 2025 by rpki-client