Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a373030303a3a2f33362d3336203d3e20323632373937.roa
File:                     323830343a3233633a373030303a3a2f33362d3336203d3e20323632373937.roa (raw, json)
Hash identifier:          GG4LyXat6wi0ALOyKoNpQu9OrteVhCfacKVNthH1OOQ=
Subject key identifier:   21:96:C7:CE:4A:74:7E:25:2C:9F:26:23:15:6E:00:19:36:06:AB:AE
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       4EFF209CE72D99F099C3CA7FB061841E740C6843
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a373030303a3a2f33362d3336203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:18 +0000
ROA not before:           Thu 23 Oct 2025 14:08:18 +0000
ROA not after:            Thu 22 Oct 2026 14:13:18 +0000
asID:                     262797
IP address blocks:        2804:23c:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ff:20:9c:e7:2d:99:f0:99:c3:ca:7f:b0:61:84:1e:74:0c:68:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:18 2025 GMT
            Not After : Oct 22 14:13:18 2026 GMT
        Subject: CN=2196C7CE4A747E252C9F2623156E00193606ABAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:87:06:52:9a:a7:d9:a0:7b:3a:49:66:1a:75:
                    95:cf:e3:36:89:74:a9:fb:b7:0e:27:3d:ba:4d:5f:
                    c6:61:f4:48:8c:c1:2c:b7:57:1f:f7:a6:2b:a8:7c:
                    c9:db:d0:52:ca:4d:65:0e:23:f0:6f:fd:37:23:6d:
                    08:08:72:eb:29:e9:c3:78:27:ab:22:08:6f:5a:98:
                    48:d1:89:9f:a0:45:49:b2:f7:39:af:d9:90:e5:77:
                    d1:15:62:3b:77:08:5e:19:84:77:75:97:32:59:2d:
                    aa:40:41:c6:7d:16:19:ab:28:fe:ef:29:5f:92:6d:
                    fd:bc:7d:1b:e9:e3:a4:76:fa:e0:c4:4a:f2:bc:c3:
                    e3:04:3a:95:d5:9e:5e:59:98:08:4c:0e:fc:0b:24:
                    ce:33:e3:a1:e5:21:bb:f4:ba:60:a6:d2:bb:b9:ff:
                    05:b5:ae:2a:a7:49:a9:7c:10:55:a1:75:4f:cd:21:
                    e9:ef:77:b6:31:b8:2a:59:d0:a5:1a:52:9b:a0:16:
                    6e:ff:ba:ec:6f:98:04:a8:b2:db:b6:67:7a:85:7b:
                    13:97:5f:28:46:c8:04:40:00:a0:7c:2f:66:98:8d:
                    af:3e:05:68:b5:6d:56:4a:a6:7a:7e:eb:ce:83:b8:
                    05:a1:c1:45:98:c6:12:1d:61:87:cd:01:b8:96:92:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:96:C7:CE:4A:74:7E:25:2C:9F:26:23:15:6E:00:19:36:06:AB:AE
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a373030303a3a2f33362d3336203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         88:5f:26:dc:f1:6c:4b:18:60:46:7e:df:fb:f8:05:bf:21:d3:
         40:35:df:e4:70:e9:19:31:ba:b1:0c:45:29:d3:08:cd:35:7e:
         6f:af:99:94:ab:42:a3:51:ad:01:2e:19:64:2f:ff:a7:bf:61:
         62:9f:10:1e:57:d9:d1:2d:a5:98:04:dd:00:4b:ed:b7:0b:bd:
         21:14:02:82:dd:cc:a4:1f:85:d5:b3:1d:94:87:dd:23:52:0b:
         18:47:05:f9:8b:aa:c0:33:a4:44:f0:b3:27:c7:ad:b2:0f:ae:
         36:c8:0a:cd:27:81:2e:cc:b1:ad:f5:59:30:03:67:69:89:69:
         49:39:12:96:a0:e4:e8:b8:4b:55:b8:88:80:e5:dc:60:ac:dd:
         1c:84:54:12:a2:9c:4b:9a:bc:7f:90:fa:ba:50:c3:46:2e:a1:
         f3:e9:ac:1b:db:d2:e3:4c:63:70:67:0e:86:57:d2:d3:04:cb:
         47:11:e1:68:ed:80:ab:6c:77:af:e3:10:06:3e:02:14:cd:05:
         c4:7a:43:0c:0f:8c:cf:26:b0:90:10:27:32:b5:1c:31:0a:d2:
         8f:4a:50:06:fa:c5:75:0c:b7:27:38:29:f3:91:1f:80:63:ac:
         fe:32:38:2e:4f:e0:57:49:f1:74:a8:ce:06:26:0b:5e:f2:2e:
         fd:46:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:29 2025 by rpki-client