Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a613030303a3a2f33362d3336203d3e20323632373937.roa
File:                     323830343a3233633a613030303a3a2f33362d3336203d3e20323632373937.roa (raw, json)
Hash identifier:          uNhBFvTLYr3q5sI2sYDXyEgBiNlfM18a13oKORZBtl0=
Subject key identifier:   91:F3:A1:8F:23:95:62:FD:E6:13:CF:F4:0E:E4:1E:57:BF:0E:2B:3A
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       1C0D60CA75BDD24621C83FFAEBFE85B393649DE5
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a613030303a3a2f33362d3336203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:13 +0000
ROA not before:           Thu 23 Oct 2025 14:08:13 +0000
ROA not after:            Thu 22 Oct 2026 14:13:13 +0000
asID:                     262797
IP address blocks:        2804:23c:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0d:60:ca:75:bd:d2:46:21:c8:3f:fa:eb:fe:85:b3:93:64:9d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:13 2025 GMT
            Not After : Oct 22 14:13:13 2026 GMT
        Subject: CN=91F3A18F239562FDE613CFF40EE41E57BF0E2B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:10:3e:10:4c:c2:d5:44:4a:f2:3f:93:d2:
                    8b:ec:89:9d:e3:59:46:13:fd:11:7e:72:38:b2:84:
                    2e:e2:34:6a:69:d1:0f:18:be:cb:76:59:dd:83:33:
                    5d:aa:ce:75:a4:0c:8f:f2:a7:5c:9e:7a:a7:78:b0:
                    91:2a:64:f9:3c:6d:7f:49:10:77:37:0f:2a:d6:d2:
                    95:32:b0:7f:61:fa:ea:73:c2:4b:38:26:95:ef:41:
                    02:28:56:2a:c0:8d:93:0c:cb:76:a9:54:c2:b3:96:
                    55:6a:5d:27:4d:08:03:52:e3:d5:75:56:2d:e5:93:
                    dd:25:d9:d0:da:06:7b:bf:28:f0:5e:35:3d:60:d0:
                    a0:3b:da:82:9c:90:be:00:b9:0b:13:75:15:ce:d0:
                    da:0d:21:ee:bd:ec:b5:7c:ed:65:cb:f3:58:de:bf:
                    b3:35:4d:01:f4:66:7b:08:6e:98:4e:1b:3c:c5:1f:
                    d3:23:cb:43:cd:f7:3d:a9:a1:ac:2a:f3:ec:ab:f0:
                    b6:ab:27:04:1b:a5:ae:bb:b9:a8:c6:4d:45:f0:07:
                    a1:a4:e2:55:d3:66:df:27:c0:6e:24:90:6f:a7:aa:
                    84:f3:eb:33:96:fa:cd:ce:8b:20:ee:d3:88:93:88:
                    65:2b:e8:00:eb:d7:d8:10:1d:20:c0:48:bb:33:b2:
                    15:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F3:A1:8F:23:95:62:FD:E6:13:CF:F4:0E:E4:1E:57:BF:0E:2B:3A
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a613030303a3a2f33362d3336203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4c:f1:ff:f7:ff:c5:c9:d4:77:47:25:b0:67:f1:f4:87:4e:d4:
         3b:46:cb:e5:47:56:35:e4:b6:24:03:46:4e:d8:95:82:64:c7:
         d7:fa:55:75:ec:7a:3d:77:76:63:b8:59:30:40:c6:84:77:e0:
         e8:06:fb:5d:6d:7a:7c:4d:b4:06:d1:04:62:02:98:5f:5d:0a:
         e7:11:4f:ec:94:24:ae:d0:41:5d:70:51:6d:e0:fd:98:71:24:
         51:82:7b:93:47:55:39:55:48:87:2d:73:9b:9d:1c:38:e7:3c:
         89:51:f3:cb:02:8c:1d:4a:74:4a:d9:a3:70:d0:03:8e:d8:f4:
         ba:94:c9:73:d9:55:4d:b0:63:b4:d9:92:82:f4:5f:b1:02:f8:
         29:4d:bf:3f:b3:67:3e:05:ab:b4:7d:67:4b:ee:8b:31:dc:71:
         03:a3:38:89:27:1b:dc:fb:f9:ee:64:4e:36:ab:3b:23:75:1d:
         44:74:40:fe:77:2e:36:db:3e:14:6d:26:e7:86:44:0b:30:b0:
         13:ac:80:6f:7e:6a:06:09:e2:83:86:41:1b:6a:f6:60:84:77:
         99:0f:bd:d1:46:d4:79:b2:93:78:d0:fd:a0:fd:04:e8:53:3d:
         3c:3b:65:9d:b7:f8:43:7a:e5:de:c0:7e:3e:e4:d3:85:e4:00:
         72:b1:bd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:27 2025 by rpki-client