Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a383030303a3a2f33342d3334203d3e20323634313337.roa
File:                     323830343a323330343a383030303a3a2f33342d3334203d3e20323634313337.roa (raw, json)
Hash identifier:          f7teJFVzhygGYP9Km90zelcFeMtYLLK3yvOIDWzvgNg=
Subject key identifier:   16:F7:24:F7:62:21:7A:C8:CD:68:E7:98:2A:4E:40:F8:09:6F:24:5B
Certificate issuer:       /CN=239C283AE95BF77707DED60A35EF02DFA2AE1930
Certificate serial:       187AB1ADE3768DDDDFF81F66FA0100C04F84848D
Authority key identifier: 23:9C:28:3A:E9:5B:F7:77:07:DE:D6:0A:35:EF:02:DF:A2:AE:19:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a383030303a3a2f33342d3334203d3e20323634313337.roa
Signing time:             Mon 08 Sep 2025 20:26:09 +0000
ROA not before:           Mon 08 Sep 2025 20:21:09 +0000
ROA not after:            Mon 07 Sep 2026 20:26:09 +0000
asID:                     264137
IP address blocks:        2804:2304:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7a:b1:ad:e3:76:8d:dd:df:f8:1f:66:fa:01:00:c0:4f:84:84:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239C283AE95BF77707DED60A35EF02DFA2AE1930
        Validity
            Not Before: Sep  8 20:21:09 2025 GMT
            Not After : Sep  7 20:26:09 2026 GMT
        Subject: CN=16F724F762217AC8CD68E7982A4E40F8096F245B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:78:22:23:ad:23:f0:9d:e1:21:5b:8a:da:
                    8d:10:d6:66:b0:09:a9:3e:f6:e1:3c:01:ce:ca:17:
                    ee:f6:f8:22:cf:d4:7a:df:7c:8c:ff:28:db:aa:2b:
                    e8:dd:32:b2:0f:4d:77:9c:ee:a1:a5:18:c2:fb:5e:
                    a4:9e:7d:82:f1:6a:d7:b8:0a:67:92:ca:07:e0:e0:
                    4a:1e:2d:ac:3b:62:c6:7b:c4:4f:00:8f:c8:ca:e5:
                    44:a6:76:fc:18:11:ac:4e:1d:ea:fa:be:97:7e:23:
                    ae:35:f8:5b:5c:bc:b9:2b:f2:39:cf:91:b0:58:0f:
                    4f:0c:6b:72:e9:ee:95:b2:05:84:14:33:28:3c:7a:
                    78:cc:d0:64:23:76:39:2d:02:6f:f7:f4:c1:50:91:
                    a3:8f:64:07:83:71:19:c8:8c:c2:29:78:68:bc:c7:
                    b2:16:11:25:be:5c:91:fb:44:96:b8:b7:6c:c6:62:
                    9d:aa:1a:6e:a7:5b:28:d2:b5:be:43:5e:41:5a:fa:
                    ec:a3:b4:61:bc:da:da:cf:8e:b1:6e:d8:97:bc:2a:
                    95:73:d2:5a:58:e4:f1:3f:25:53:8a:00:a6:62:86:
                    91:ba:aa:e6:1c:a3:83:df:51:b6:49:bb:b4:51:6a:
                    e4:9e:36:39:b4:70:f3:7c:17:1c:ba:92:0d:92:3c:
                    65:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F7:24:F7:62:21:7A:C8:CD:68:E7:98:2A:4E:40:F8:09:6F:24:5B
            X509v3 Authority Key Identifier:
                keyid:23:9C:28:3A:E9:5B:F7:77:07:DE:D6:0A:35:EF:02:DF:A2:AE:19:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a383030303a3a2f33342d3334203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:d8:93:cd:b0:55:ea:0c:2c:09:16:4f:4c:73:35:1c:b8:19:
         59:ea:86:5d:cd:b3:85:97:c3:17:a2:3e:44:f2:fa:df:0c:94:
         19:ec:f2:77:e1:57:19:80:0d:0b:2c:f9:b5:53:da:d3:88:e7:
         2e:2c:3b:85:86:dd:65:d0:c2:cb:07:b5:1a:17:ce:02:19:4a:
         eb:db:7d:75:49:bf:30:91:af:8f:3c:22:3f:b1:16:a6:b7:9e:
         8d:82:3b:75:2b:85:a5:e2:d0:99:36:13:ba:36:cf:34:a0:d6:
         f1:fc:ef:51:a0:bf:cc:2d:c7:e3:a0:70:37:b9:7d:b3:a9:c8:
         6f:7e:21:25:6f:71:f0:1d:c7:e7:dc:5f:c3:5b:b1:86:f8:98:
         63:14:44:6b:d8:7c:3f:1a:9e:af:3a:d3:1f:6b:39:a1:ef:1a:
         02:a0:9d:cc:dc:d7:d0:97:07:ab:8d:06:ca:7f:69:45:22:04:
         b0:07:41:2c:79:21:dd:24:d8:c9:2e:c3:64:64:45:af:46:99:
         df:55:5c:79:c4:77:55:84:d7:c5:45:30:40:a9:14:e1:b6:ca:
         7e:60:da:87:58:74:dc:c6:2a:86:43:06:c5:fb:f9:ab:d2:66:
         f5:72:9f:6d:8f:41:8c:4b:13:af:72:4c:1a:9c:51:0c:71:a9:
         ac:f8:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:16:48 2025 by rpki-client