Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a3a2f33332d3333203d3e20323634313337.roa
File:                     323830343a323330343a3a2f33332d3333203d3e20323634313337.roa (raw, json)
Hash identifier:          lYgyQpwUpojX57yQn2uFwYPf4+2HtSs2II76T/ueZNc=
Subject key identifier:   EA:39:15:CE:BD:9C:B1:19:F6:B5:1D:9F:0E:A4:26:D7:4E:56:15:67
Certificate issuer:       /CN=239C283AE95BF77707DED60A35EF02DFA2AE1930
Certificate serial:       7E6DA2F97E981FDE423354F270F21473A283D203
Authority key identifier: 23:9C:28:3A:E9:5B:F7:77:07:DE:D6:0A:35:EF:02:DF:A2:AE:19:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a3a2f33332d3333203d3e20323634313337.roa
Signing time:             Mon 08 Sep 2025 20:26:11 +0000
ROA not before:           Mon 08 Sep 2025 20:21:11 +0000
ROA not after:            Mon 07 Sep 2026 20:26:11 +0000
asID:                     264137
IP address blocks:        2804:2304::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6d:a2:f9:7e:98:1f:de:42:33:54:f2:70:f2:14:73:a2:83:d2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239C283AE95BF77707DED60A35EF02DFA2AE1930
        Validity
            Not Before: Sep  8 20:21:11 2025 GMT
            Not After : Sep  7 20:26:11 2026 GMT
        Subject: CN=EA3915CEBD9CB119F6B51D9F0EA426D74E561567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7f:86:eb:18:5c:f0:2e:57:40:81:c1:82:0b:
                    4b:96:7b:ef:70:56:5a:11:f7:f8:a0:7e:5d:ef:e0:
                    58:c0:ed:51:af:e0:e1:3d:7e:37:5d:07:11:4a:e3:
                    c3:e1:a7:f8:65:b9:48:e1:1b:23:e6:1e:3e:22:10:
                    d4:90:9e:d6:92:c3:d8:8a:03:0f:f2:d6:3c:52:e8:
                    56:1e:e4:c8:56:1b:bf:05:14:57:48:cf:65:ab:a8:
                    99:4b:37:32:e1:fc:b3:ee:7b:69:3e:05:d5:c5:76:
                    ba:e1:e4:49:c9:4a:db:85:42:e2:74:72:22:72:1a:
                    4c:6e:d1:55:2c:6e:0c:2c:1e:55:63:bb:90:66:38:
                    b9:20:94:22:89:46:db:d3:a9:86:b3:94:2d:fd:35:
                    4d:db:d4:2f:49:ab:06:89:69:81:6e:3b:b5:2c:54:
                    2e:15:4c:e8:47:b2:00:76:42:89:85:0d:dd:e2:a1:
                    d7:0e:23:1f:4d:e2:37:22:06:ec:47:7b:a5:51:2e:
                    bc:be:74:da:d8:9e:7f:a2:ed:59:1a:80:4e:7d:66:
                    40:19:98:7b:c7:db:39:43:6b:ee:12:20:69:a5:da:
                    5a:91:9b:9b:6d:af:41:71:cf:e6:7a:52:45:5b:c9:
                    b5:76:54:1e:84:fd:83:7e:d9:c0:0d:65:91:cb:80:
                    90:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:39:15:CE:BD:9C:B1:19:F6:B5:1D:9F:0E:A4:26:D7:4E:56:15:67
            X509v3 Authority Key Identifier:
                keyid:23:9C:28:3A:E9:5B:F7:77:07:DE:D6:0A:35:EF:02:DF:A2:AE:19:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a3a2f33332d3333203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304::/33

    Signature Algorithm: sha256WithRSAEncryption
         13:78:49:10:16:74:e2:ef:db:af:c8:84:0d:11:ce:fe:f4:9b:
         e6:6e:8b:de:31:c2:10:6f:a0:6f:b5:d9:7f:b5:6c:f6:6f:b1:
         9d:05:4b:da:3d:8a:9a:52:68:38:86:46:f6:24:c5:59:d6:89:
         69:57:dc:10:5d:c3:69:65:a8:95:70:2d:8e:3e:0d:e7:8f:d1:
         a6:f3:c0:75:d2:04:c8:e5:e7:42:a6:a9:e8:ff:3a:ba:42:70:
         e0:3c:18:e6:35:33:24:d3:a6:f6:b1:b6:42:50:5d:15:46:82:
         45:47:3a:8e:7d:82:f2:de:e4:87:fb:6f:f6:e1:e0:45:10:6a:
         a7:6e:a8:7f:33:56:40:35:0d:b1:a6:ca:9f:5e:b5:fa:4a:86:
         52:d4:45:27:43:9e:11:25:50:da:b6:87:ff:95:07:74:7a:30:
         78:76:16:75:d3:e1:ba:90:0b:4c:cf:ee:84:b0:2a:85:f8:e2:
         3b:82:6c:49:0d:1c:38:bf:20:ba:c2:45:d0:35:4b:4a:6b:22:
         a9:12:9c:84:b6:23:61:75:94:97:bc:ba:02:2a:0d:5a:ae:ce:
         d7:c7:a1:91:9b:4f:22:13:c3:30:49:3e:8e:a8:3f:be:aa:52:
         ea:97:78:e3:52:38:f0:a5:e5:4d:79:71:ef:a9:4e:83:40:1f:
         53:06:9b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:33:55 2025 by rpki-client