Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/323830343a373036343a3a2f33322d313238203d3e20323730373234.roa
File:                     323830343a373036343a3a2f33322d313238203d3e20323730373234.roa (raw, json)
Hash identifier:          FWXKs+yzXm3tJ1PLuYtQFD/8hznD8kqFJwXAg/Hl87E=
Subject key identifier:   C1:30:7B:99:05:27:1A:82:D2:D7:CA:3A:76:74:A0:A3:7B:5D:F1:6C
Certificate issuer:       /CN=331A5DDD5E7A3EE354C08E8A7D87875342BC753F
Certificate serial:       4B38C0E79B16BBA60724F4F66E32A89D5E14CB01
Authority key identifier: 33:1A:5D:DD:5E:7A:3E:E3:54:C0:8E:8A:7D:87:87:53:42:BC:75:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/323830343a373036343a3a2f33322d313238203d3e20323730373234.roa
Signing time:             Wed 10 Sep 2025 20:18:43 +0000
ROA not before:           Wed 10 Sep 2025 20:13:43 +0000
ROA not after:            Wed 09 Sep 2026 20:18:43 +0000
asID:                     270724
IP address blocks:        2804:7064::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.crl
                          rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:38:c0:e7:9b:16:bb:a6:07:24:f4:f6:6e:32:a8:9d:5e:14:cb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331A5DDD5E7A3EE354C08E8A7D87875342BC753F
        Validity
            Not Before: Sep 10 20:13:43 2025 GMT
            Not After : Sep  9 20:18:43 2026 GMT
        Subject: CN=C1307B9905271A82D2D7CA3A7674A0A37B5DF16C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:21:d3:e9:9a:ab:6c:ef:5c:69:e2:f5:4a:
                    b5:38:cb:0d:56:e1:f5:6f:d6:96:8b:5b:0e:d9:80:
                    0e:fe:14:55:b1:98:26:44:84:a1:22:99:00:26:e8:
                    1f:0e:a0:5e:81:ec:2c:06:11:84:9a:06:4f:f9:4b:
                    41:6d:e9:95:90:67:d9:f4:25:9d:fb:a8:e5:c1:48:
                    8e:cb:cb:60:73:6e:36:32:60:57:bf:3f:05:fb:12:
                    99:90:ef:01:88:6a:d0:d5:e1:de:4e:48:f8:9d:49:
                    36:51:1a:93:a3:58:92:ac:9d:88:39:94:cf:92:42:
                    82:e1:0a:ef:51:43:45:2e:cb:34:13:e2:57:49:e5:
                    ab:8c:08:ed:7d:c4:a0:86:c8:a2:d5:6b:92:ce:9d:
                    dc:97:c3:02:92:ed:a5:37:67:64:16:80:e0:79:b8:
                    d1:ab:59:90:4f:6f:62:d8:0c:ac:9e:51:2b:49:67:
                    9b:d4:ce:53:5e:51:ed:7a:bb:d1:52:5a:6d:ee:36:
                    7d:fa:7c:86:37:86:e0:3a:15:3e:8c:72:ba:d7:da:
                    5f:f2:1d:25:46:61:13:dd:6e:a0:04:06:4a:fc:b8:
                    ca:ef:26:f4:4b:3b:04:cb:2f:23:5b:7b:32:83:2b:
                    08:e6:e6:d0:b6:ce:b3:51:76:53:d1:89:01:90:8e:
                    0f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:30:7B:99:05:27:1A:82:D2:D7:CA:3A:76:74:A0:A3:7B:5D:F1:6C
            X509v3 Authority Key Identifier:
                keyid:33:1A:5D:DD:5E:7A:3E:E3:54:C0:8E:8A:7D:87:87:53:42:BC:75:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/323830343a373036343a3a2f33322d313238203d3e20323730373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7064::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:0b:4b:87:d9:24:bd:00:83:71:00:47:d6:c7:a0:46:84:7a:
         9d:de:58:da:83:da:c2:a7:bf:2a:cb:0d:96:6f:15:7f:21:b8:
         29:8d:e7:d7:72:13:9b:3c:ab:d6:bd:4a:95:74:61:57:8a:29:
         21:80:7f:de:f5:13:32:85:08:f6:59:ab:55:28:54:77:f0:f3:
         a8:2e:b6:c8:21:4c:1c:f4:76:41:77:be:f9:d5:43:a7:f3:93:
         59:c0:fe:6c:ae:9f:4b:6d:6a:c2:d4:1a:af:a2:f9:76:1e:65:
         aa:d5:11:93:7e:bb:a2:54:8f:9e:bb:22:6f:df:cb:3d:c5:8a:
         52:63:38:95:be:71:53:ce:a9:de:bd:be:74:f1:ae:ae:cc:c3:
         27:fa:a3:d5:b0:81:9c:60:da:bd:09:bf:47:c0:86:0a:f4:bf:
         1b:4d:51:de:2a:bd:e3:96:f8:ca:6d:41:d2:f4:66:70:dc:47:
         42:9d:89:ea:4c:79:0f:51:95:3d:d0:b6:d6:b9:50:ef:05:2e:
         1f:d6:8c:69:0c:39:6c:b2:24:38:8a:e1:46:90:4d:3c:19:26:
         94:94:3b:94:8e:db:78:98:3d:a6:78:37:ba:d4:df:8d:74:6e:
         71:7c:e9:7f:ec:d3:ea:23:0f:a7:40:c0:e7:93:87:09:02:f3:
         24:95:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:36:56 2025 by rpki-client