Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a3a2f33322d3332203d3e20323636393438.roa
File:                     323830343a343563343a3a2f33322d3332203d3e20323636393438.roa (raw, json)
Hash identifier:          d7ugN5VNyAPfqO5JZxx4LCiDIXryY/uBjnQaykMq7ww=
Subject key identifier:   C0:84:E7:AE:DC:2A:A3:70:95:DD:5F:DA:2A:C9:98:AE:6B:94:D5:2B
Certificate issuer:       /CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
Certificate serial:       1563818DFA5F84B7D9D92743C41E28E3BBC5F8D0
Authority key identifier: C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a3a2f33322d3332203d3e20323636393438.roa
Signing time:             Mon 08 Sep 2025 19:01:57 +0000
ROA not before:           Mon 08 Sep 2025 18:56:57 +0000
ROA not after:            Mon 07 Sep 2026 19:01:57 +0000
asID:                     266948
IP address blocks:        2804:45c4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl
                          rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:63:81:8d:fa:5f:84:b7:d9:d9:27:43:c4:1e:28:e3:bb:c5:f8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
        Validity
            Not Before: Sep  8 18:56:57 2025 GMT
            Not After : Sep  7 19:01:57 2026 GMT
        Subject: CN=C084E7AEDC2AA37095DD5FDA2AC998AE6B94D52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:0b:c3:67:3d:1e:8d:aa:36:20:3f:89:7c:
                    8c:ec:66:c0:74:b5:1a:b6:b5:cf:3d:e7:7c:62:53:
                    26:44:fa:f3:df:32:a8:4d:61:27:60:c2:fa:26:64:
                    c5:38:b2:89:b6:d9:03:6f:4e:18:d7:af:23:1d:2f:
                    97:96:de:9b:5a:02:fc:f8:ec:92:12:2c:f9:10:88:
                    b7:df:f1:48:15:c0:01:06:7f:c3:03:5c:ca:15:67:
                    5d:9f:a9:de:cd:a4:1c:de:c2:86:41:40:14:1b:8a:
                    32:9d:07:ce:4c:32:2d:3a:b8:69:95:a5:d8:b0:31:
                    22:de:8d:68:2b:73:8f:6e:95:fe:55:cf:4f:05:c6:
                    d7:5e:60:e5:a6:79:97:66:e0:23:13:f0:23:ae:0e:
                    aa:44:59:f6:93:ec:c4:eb:ad:08:b3:5f:f9:f8:b4:
                    4b:b0:dc:55:9b:a5:80:7c:29:06:72:e6:71:79:61:
                    fd:7d:5f:36:63:ac:a1:cf:f4:ec:c5:41:57:6b:b1:
                    8c:8c:1f:76:75:bd:6c:7d:0c:1b:5d:a9:34:ff:3b:
                    3c:fe:39:1e:fb:30:0c:f6:a9:93:b3:61:85:7a:f9:
                    7a:e3:30:29:ff:0d:89:30:1d:60:ad:25:c1:f6:e0:
                    22:64:b2:89:97:48:bb:1e:21:6d:b5:1b:6c:0a:a2:
                    3e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:84:E7:AE:DC:2A:A3:70:95:DD:5F:DA:2A:C9:98:AE:6B:94:D5:2B
            X509v3 Authority Key Identifier:
                keyid:C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a3a2f33322d3332203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:84:60:ca:fb:32:ce:35:31:96:0a:fc:ef:5b:32:98:01:f5:
         e7:6d:c7:e1:9a:d9:a9:9e:1e:26:06:d3:3b:14:84:54:f8:d2:
         24:3e:4e:06:b6:d2:1f:5b:83:bd:91:e2:90:d9:60:e6:e2:a8:
         57:5e:5d:54:0f:d8:59:86:bd:21:7e:1c:88:79:a8:a0:f0:70:
         06:ad:d9:18:ec:c8:e8:1c:2e:26:e0:6f:9d:08:01:95:b2:1a:
         ae:7b:70:44:40:b4:fa:ec:48:cb:47:c1:ef:bd:14:f0:56:a4:
         1a:1d:f4:35:6a:66:ac:0c:79:0a:3c:c0:09:10:fb:c2:cd:6e:
         f0:29:91:96:74:c2:c3:84:6e:be:d3:98:16:1f:1f:1e:d1:35:
         73:40:de:3e:28:33:ea:f9:3c:b7:20:bb:da:e4:7a:11:63:38:
         1d:0e:36:e3:8a:40:01:e1:23:ee:89:67:94:20:91:38:e6:c6:
         46:ac:a6:c4:f0:4f:f4:9f:26:fe:e5:24:70:a0:77:24:b2:1b:
         bf:1e:d4:bb:8f:48:ed:e5:df:e6:73:1b:34:96:d6:84:a0:02:
         dd:10:31:5c:04:53:00:08:da:dc:ac:dc:aa:58:90:71:ea:59:
         de:bf:50:31:a1:3c:74:ec:1a:a2:e8:29:71:d3:84:8c:97:32:
         e1:75:98:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:07:29 2025 by rpki-client