Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a3a2f33332d3333203d3e20323636393438.roa
File:                     323830343a343563343a3a2f33332d3333203d3e20323636393438.roa (raw, json)
Hash identifier:          oryGNuPeIcLom1jDmJvRnDFxj/3u86V5Dm/qZhybzF4=
Subject key identifier:   55:DE:DA:68:F8:3B:80:0D:49:E8:FF:A3:B0:A9:F4:99:C4:6E:77:12
Certificate issuer:       /CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
Certificate serial:       666388867702FC9570DF589C580B00EA17BD0C88
Authority key identifier: C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a3a2f33332d3333203d3e20323636393438.roa
Signing time:             Mon 08 Sep 2025 19:01:58 +0000
ROA not before:           Mon 08 Sep 2025 18:56:58 +0000
ROA not after:            Mon 07 Sep 2026 19:01:58 +0000
asID:                     266948
IP address blocks:        2804:45c4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl
                          rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:63:88:86:77:02:fc:95:70:df:58:9c:58:0b:00:ea:17:bd:0c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
        Validity
            Not Before: Sep  8 18:56:58 2025 GMT
            Not After : Sep  7 19:01:58 2026 GMT
        Subject: CN=55DEDA68F83B800D49E8FFA3B0A9F499C46E7712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:0f:57:f1:b5:3a:0a:aa:5c:2b:72:01:99:
                    a9:77:21:b6:b6:4a:54:18:3d:ca:b5:2b:f2:d3:f3:
                    ef:e0:95:f2:cf:1d:1b:be:64:b5:e2:24:6e:4d:d7:
                    61:57:4b:1e:94:9c:e0:d4:d2:c7:16:06:1f:c9:27:
                    5d:73:a2:96:1b:3b:27:c2:40:66:74:12:7a:c0:0e:
                    71:79:22:9f:c3:d4:3d:7e:c8:80:12:b0:a9:67:e8:
                    68:c2:2b:65:56:f9:05:08:dd:de:d6:98:b8:46:8c:
                    e9:f8:2e:91:23:78:ad:8a:25:97:44:9b:75:57:e5:
                    f5:e8:3a:d7:73:05:4d:72:c7:aa:65:4c:03:fc:07:
                    09:7d:75:ff:d6:4b:f2:3a:f9:87:a5:6b:ed:94:47:
                    d9:77:aa:99:01:3c:42:2a:ea:e9:a0:8f:46:4d:c8:
                    cf:d3:42:a1:1a:bf:6a:04:38:0a:f5:77:e5:d2:f5:
                    72:ff:bb:0f:78:9c:15:90:8a:a5:68:1c:e4:af:12:
                    47:bf:d3:d9:27:2d:12:d0:42:5f:63:2b:3f:6b:f3:
                    0c:05:92:3f:29:d0:0c:23:65:ac:6e:58:2a:03:d2:
                    7b:2f:14:dc:a7:03:1d:1c:03:f4:78:cd:b1:93:88:
                    6b:71:dc:3d:d4:8d:0d:2c:21:18:87:2e:b0:15:f6:
                    64:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DE:DA:68:F8:3B:80:0D:49:E8:FF:A3:B0:A9:F4:99:C4:6E:77:12
            X509v3 Authority Key Identifier:
                keyid:C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a3a2f33332d3333203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45c4::/33

    Signature Algorithm: sha256WithRSAEncryption
         d4:26:f6:a8:90:dd:ee:e0:73:b1:58:fc:b7:53:8f:ea:fe:f6:
         56:37:cc:66:0a:56:45:c9:e1:16:fc:60:10:99:e1:98:0a:c3:
         40:0c:e9:ee:a5:a0:2a:eb:76:1d:25:7c:bf:8f:60:55:90:85:
         eb:71:17:6d:51:4d:df:10:1e:10:2a:06:a2:3a:63:61:1e:f8:
         87:a0:bb:33:dc:66:6d:4d:cd:f3:10:9d:c6:9a:85:53:3a:8d:
         71:bb:ea:92:4e:6b:ff:0f:59:ae:41:67:12:d9:ef:d5:fd:98:
         83:56:e3:13:9d:fa:c4:21:fa:cd:56:23:69:25:64:a8:05:5e:
         7d:55:1f:30:48:e2:18:57:4c:43:45:d4:48:aa:9a:ce:02:a4:
         cb:8b:7f:84:47:77:eb:a6:b3:42:65:aa:47:06:17:6e:f3:71:
         43:6b:89:d1:ca:1f:f6:a3:3e:25:a0:20:bc:a3:71:ab:5d:8a:
         01:ba:ee:fc:95:e9:54:a6:cf:72:c8:cb:2b:27:3b:e0:af:9f:
         5c:b8:c4:6c:9d:3f:cf:9f:2d:99:5f:d8:c2:3d:c8:2d:22:7f:
         87:5d:62:46:66:a8:9a:d7:ef:c4:11:87:4f:6a:00:d9:af:e0:
         5b:4b:8f:fb:85:f0:8b:04:de:e5:42:81:dc:9d:c7:5d:c1:4b:
         50:a2:f5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:07:15 2025 by rpki-client