Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6d6YqdhfoUbcCPiZRUpeJQ5grVLjDSebZtDzdtga67Z/0/323830343a356561303a3a2f33322d3438203d3e20323639303436.roa
File:                     323830343a356561303a3a2f33322d3438203d3e20323639303436.roa (raw, json)
Hash identifier:          vgrtRgOcWvfGs5AJLvBa2whb5Y8DWDTz8U1kN80B/Ac=
Subject key identifier:   CC:2F:89:B1:AB:83:7F:B6:DC:81:DF:81:32:6A:51:67:2D:44:39:DD
Certificate issuer:       /CN=A632C51C25A9EBB5A1037404C4FDCB30BDDF66F8
Certificate serial:       10D4C7B0FBB0F8D7478B6B9FDEBCCAB8A84C06CD
Authority key identifier: A6:32:C5:1C:25:A9:EB:B5:A1:03:74:04:C4:FD:CB:30:BD:DF:66:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A632C51C25A9EBB5A1037404C4FDCB30BDDF66F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6d6YqdhfoUbcCPiZRUpeJQ5grVLjDSebZtDzdtga67Z/0/323830343a356561303a3a2f33322d3438203d3e20323639303436.roa
Signing time:             Wed 17 Sep 2025 14:10:06 +0000
ROA not before:           Wed 17 Sep 2025 14:05:06 +0000
ROA not after:            Wed 16 Sep 2026 14:10:06 +0000
asID:                     269046
IP address blocks:        2804:5ea0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6d6YqdhfoUbcCPiZRUpeJQ5grVLjDSebZtDzdtga67Z/0/A632C51C25A9EBB5A1037404C4FDCB30BDDF66F8.crl
                          rsync://rpki-repo.registro.br/repo/G6d6YqdhfoUbcCPiZRUpeJQ5grVLjDSebZtDzdtga67Z/0/A632C51C25A9EBB5A1037404C4FDCB30BDDF66F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A632C51C25A9EBB5A1037404C4FDCB30BDDF66F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d4:c7:b0:fb:b0:f8:d7:47:8b:6b:9f:de:bc:ca:b8:a8:4c:06:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A632C51C25A9EBB5A1037404C4FDCB30BDDF66F8
        Validity
            Not Before: Sep 17 14:05:06 2025 GMT
            Not After : Sep 16 14:10:06 2026 GMT
        Subject: CN=CC2F89B1AB837FB6DC81DF81326A51672D4439DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:32:9d:25:d0:80:04:0d:bb:4c:ba:4b:b0:
                    3c:3a:5d:4b:89:21:00:7d:2f:e1:af:2e:39:9f:91:
                    cb:a6:c9:56:3f:a8:59:a1:f4:03:1e:3e:20:aa:8c:
                    54:55:4d:2e:79:92:fc:4a:39:00:45:52:bf:d9:7f:
                    e9:f1:89:f7:65:db:29:ec:d6:1f:29:ef:22:91:c0:
                    ee:5c:46:90:3e:5a:69:d7:31:05:e9:3d:90:80:66:
                    b5:8d:a1:fd:e8:65:28:9d:d3:b4:d2:c7:b8:d4:15:
                    c2:71:20:4f:a7:11:2e:bd:73:bf:04:50:86:be:44:
                    a7:3a:89:8f:21:f1:3b:1f:1b:27:d5:47:9d:f6:1d:
                    60:d2:82:e3:0e:00:15:12:28:8a:3c:df:36:25:30:
                    01:12:e3:c9:6e:24:ce:f2:90:76:dc:3b:98:28:c4:
                    ca:ac:ce:e7:bf:3b:47:b4:99:db:ab:a7:fd:22:48:
                    49:50:9e:8d:b5:78:e9:fe:7e:e5:55:78:8f:7d:d4:
                    10:c8:4d:bc:4e:9e:e4:18:62:4b:84:84:1c:c9:80:
                    06:79:06:e2:51:7d:70:85:59:12:b9:df:e4:06:07:
                    b3:01:a2:9c:17:96:ad:de:ca:46:0a:b2:69:b5:46:
                    93:5c:34:1a:17:86:69:86:75:88:4b:7b:76:02:4a:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2F:89:B1:AB:83:7F:B6:DC:81:DF:81:32:6A:51:67:2D:44:39:DD
            X509v3 Authority Key Identifier:
                keyid:A6:32:C5:1C:25:A9:EB:B5:A1:03:74:04:C4:FD:CB:30:BD:DF:66:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6d6YqdhfoUbcCPiZRUpeJQ5grVLjDSebZtDzdtga67Z/0/A632C51C25A9EBB5A1037404C4FDCB30BDDF66F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A632C51C25A9EBB5A1037404C4FDCB30BDDF66F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6d6YqdhfoUbcCPiZRUpeJQ5grVLjDSebZtDzdtga67Z/0/323830343a356561303a3a2f33322d3438203d3e20323639303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:d6:a9:41:de:cf:af:2a:c9:07:10:95:f8:64:5a:c1:7d:03:
         58:3c:2e:9c:37:40:7c:1e:3f:b6:ec:33:0e:da:ac:07:f6:33:
         9c:b5:9b:f6:2c:42:92:0b:1a:ad:6d:bc:5d:3e:07:46:d9:41:
         1a:04:9e:6f:74:08:b2:81:b1:d4:88:39:f4:96:4a:2c:45:dd:
         b4:3e:bd:06:f7:a0:f3:34:24:44:40:46:0d:80:f3:f8:96:82:
         b1:d9:63:e3:08:6c:a7:0c:9e:12:f0:33:ee:00:6c:b3:9d:99:
         31:15:57:ba:5d:8d:b7:e6:d5:c4:7c:f6:8e:bd:26:9a:2a:e0:
         ff:10:56:7f:c6:13:57:33:51:be:d0:bc:30:f6:50:9d:6f:6a:
         80:0d:13:3b:db:6b:be:92:78:ea:85:ed:00:7f:8f:0a:1b:41:
         20:af:15:8f:40:92:df:24:03:ad:c0:9e:4e:f8:9d:92:d7:9a:
         84:f4:6d:51:3b:f6:ef:31:1c:e6:34:67:44:fd:22:72:a9:37:
         af:28:bd:68:3c:95:15:5d:d3:4e:77:75:10:d7:af:ff:e4:f5:
         49:e2:47:e9:5b:07:61:31:bd:e7:53:be:ab:c0:77:06:b3:c5:
         41:57:fa:b3:4b:ce:de:25:a2:f8:59:b1:b7:26:25:73:c8:dc:
         44:cd:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:50:51 2025 by rpki-client