Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/323830343a356331383a3a2f33322d3438203d3e20323638383837.roa
File:                     323830343a356331383a3a2f33322d3438203d3e20323638383837.roa (raw, json)
Hash identifier:          n7eEmpB5SUXctYqwTE/aOlWKZT6eFY4M8T5NRxWPoSU=
Subject key identifier:   39:21:FA:5E:D7:0B:3E:6A:AD:95:19:67:CE:C0:2E:B3:D8:66:5A:D0
Certificate issuer:       /CN=931FE6808F2C81EEBE1507919DFA71A7524F4A48
Certificate serial:       35EEE694BB46A1003A6E24F8785D0DE437D5FB15
Authority key identifier: 93:1F:E6:80:8F:2C:81:EE:BE:15:07:91:9D:FA:71:A7:52:4F:4A:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931FE6808F2C81EEBE1507919DFA71A7524F4A48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/323830343a356331383a3a2f33322d3438203d3e20323638383837.roa
Signing time:             Mon 15 Sep 2025 13:03:49 +0000
ROA not before:           Mon 15 Sep 2025 12:58:49 +0000
ROA not after:            Mon 14 Sep 2026 13:03:49 +0000
asID:                     268887
IP address blocks:        2804:5c18::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/931FE6808F2C81EEBE1507919DFA71A7524F4A48.crl
                          rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/931FE6808F2C81EEBE1507919DFA71A7524F4A48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931FE6808F2C81EEBE1507919DFA71A7524F4A48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 08:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ee:e6:94:bb:46:a1:00:3a:6e:24:f8:78:5d:0d:e4:37:d5:fb:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931FE6808F2C81EEBE1507919DFA71A7524F4A48
        Validity
            Not Before: Sep 15 12:58:49 2025 GMT
            Not After : Sep 14 13:03:49 2026 GMT
        Subject: CN=3921FA5ED70B3E6AAD951967CEC02EB3D8665AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:10:87:3c:45:12:c8:8b:e6:53:b8:0b:00:09:
                    bf:72:f6:7c:0f:b7:34:ef:ef:f9:ba:f8:d9:bd:53:
                    7f:cf:1e:ea:aa:20:bc:5e:20:1c:30:3b:02:ce:87:
                    a9:55:df:3b:6d:f1:f7:4a:66:66:f5:d9:37:ea:da:
                    d7:e1:b3:c4:6b:5b:e3:f3:dd:88:8c:ec:79:d5:75:
                    3f:4d:83:cf:68:ce:cf:82:31:46:50:03:f9:50:2d:
                    28:b5:36:b4:80:7e:0f:7a:58:cd:4a:e0:7c:49:c6:
                    53:68:91:28:b2:37:2e:31:9d:6b:c4:65:58:a3:a4:
                    8f:e7:cf:57:da:04:9a:1b:6b:19:89:16:11:5a:fc:
                    14:ed:89:9c:f5:a8:88:e0:cb:94:79:2d:c3:2c:97:
                    b7:36:a9:0f:e8:84:e2:fa:34:69:47:40:45:9a:ca:
                    74:af:7a:6f:1a:7d:c0:78:b6:67:d1:5e:54:d8:ff:
                    37:28:cb:8e:b6:48:ab:3b:05:8c:fe:95:b8:c3:12:
                    9e:5c:7e:ac:99:b7:2c:fc:7a:05:fe:ea:3e:71:28:
                    17:9f:c8:a8:67:be:b9:a6:fb:88:ff:95:37:e2:67:
                    60:69:37:9a:e5:30:8a:6c:9c:43:02:bd:11:aa:25:
                    a2:11:b0:aa:e1:21:a1:e9:7b:8a:7b:10:5d:9f:13:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:21:FA:5E:D7:0B:3E:6A:AD:95:19:67:CE:C0:2E:B3:D8:66:5A:D0
            X509v3 Authority Key Identifier:
                keyid:93:1F:E6:80:8F:2C:81:EE:BE:15:07:91:9D:FA:71:A7:52:4F:4A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/931FE6808F2C81EEBE1507919DFA71A7524F4A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931FE6808F2C81EEBE1507919DFA71A7524F4A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/323830343a356331383a3a2f33322d3438203d3e20323638383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:42:19:c0:42:f6:bd:db:05:53:db:b7:bb:8c:98:1c:4b:be:
         43:3b:02:40:ae:ac:80:8b:cb:a3:1e:fb:a5:30:ed:07:da:06:
         1d:35:85:1f:b8:67:ce:12:fb:85:38:7d:7f:7a:76:4c:a5:e1:
         f7:06:8a:4f:3f:8e:89:d5:ce:5f:12:30:ad:8a:8a:00:0d:41:
         ad:32:6e:3b:46:5f:e6:45:e9:57:0a:fd:fc:6a:57:b0:fb:7e:
         ca:0a:9f:a1:e5:fe:c6:5c:fe:05:61:cc:59:09:de:35:01:31:
         b5:25:e0:15:e8:f2:37:93:bd:68:e2:a7:30:5e:26:f1:8e:64:
         56:f2:27:92:d8:58:af:bf:22:24:44:44:2a:8f:c2:21:40:0c:
         52:7d:25:7f:06:9c:b7:a6:f4:47:ef:58:da:82:e5:f6:88:a1:
         b2:f4:54:bc:ba:cd:c8:b2:b9:e4:f0:22:1a:db:13:60:fc:e1:
         c9:13:dd:95:13:87:b5:41:84:8f:39:e7:32:0a:1e:cf:0d:dd:
         3e:37:ba:b5:2f:3f:06:52:ab:ac:ac:1e:a3:d5:4f:ee:fd:6d:
         6c:da:0b:12:7f:f6:43:34:78:75:67:0b:ae:b8:36:c3:21:17:
         5c:38:ad:63:83:d5:1c:d7:b4:fa:e0:a1:6c:06:39:c8:b9:fc:
         23:35:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:26:13 2025 by rpki-client