Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/323830343a6633303a3a2f33322d3438203d3e20323633353639.roa
File:                     323830343a6633303a3a2f33322d3438203d3e20323633353639.roa (raw, json)
Hash identifier:          9VGkgpw/CbnqVIkF4SPA0KuhQ26iO5Ll/i9/Z6H95qM=
Subject key identifier:   19:79:A5:35:51:12:42:9B:57:8F:0A:6B:E9:E1:0F:56:F9:D3:12:13
Certificate issuer:       /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial:       3FABBA6F5A3B1E1A4ECF97192127A51BA4B48F1E
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/323830343a6633303a3a2f33322d3438203d3e20323633353639.roa
Signing time:             Mon 08 Sep 2025 14:15:55 +0000
ROA not before:           Mon 08 Sep 2025 14:10:55 +0000
ROA not after:            Mon 07 Sep 2026 14:15:55 +0000
asID:                     263569
IP address blocks:        2804:f30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ab:ba:6f:5a:3b:1e:1a:4e:cf:97:19:21:27:a5:1b:a4:b4:8f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
        Validity
            Not Before: Sep  8 14:10:55 2025 GMT
            Not After : Sep  7 14:15:55 2026 GMT
        Subject: CN=1979A5355112429B578F0A6BE9E10F56F9D31213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:f3:3f:02:e3:95:45:a3:1f:eb:1b:2d:8d:
                    73:09:71:72:94:64:f2:64:52:e8:67:55:08:f7:c7:
                    70:c9:46:50:c8:96:3e:72:3a:b0:8b:8d:63:0e:4c:
                    b4:c8:67:dc:08:3f:09:48:d1:c2:53:b2:04:d1:03:
                    d8:95:5a:a6:fa:80:d9:1e:44:fb:5a:54:28:c3:2d:
                    17:b0:ff:0d:a5:45:a6:3a:b8:77:35:4b:71:fa:fd:
                    2b:c8:70:f5:df:74:59:29:53:ce:f7:02:91:e2:16:
                    fc:e4:ef:83:77:0b:5c:e9:f2:d8:b1:29:88:9b:04:
                    42:51:50:41:17:f0:aa:00:13:ad:dd:9e:a2:86:33:
                    0d:24:ed:3f:d1:87:e9:f3:7c:ed:b7:99:a1:5a:5e:
                    17:e2:01:c5:73:e0:a7:ad:4d:d1:31:2b:0c:00:60:
                    dd:b5:7f:30:27:70:57:f8:b3:d9:1f:61:c8:c2:f2:
                    8b:95:6f:99:73:bb:09:48:3b:fa:42:70:dd:f4:0e:
                    e7:91:25:7a:a8:55:57:c3:e1:f5:3d:43:8f:13:ad:
                    73:92:e3:fa:ad:bd:70:90:70:34:d2:55:3a:eb:11:
                    5b:cc:10:20:99:9d:71:af:7b:38:b6:69:fc:d0:ca:
                    1b:09:f3:d3:cb:2a:d7:26:55:bf:40:84:cb:fc:4d:
                    f5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:79:A5:35:51:12:42:9B:57:8F:0A:6B:E9:E1:0F:56:F9:D3:12:13
            X509v3 Authority Key Identifier:
                keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/323830343a6633303a3a2f33322d3438203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f30::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:da:d4:8c:0c:38:aa:3d:4f:db:fc:5d:e4:f0:74:13:13:78:
         13:fa:d8:30:cd:b5:cd:4b:08:7b:29:35:d7:98:ed:3e:d9:c7:
         ce:51:c5:68:f6:b3:36:59:e2:6c:05:aa:dc:ef:a3:43:cb:f6:
         b1:94:c2:19:2f:7b:a2:01:d3:2a:53:79:12:b1:f2:eb:0d:3f:
         9d:b2:f8:d0:10:2f:d6:2d:b3:7e:de:af:c1:5b:04:c2:0b:ef:
         61:62:13:ef:5a:2a:86:0a:34:02:b3:0f:e3:e3:03:45:7b:af:
         12:51:0f:1c:8b:77:e2:59:5c:46:bf:2a:27:24:e2:92:5c:80:
         04:1e:81:3e:06:04:db:0a:80:cf:d9:39:c0:db:7c:90:22:d8:
         6e:68:1c:ed:a1:6d:74:1a:7e:54:d4:c7:26:df:a0:48:dc:f8:
         e5:f3:a2:a0:49:90:09:98:df:04:79:86:5f:97:10:75:05:35:
         1d:e3:fb:f8:40:05:40:8a:fe:bb:97:36:0a:ae:e1:66:b4:70:
         5b:0a:fa:a5:b1:af:5b:34:26:43:f5:80:83:53:73:56:d9:04:
         74:28:21:30:cc:bc:92:bf:de:cc:b6:b9:fe:ad:97:ec:6c:71:
         b5:af:da:c5:e9:18:ed:c9:10:97:86:ef:a1:0d:16:b6:08:cc:
         9d:a8:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:05:22 2025 by rpki-client