Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/323830343a383835383a363030303a3a2f33362d3336203d3e20323732373635.roa
File:                     323830343a383835383a363030303a3a2f33362d3336203d3e20323732373635.roa (raw, json)
Hash identifier:          qoPf5ImV2w8sICyl+ftcav9JsSQyKanNJnOrRfmzy28=
Subject key identifier:   83:F6:C3:B4:4F:06:4B:86:11:E6:A8:54:82:4A:98:4F:16:C1:DD:76
Certificate issuer:       /CN=4556575234FAB5B5EB40632FC9E93E2BF6A5A631
Certificate serial:       3E82D0CC0440A16AAFF1F4324DBF1D578EB47A5B
Authority key identifier: 45:56:57:52:34:FA:B5:B5:EB:40:63:2F:C9:E9:3E:2B:F6:A5:A6:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/323830343a383835383a363030303a3a2f33362d3336203d3e20323732373635.roa
Signing time:             Fri 19 Sep 2025 19:35:25 +0000
ROA not before:           Fri 19 Sep 2025 19:30:25 +0000
ROA not after:            Fri 18 Sep 2026 19:35:25 +0000
asID:                     272765
IP address blocks:        2804:8858:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.crl
                          rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 10:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:82:d0:cc:04:40:a1:6a:af:f1:f4:32:4d:bf:1d:57:8e:b4:7a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4556575234FAB5B5EB40632FC9E93E2BF6A5A631
        Validity
            Not Before: Sep 19 19:30:25 2025 GMT
            Not After : Sep 18 19:35:25 2026 GMT
        Subject: CN=83F6C3B44F064B8611E6A854824A984F16C1DD76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:64:bf:14:30:1a:23:6b:3c:db:fb:17:45:
                    c2:10:1b:61:fb:e6:7a:85:e7:3c:0e:a2:b6:fc:00:
                    c4:52:11:c9:29:c0:bd:e6:8c:e0:9f:2c:4e:98:34:
                    07:6e:95:94:2a:72:d0:ca:b2:0a:1d:95:33:aa:77:
                    1b:37:f6:01:de:7f:7b:97:57:7a:16:87:00:1c:98:
                    31:17:1a:7c:70:17:c5:0c:15:e9:26:73:f3:69:f3:
                    c3:ab:96:3c:14:f4:6d:db:c0:42:e1:70:f9:2f:aa:
                    cb:3b:aa:d8:93:b7:79:7a:94:06:df:50:50:ae:07:
                    27:13:d0:6a:00:18:9d:d7:aa:05:77:55:9c:59:ef:
                    86:30:de:bc:d0:c2:49:36:fc:3b:8d:9f:4a:14:cb:
                    4b:9b:a6:43:8c:89:8d:da:14:6c:8c:c1:b1:44:63:
                    5b:f0:77:0b:a4:3d:22:dc:86:47:17:d9:86:52:e8:
                    c3:b8:74:d4:9e:ef:da:1f:04:86:a9:48:fa:0d:ba:
                    c7:75:14:ac:9f:df:da:ea:db:95:f4:7a:71:55:e2:
                    5e:3d:e2:2d:20:a1:84:3a:79:19:be:1e:12:9c:24:
                    d6:a0:4e:e1:7d:45:70:6f:a8:ac:c2:59:17:80:da:
                    e9:8e:5f:2a:35:00:b1:9a:ee:6b:6e:1c:b2:99:0e:
                    26:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F6:C3:B4:4F:06:4B:86:11:E6:A8:54:82:4A:98:4F:16:C1:DD:76
            X509v3 Authority Key Identifier:
                keyid:45:56:57:52:34:FA:B5:B5:EB:40:63:2F:C9:E9:3E:2B:F6:A5:A6:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/323830343a383835383a363030303a3a2f33362d3336203d3e20323732373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8858:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:3b:c5:be:e4:06:ad:d3:16:4b:ba:00:db:16:33:b6:c1:
         d2:c5:90:65:2f:f3:d4:11:a8:19:69:bf:3e:5f:d5:54:0e:17:
         d3:56:fa:6e:2d:c1:89:62:4e:29:1d:17:56:b5:9d:c8:f3:3e:
         cb:25:80:52:31:9f:78:98:c2:f5:6a:81:1d:b6:6c:ef:21:f1:
         c9:59:d7:8e:08:d1:e6:0e:df:b2:2c:2f:67:52:d9:59:17:45:
         81:29:cb:51:13:a0:37:fa:3d:8d:67:cd:e3:05:6f:35:8b:90:
         e5:cf:92:49:9a:b7:1a:7a:8f:c9:63:01:fc:02:72:0e:00:fe:
         38:16:62:3c:dd:29:22:9a:39:de:2d:73:80:43:65:04:a8:a9:
         6f:30:94:55:0f:11:98:2d:90:4d:38:86:70:ff:f5:59:82:3e:
         0f:25:70:5f:b8:18:70:68:e3:d4:b9:2b:f4:6f:43:ce:01:8a:
         26:42:6e:41:b9:44:0a:c7:b8:e7:26:91:32:08:8a:e2:67:e8:
         55:01:70:43:61:1e:ff:0b:fc:37:8d:35:b7:12:8b:9b:48:e3:
         b4:46:e5:ec:25:fd:62:bb:e6:11:d9:00:ba:11:ac:e3:2c:d6:
         51:00:8b:89:fa:41:3a:6a:20:07:5c:ca:78:07:62:83:80:ba:
         5a:f1:0c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:47 2025 by rpki-client