Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a613030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a613030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          GCvmQARfaDIp7SsEFJbkJkSJfplMwRPZm/4v2Zvnkkg=
Subject key identifier:   D1:05:1A:13:0F:A8:68:FC:82:A6:C8:65:E4:A9:99:D1:3F:FF:50:42
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       5B128B843458D73CFC228BA304527EC4778B868D
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a613030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:47:40 +0000
ROA not before:           Wed 22 Oct 2025 20:42:40 +0000
ROA not after:            Wed 21 Oct 2026 20:47:40 +0000
asID:                     262765
IP address blocks:        2804:1dfc:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:12:8b:84:34:58:d7:3c:fc:22:8b:a3:04:52:7e:c4:77:8b:86:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:42:40 2025 GMT
            Not After : Oct 21 20:47:40 2026 GMT
        Subject: CN=D1051A130FA868FC82A6C865E4A999D13FFF5042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:fa:5d:4e:57:cd:9f:f8:6b:cd:ca:78:f9:
                    7a:ff:b3:97:b5:ae:f2:35:6b:ed:04:04:8c:f3:8f:
                    e4:f7:ff:74:ff:05:79:24:a9:56:32:2f:2a:3d:8d:
                    86:68:fa:54:ec:9c:4f:ff:be:70:44:06:be:64:9e:
                    f4:54:db:81:52:a1:92:1a:05:9b:0f:38:34:bb:e8:
                    2b:9b:e5:a3:8d:00:26:5b:69:1f:b8:4f:f7:50:87:
                    88:78:a4:a6:8e:be:0a:8c:8c:65:a3:5c:af:b1:e0:
                    4e:8e:08:70:7e:65:c2:5f:8a:92:33:34:19:0e:8f:
                    4c:d5:7e:34:ee:0a:84:56:61:70:9a:13:3d:ac:e9:
                    e2:8a:4e:67:7e:3f:be:36:21:43:f5:a4:d4:28:9e:
                    27:09:18:12:6d:e8:7a:60:2c:18:6f:77:9f:93:e6:
                    5f:2c:cb:0a:8e:40:be:78:f1:04:67:e3:b2:9b:b9:
                    33:31:aa:4e:bb:cd:fd:e6:26:93:2c:1a:1d:aa:2a:
                    5c:cc:7f:b0:f0:4d:00:16:a8:d4:4b:6e:2d:7b:52:
                    50:fb:49:4a:d0:6a:5c:a6:44:65:24:94:b7:fa:81:
                    34:5d:94:e4:fd:8f:03:4e:22:60:08:e9:c9:10:3d:
                    b6:c5:36:0b:c2:6e:bb:67:49:41:cb:9b:9b:f9:f1:
                    bc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:05:1A:13:0F:A8:68:FC:82:A6:C8:65:E4:A9:99:D1:3F:FF:50:42
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a613030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         93:80:1a:8e:c0:8e:03:86:7e:36:89:42:33:a9:9a:f3:9f:08:
         7a:19:da:90:73:92:75:59:f6:32:8c:4c:45:74:d7:be:01:f0:
         14:ca:08:a5:9f:26:52:3b:4a:d4:32:ce:2c:34:d0:d4:16:2d:
         36:d9:c9:df:4b:b1:71:0d:39:0f:0e:91:52:5f:51:43:20:6c:
         3b:98:0b:d9:d3:29:83:5d:c4:cb:12:95:6f:6a:54:d3:a6:8b:
         c0:a6:cf:7a:72:3d:1c:e3:91:d7:b5:4f:6a:2d:e2:4c:3b:1b:
         93:60:df:b6:1b:90:4b:54:43:f1:e2:f2:03:22:94:19:4b:76:
         c4:93:67:9e:89:79:c0:b9:36:7a:f2:ca:79:10:c4:b1:75:7f:
         6e:a2:fc:42:e8:d9:a4:f9:e1:62:82:77:42:31:f0:65:6e:99:
         3e:c9:fe:b0:f4:6d:48:c4:5d:7a:09:d0:fe:6e:a3:7c:33:98:
         39:dc:67:a6:20:b7:14:87:c6:aa:90:c8:a3:38:8d:41:5b:59:
         3f:25:48:a0:1d:be:a8:e0:23:70:01:8c:f4:a3:46:67:64:29:
         91:ee:db:5d:f9:80:82:7c:8b:0c:b5:39:4d:1a:7f:db:98:89:
         d6:cd:2d:c0:b2:bd:43:c2:aa:0e:92:80:9d:53:28:5f:95:99:
         2d:8f:e1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:35:31 2025 by rpki-client