Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a623030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a623030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          R95AnrAg+E5NgyIRBGKmjYv8v/trXBRcpD0sFNtjJXg=
Subject key identifier:   D5:FB:7A:15:C1:93:BD:7F:7B:6B:0F:1B:65:FA:14:1B:80:5F:13:B2
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       191FBF9EFA30778D6224ED9335C12D73732179AA
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a623030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:47:42 +0000
ROA not before:           Wed 22 Oct 2025 20:42:42 +0000
ROA not after:            Wed 21 Oct 2026 20:47:42 +0000
asID:                     262765
IP address blocks:        2804:1dfc:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1f:bf:9e:fa:30:77:8d:62:24:ed:93:35:c1:2d:73:73:21:79:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:42:42 2025 GMT
            Not After : Oct 21 20:47:42 2026 GMT
        Subject: CN=D5FB7A15C193BD7F7B6B0F1B65FA141B805F13B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1a:e6:e7:27:88:f5:71:3f:25:87:7e:cd:a9:
                    fc:15:be:56:bf:ee:df:fa:b8:31:c8:51:46:0b:fe:
                    4d:f2:7f:28:d7:81:79:da:73:ec:ae:a3:af:8e:e3:
                    9f:a5:df:af:bf:19:c5:d5:c4:d4:6d:f4:0f:28:95:
                    2f:78:f8:2c:6d:0d:f7:e6:0a:1d:4d:61:1c:2b:5c:
                    ba:55:da:f8:74:2c:43:b2:6f:63:58:85:00:3b:35:
                    72:e1:f3:87:a1:9d:9f:38:16:d7:7c:f2:65:7e:b9:
                    84:f4:e1:bb:4f:77:01:41:cf:c1:60:fe:2f:2a:30:
                    11:24:ad:cb:58:aa:33:6f:3f:42:4e:43:62:ae:03:
                    a4:c6:03:13:93:3d:ed:2b:a2:e4:9c:25:8d:0f:31:
                    5b:fc:1b:bf:03:ef:43:a6:25:42:e7:ef:c3:49:92:
                    3d:e6:d2:3e:56:b6:d3:2e:c0:65:a0:72:41:b3:c2:
                    ff:29:23:1c:5b:73:77:6b:aa:df:ac:91:84:a1:7a:
                    13:0f:cd:65:93:3f:8b:34:96:f1:22:6f:1b:d1:52:
                    28:98:2f:f9:12:f0:6e:02:ef:33:27:2f:3a:9a:a7:
                    36:fb:01:3b:70:5a:23:df:5d:04:c2:11:24:63:a4:
                    d4:d5:65:25:3e:fd:a0:2d:af:47:24:77:62:46:87:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FB:7A:15:C1:93:BD:7F:7B:6B:0F:1B:65:FA:14:1B:80:5F:13:B2
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a623030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3a:93:bf:06:87:17:bb:13:e5:6e:69:35:10:f0:f1:fc:ff:62:
         df:45:97:2a:e9:69:ca:ff:bf:ed:ee:b6:ac:53:fd:89:d5:9f:
         a4:0e:2f:9f:48:8b:ce:08:65:94:10:0f:4c:37:45:fe:f2:39:
         e8:c6:f5:8a:a9:cc:2b:b8:5b:29:ec:e8:41:1b:38:c1:fa:c4:
         e0:e3:f0:d4:0e:09:fc:f4:b4:ef:b6:bf:ef:0d:cb:00:4b:40:
         fd:9b:72:4d:a9:17:06:a0:a7:16:62:3f:bc:2c:50:8f:12:75:
         77:43:b0:44:6b:fa:2f:82:f3:67:ce:cf:33:8c:52:4a:35:2d:
         0f:8f:50:1c:b7:8d:f6:f9:aa:96:11:ef:db:b2:25:05:7a:19:
         06:36:4e:2e:53:45:56:d5:8e:7d:14:a7:c3:de:6a:fa:a6:2d:
         e8:bd:08:86:55:94:27:4d:93:b3:77:88:76:38:28:ed:58:e3:
         ec:29:31:c2:82:fa:25:bc:22:81:da:62:39:d3:25:58:9d:da:
         d2:63:d1:23:9e:b3:48:91:d3:ff:fa:1a:3b:5e:6d:4d:87:88:
         98:8f:e1:b0:a3:52:c6:e1:16:66:9f:e0:89:68:8c:50:10:a8:
         77:28:52:cc:c0:a6:5d:c4:fa:09:af:c2:d2:42:b7:67:3a:cb:
         a5:b1:50:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:35:31 2025 by rpki-client