Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa
File:                     323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa (raw, json)
Hash identifier:          z+3ohN7ys6qvVZHYtT1mUj5ysj5Np0arhMhZnrmaBdg=
Subject key identifier:   32:D9:16:28:FF:3A:F6:6A:E9:65:22:A0:54:65:61:E4:25:FC:9A:C1
Certificate issuer:       /CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
Certificate serial:       64A03D837B139CC4F0183DF2E9B11815EF86CDAC
Authority key identifier: DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa
Signing time:             Fri 12 Sep 2025 18:32:18 +0000
ROA not before:           Fri 12 Sep 2025 18:27:18 +0000
ROA not after:            Fri 11 Sep 2026 18:32:18 +0000
asID:                     268746
IP address blocks:        2804:5a10:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a0:3d:83:7b:13:9c:c4:f0:18:3d:f2:e9:b1:18:15:ef:86:cd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
        Validity
            Not Before: Sep 12 18:27:18 2025 GMT
            Not After : Sep 11 18:32:18 2026 GMT
        Subject: CN=32D91628FF3AF66AE96522A0546561E425FC9AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:2d:9c:98:16:9d:d8:1c:38:5f:ec:47:25:
                    46:9f:a3:4d:ab:cb:0d:01:ae:bb:fb:bc:64:fc:e8:
                    a7:11:af:da:6a:f1:4f:6a:12:23:82:84:7b:f6:d8:
                    dc:6b:ec:01:01:42:f6:fc:dd:6e:d7:3e:28:56:5e:
                    38:ba:67:06:23:c4:3c:20:34:a4:eb:2f:a8:04:63:
                    21:25:8e:0e:03:3b:63:af:d5:89:b6:1e:9e:f2:a1:
                    59:7a:ba:9d:bf:7b:74:ea:cc:86:40:1a:63:ad:8c:
                    ae:81:32:9f:3e:8c:82:cd:42:28:54:05:bd:cc:f7:
                    9e:7c:64:5d:dd:20:b5:e6:7f:08:1b:cc:45:73:7a:
                    fe:50:52:7d:80:2c:54:62:be:95:3c:db:47:c5:5c:
                    df:58:c4:5e:75:ed:02:7d:c9:7a:0e:94:6c:ea:98:
                    a7:84:a5:71:55:ab:77:25:fc:30:ee:ef:e7:b3:f7:
                    a3:93:4d:1e:fc:06:58:76:ed:2e:60:40:8d:08:f6:
                    b6:a8:55:f4:24:6b:db:4e:f0:5e:a1:02:42:13:04:
                    e5:43:57:23:16:57:bb:6e:3c:01:9f:4a:10:52:21:
                    8d:91:14:b2:79:f9:28:7f:5b:78:bc:6e:46:a5:e8:
                    36:0f:5d:38:f6:2b:0d:df:8f:0a:d7:91:fd:da:2e:
                    fa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D9:16:28:FF:3A:F6:6A:E9:65:22:A0:54:65:61:E4:25:FC:9A:C1
            X509v3 Authority Key Identifier:
                keyid:DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         50:8f:de:7a:b1:90:69:eb:9f:3e:75:6f:9d:03:c9:62:79:1b:
         7c:a0:b0:96:f6:be:43:b4:42:b0:b3:45:49:92:f8:bf:11:55:
         cc:39:c0:96:af:4f:22:3a:eb:c0:6f:cc:2e:91:53:79:18:b5:
         53:9d:b5:6f:33:82:7f:b3:58:c6:9d:46:e4:1a:9c:37:ca:20:
         bf:93:ad:19:0a:14:e3:fc:d6:f6:e1:61:3d:7e:01:d7:3a:c0:
         f5:f1:35:cf:35:34:fd:6a:1e:d8:be:ef:7f:bd:5e:6b:2f:c8:
         23:56:16:27:84:2b:55:07:8d:77:70:36:f9:aa:91:a9:60:f6:
         11:4e:ab:03:eb:75:78:82:1d:95:46:6c:4c:35:93:58:01:91:
         ee:ab:39:49:7d:75:78:79:67:cb:a8:f1:eb:1a:73:75:c3:00:
         bc:6d:e1:25:ff:78:9a:90:3e:d3:9a:25:85:2a:f0:b5:bb:71:
         ab:9e:91:f2:09:cf:7e:3b:47:0a:72:4e:1f:5d:30:34:d3:fa:
         17:55:60:b0:c7:64:d0:1e:6c:52:c0:cb:d8:e9:ce:51:a9:40:
         34:35:e9:3c:18:96:9f:a9:20:9f:47:30:87:45:77:ff:fb:3d:
         a5:d0:5b:23:45:39:86:ce:a9:2f:a3:8f:1d:2b:6f:77:42:a3:
         32:11:5c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:58:05 2025 by rpki-client