Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/323830343a346666343a3a2f33322d3334203d3e20323638333630.roa
File:                     323830343a346666343a3a2f33322d3334203d3e20323638333630.roa (raw, json)
Hash identifier:          XL4sQ/E69UhM7bUUBs4z1t4weIyyo5eCk8gnev1CJJA=
Subject key identifier:   43:FF:3A:92:D3:81:3C:20:F9:E5:04:AF:5E:A7:60:59:E6:9B:BE:84
Certificate issuer:       /CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
Certificate serial:       072919949854092138C2BB417A4B2DD5E72D9520
Authority key identifier: 22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/323830343a346666343a3a2f33322d3334203d3e20323638333630.roa
Signing time:             Wed 15 Oct 2025 13:46:39 +0000
ROA not before:           Wed 15 Oct 2025 13:41:39 +0000
ROA not after:            Wed 14 Oct 2026 13:46:39 +0000
asID:                     268360
IP address blocks:        2804:4ff4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl
                          rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:29:19:94:98:54:09:21:38:c2:bb:41:7a:4b:2d:d5:e7:2d:95:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
        Validity
            Not Before: Oct 15 13:41:39 2025 GMT
            Not After : Oct 14 13:46:39 2026 GMT
        Subject: CN=43FF3A92D3813C20F9E504AF5EA76059E69BBE84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7a:7b:8d:aa:d5:4f:ae:a8:9e:08:9c:5d:3d:
                    3c:40:01:4a:8a:de:56:e4:cb:1f:04:8b:c0:b2:46:
                    5d:1c:bc:ee:ef:92:95:51:54:45:b4:d1:88:43:8d:
                    46:16:c6:29:f1:17:d4:eb:c4:20:28:84:b0:12:64:
                    d5:1c:13:cb:69:83:78:5d:e5:bf:99:4d:ec:dc:56:
                    6e:7d:76:53:79:cf:20:64:83:8a:88:c4:f8:53:cd:
                    ca:87:f7:c2:34:8d:4d:35:84:3b:58:15:06:0b:7c:
                    af:f6:f8:98:27:c0:af:29:24:6e:86:5b:ae:89:cc:
                    39:45:17:5e:25:c0:ec:e5:53:84:5f:26:3e:17:c7:
                    35:12:a5:48:83:d1:56:59:0b:06:8a:ea:ef:db:ad:
                    70:37:bc:19:46:aa:a7:3d:fc:60:8f:03:f1:e9:8a:
                    74:58:ea:d3:63:0b:d9:9e:96:c2:67:a7:46:1f:25:
                    ff:d2:12:bc:3e:78:46:69:44:ae:40:12:f3:6a:af:
                    8c:e8:4e:f0:3b:ac:46:a9:b3:63:fa:da:2a:45:f3:
                    0a:d7:3c:56:2a:fa:02:fb:f0:ee:ac:e6:5e:66:8c:
                    3b:30:e5:bd:a9:e5:ac:f3:39:ee:13:a4:d8:db:ae:
                    66:23:51:57:4f:cc:08:95:5e:2d:94:27:5d:24:e2:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FF:3A:92:D3:81:3C:20:F9:E5:04:AF:5E:A7:60:59:E6:9B:BE:84
            X509v3 Authority Key Identifier:
                keyid:22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/323830343a346666343a3a2f33322d3334203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ff4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:5c:e6:43:a9:47:54:66:e9:b3:ed:0c:c9:52:60:d0:d1:ca:
         74:31:bd:32:cc:b7:5f:51:2f:e4:52:95:5f:77:b9:c0:01:48:
         4c:11:29:dd:56:c6:e1:48:e8:da:28:6c:12:99:77:16:d2:16:
         ca:f3:ef:07:7b:5f:fc:65:2e:dc:2e:8a:c8:f6:6b:43:bd:f1:
         75:0c:8f:69:74:04:57:19:b3:07:03:5d:9f:86:fd:49:20:73:
         4b:0f:bc:f4:f7:8d:96:69:7a:88:c9:8e:6f:39:7c:7a:93:c5:
         0f:f8:db:66:ae:9c:3a:68:2c:b4:65:48:45:27:fa:0f:ce:ef:
         96:65:ec:e4:3c:60:45:0c:f7:23:84:9a:6c:a6:a9:05:54:50:
         d1:7e:72:41:35:5b:65:d7:b9:45:59:aa:8f:81:2e:f3:f9:61:
         d4:b7:07:a8:1f:bb:55:1b:81:13:a7:00:19:e1:3f:8d:45:da:
         9c:61:b7:83:01:eb:cb:e0:57:c5:29:76:66:87:68:40:7e:65:
         58:f9:12:52:3e:d6:58:d3:70:30:07:90:94:01:48:8b:1d:1b:
         36:c7:72:28:3c:11:ad:68:96:cb:20:49:0d:79:ff:cd:88:76:
         ed:b8:0e:a5:e3:50:02:78:5e:0c:93:42:c0:13:98:32:7b:15:
         4d:cd:71:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:03:32 2025 by rpki-client