Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/323830343a333735633a3a2f33322d3634203d3e20323636343036.roa
File:                     323830343a333735633a3a2f33322d3634203d3e20323636343036.roa (raw, json)
Hash identifier:          Fe7sEDWBsrLrEVuMCHG2ckURBqt7OAhjltK4GTLzhCQ=
Subject key identifier:   9B:C7:6A:6A:78:F9:30:3E:AC:BB:6F:C9:32:FD:3F:26:0D:DE:62:C9
Certificate issuer:       /CN=CB91FE18915AE687D903BB2899406C36F9DB163E
Certificate serial:       60DDE79B42562A605EDD12205043E895A11792D7
Authority key identifier: CB:91:FE:18:91:5A:E6:87:D9:03:BB:28:99:40:6C:36:F9:DB:16:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB91FE18915AE687D903BB2899406C36F9DB163E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/323830343a333735633a3a2f33322d3634203d3e20323636343036.roa
Signing time:             Tue 07 Oct 2025 18:35:03 +0000
ROA not before:           Tue 07 Oct 2025 18:30:03 +0000
ROA not after:            Tue 06 Oct 2026 18:35:03 +0000
asID:                     266406
IP address blocks:        2804:375c::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.crl
                          rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB91FE18915AE687D903BB2899406C36F9DB163E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 21:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:dd:e7:9b:42:56:2a:60:5e:dd:12:20:50:43:e8:95:a1:17:92:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB91FE18915AE687D903BB2899406C36F9DB163E
        Validity
            Not Before: Oct  7 18:30:03 2025 GMT
            Not After : Oct  6 18:35:03 2026 GMT
        Subject: CN=9BC76A6A78F9303EACBB6FC932FD3F260DDE62C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:96:a1:7e:92:be:d1:63:9b:cc:9f:ba:ed:
                    dd:3e:d3:e6:e0:d5:32:60:aa:8d:a8:e9:30:9c:72:
                    59:1c:42:9d:6a:f6:7e:0e:d8:7c:7f:c8:75:ad:13:
                    1a:56:30:62:38:76:5a:bc:04:7a:b5:22:12:33:fb:
                    05:98:f0:59:37:48:35:13:06:8c:27:bf:2e:02:64:
                    68:66:0f:11:e2:13:1f:6f:51:86:84:f2:25:f4:36:
                    c0:f8:6d:f8:6f:db:7c:d6:be:cd:fd:5e:3a:9d:9d:
                    96:9b:94:b1:50:ee:bf:88:82:bf:3c:e2:ce:a7:e9:
                    ee:df:07:c7:9c:e6:3f:dd:cd:61:ac:aa:8b:13:4e:
                    55:8d:aa:20:21:94:e3:6a:7b:f7:40:41:bf:1b:24:
                    a3:81:38:8d:90:c6:59:98:0c:e8:43:d4:2e:8f:e0:
                    70:57:73:b6:32:16:eb:19:90:8d:1f:37:dc:a2:65:
                    cf:df:0d:1a:18:f7:48:6a:be:da:23:0f:ae:81:ae:
                    a0:5a:b0:3e:02:3b:5d:d2:8e:15:d4:ba:0e:22:3f:
                    94:ad:83:d0:dd:fc:24:db:cc:e8:ba:71:b8:6d:02:
                    ed:aa:bf:dc:2c:2f:53:1c:4f:a6:3d:47:12:92:07:
                    40:af:61:ac:49:97:2b:24:ce:70:f9:10:6f:f7:86:
                    72:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C7:6A:6A:78:F9:30:3E:AC:BB:6F:C9:32:FD:3F:26:0D:DE:62:C9
            X509v3 Authority Key Identifier:
                keyid:CB:91:FE:18:91:5A:E6:87:D9:03:BB:28:99:40:6C:36:F9:DB:16:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB91FE18915AE687D903BB2899406C36F9DB163E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/323830343a333735633a3a2f33322d3634203d3e20323636343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:375c::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:86:2a:fa:1b:77:3a:34:f2:96:0a:0b:eb:4f:ab:54:d0:12:
         aa:f5:b5:d2:10:2f:31:28:4f:dc:d0:e9:e2:10:67:28:a3:56:
         e1:89:9e:66:de:4b:d1:2a:38:47:20:89:0e:79:69:90:34:ab:
         f4:bf:42:a8:2e:0a:66:df:08:7a:1d:01:9c:2b:0f:b3:63:61:
         98:b5:81:cb:21:bf:07:12:a0:b5:8d:fb:87:a8:59:5a:64:66:
         e9:6e:ef:1e:78:7c:23:04:73:08:24:cf:06:dc:3e:6c:0e:d9:
         46:a2:29:d8:a8:5c:08:3f:82:fd:4c:91:ca:be:1b:32:07:e2:
         32:85:fc:45:62:c6:e9:43:60:f5:e4:ac:2c:d2:c5:f1:03:c1:
         50:d4:c0:76:ca:6d:bd:88:3a:58:6e:28:49:d0:31:7a:e7:51:
         ec:68:34:d0:50:2e:92:10:d4:32:ed:fd:b5:5c:b2:da:00:c0:
         27:25:70:79:73:42:72:b5:e3:af:ea:e3:73:73:3a:12:07:b5:
         65:01:30:df:91:6b:ea:a3:f1:4b:db:18:43:1a:5b:dd:87:d9:
         20:a9:3f:d7:d5:4d:6c:51:4c:b1:08:b9:96:6b:e6:dd:81:b5:
         65:9a:2a:53:20:a6:f5:58:f5:74:84:fc:85:9b:94:f9:83:c0:
         55:d7:2b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:50:19 2025 by rpki-client