Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/323830343a333562343a383030303a3a2f33332d3333203d3e20323636333031.roa
File:                     323830343a333562343a383030303a3a2f33332d3333203d3e20323636333031.roa (raw, json)
Hash identifier:          +SekwnaF8Z8VNiw/bxIAx0D+htU6TFvmgAbmZjG5s3E=
Subject key identifier:   95:7C:3A:4A:30:1A:BB:B2:BB:FC:48:8D:ED:7F:24:44:90:2F:57:A9
Certificate issuer:       /CN=774CB762631C4ECCE6178AC72CD05509DDA606A3
Certificate serial:       12F441814036C0DA1C007B907545A5D7AE9A0EB9
Authority key identifier: 77:4C:B7:62:63:1C:4E:CC:E6:17:8A:C7:2C:D0:55:09:DD:A6:06:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/323830343a333562343a383030303a3a2f33332d3333203d3e20323636333031.roa
Signing time:             Wed 08 Oct 2025 19:30:15 +0000
ROA not before:           Wed 08 Oct 2025 19:25:15 +0000
ROA not after:            Wed 07 Oct 2026 19:30:15 +0000
asID:                     266301
IP address blocks:        2804:35b4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.crl
                          rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f4:41:81:40:36:c0:da:1c:00:7b:90:75:45:a5:d7:ae:9a:0e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=774CB762631C4ECCE6178AC72CD05509DDA606A3
        Validity
            Not Before: Oct  8 19:25:15 2025 GMT
            Not After : Oct  7 19:30:15 2026 GMT
        Subject: CN=957C3A4A301ABBB2BBFC488DED7F2444902F57A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:05:d5:25:cd:e5:83:bd:7c:54:06:51:3f:
                    8b:92:2c:86:a9:04:f3:69:ef:35:da:ec:78:be:0e:
                    1b:1e:59:13:76:2b:04:b1:d3:bc:01:2b:9c:3f:35:
                    aa:6d:a7:e3:9e:22:67:57:54:dc:0b:9a:db:00:da:
                    f9:68:f0:0f:57:2f:97:2e:0a:3d:4c:df:6c:08:9f:
                    32:32:ff:d1:4a:79:2f:c8:61:4d:f2:63:4c:15:de:
                    91:c2:85:02:0f:e9:25:3d:ca:01:f0:a7:cd:5c:39:
                    0c:c5:0a:ec:6c:1a:4b:a1:67:fd:9f:7e:97:e5:6a:
                    9a:9b:f2:a5:41:cc:b8:9a:00:d5:e0:a3:95:74:f9:
                    1b:cc:ef:3e:eb:fd:65:e5:9a:ef:00:41:b6:17:79:
                    32:eb:1a:21:69:e0:c1:ed:67:ed:bb:f1:cd:4c:0a:
                    f3:dd:b9:56:a1:7f:2a:20:f6:df:88:b5:78:8b:bc:
                    1e:c3:37:b0:9d:74:15:86:dc:31:89:cc:8b:5e:46:
                    5d:1c:0c:46:74:20:8e:7d:37:ff:39:86:b4:10:1c:
                    18:4e:27:a8:39:17:48:ac:6c:3d:7c:4c:d3:5b:af:
                    68:ed:04:f4:03:d0:de:65:68:fe:31:b5:4a:21:de:
                    03:f3:a2:a9:84:38:3b:b2:4e:b1:bc:a6:01:96:97:
                    f3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7C:3A:4A:30:1A:BB:B2:BB:FC:48:8D:ED:7F:24:44:90:2F:57:A9
            X509v3 Authority Key Identifier:
                keyid:77:4C:B7:62:63:1C:4E:CC:E6:17:8A:C7:2C:D0:55:09:DD:A6:06:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/323830343a333562343a383030303a3a2f33332d3333203d3e20323636333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35b4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         31:89:8d:63:35:e8:d8:4e:cc:6e:65:6b:f3:be:e1:42:ba:8a:
         ef:15:57:b9:85:b1:f6:88:41:ab:e0:98:cd:6a:bf:a1:22:52:
         be:d5:10:5e:75:dd:48:47:e1:f4:c5:ff:d2:50:56:b1:a0:c1:
         3d:67:a4:0c:d5:92:e1:b0:e9:9a:cd:ee:08:f5:d1:9b:0e:26:
         92:a7:96:06:4d:64:c1:94:b7:f8:5c:de:d8:f1:99:1d:70:a0:
         53:79:87:3f:f6:52:ca:4f:28:98:c7:86:c3:e2:5c:e8:1d:05:
         dd:9b:84:e5:f6:71:37:a8:23:00:85:01:b6:c6:d5:40:24:3a:
         44:ed:b3:76:10:a7:1b:66:e5:19:d9:0c:d4:d1:ef:f7:67:d2:
         88:a9:fa:9b:a9:5b:f5:4c:9f:89:a2:1b:0a:24:f2:39:b2:41:
         06:64:5d:7f:0b:ea:69:3d:06:50:76:85:2e:88:0d:ce:d9:a6:
         2e:1f:58:1d:00:b0:5e:a9:b5:26:e7:5f:07:6e:64:0e:d5:5e:
         de:77:23:ed:7b:17:ac:fe:a8:c5:69:ec:18:1d:19:ba:11:72:
         bd:1c:52:65:0f:c3:0e:df:e0:cb:2f:04:3b:5b:eb:4d:3f:b7:
         38:95:e6:1c:68:0a:5a:08:d1:53:14:f1:d5:bc:e5:0c:f6:ef:
         bf:eb:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:59 2025 by rpki-client