Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3a2f34302d3430203d3e20323638353933.roa
File:                     323830343a353339343a3a2f34302d3430203d3e20323638353933.roa (raw, json)
Hash identifier:          9Gru+EdSj6L9WBiHNPa9FvtzV2ieq8zcG1b4ZzUKNKg=
Subject key identifier:   2C:C6:75:52:C7:F9:46:59:06:C6:48:B7:DA:D8:6D:39:0B:56:BC:B9
Certificate issuer:       /CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
Certificate serial:       0E1B2D65FBC1350F2EE594BFCFCD90A65E01B40A
Authority key identifier: D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3a2f34302d3430203d3e20323638353933.roa
Signing time:             Tue 07 Oct 2025 00:53:24 +0000
ROA not before:           Tue 07 Oct 2025 00:48:24 +0000
ROA not after:            Tue 06 Oct 2026 00:53:24 +0000
asID:                     268593
IP address blocks:        2804:5394::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl
                          rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1b:2d:65:fb:c1:35:0f:2e:e5:94:bf:cf:cd:90:a6:5e:01:b4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
        Validity
            Not Before: Oct  7 00:48:24 2025 GMT
            Not After : Oct  6 00:53:24 2026 GMT
        Subject: CN=2CC67552C7F9465906C648B7DAD86D390B56BCB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8c:08:26:21:e1:6b:a9:74:2d:59:f4:3e:51:
                    eb:d1:60:9f:13:81:76:a9:bb:8a:67:30:6f:3a:4d:
                    3c:7b:38:20:d6:0a:b1:d5:4d:ed:b8:96:0c:b6:4b:
                    1c:24:09:eb:4a:e6:e3:0d:cd:fd:9c:13:df:c4:ac:
                    36:35:5a:41:ea:0b:1a:ec:5a:6b:88:86:de:4c:55:
                    42:69:d9:88:df:e7:db:23:a8:71:00:6d:8f:19:5c:
                    cb:fc:b2:f7:e9:35:63:85:cb:15:61:54:64:ba:7c:
                    25:48:a3:e9:42:ef:69:97:d4:8b:4d:9b:d8:4c:b5:
                    67:bb:8f:87:bc:a1:74:65:17:d0:c8:45:78:06:16:
                    f2:b0:78:b7:40:38:fa:a4:73:67:5a:dc:3f:f5:38:
                    f7:6a:3c:75:e7:93:61:ee:6d:33:95:91:61:eb:56:
                    85:09:51:d3:85:d7:00:1a:4e:ae:7c:ab:16:ca:7b:
                    b8:00:99:1c:da:25:a5:51:47:29:45:0a:af:3e:23:
                    c4:a3:0a:48:9c:d4:01:28:0d:55:3f:0e:8e:01:47:
                    b7:a1:6e:5e:8e:b7:8f:b1:aa:54:66:c9:2c:85:e0:
                    8f:7f:1a:a4:9c:db:86:fe:00:16:c2:34:2b:eb:61:
                    b0:91:ca:c2:72:fb:28:88:de:53:35:c1:41:9b:00:
                    80:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C6:75:52:C7:F9:46:59:06:C6:48:B7:DA:D8:6D:39:0B:56:BC:B9
            X509v3 Authority Key Identifier:
                keyid:D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3a2f34302d3430203d3e20323638353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5394::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:ca:03:03:cd:5e:f2:fb:37:49:66:c6:92:c6:13:e3:5c:8c:
         11:4e:b5:6f:fd:ca:35:cd:16:d7:f4:66:42:71:a2:49:42:05:
         0a:2b:ec:7b:10:c9:e1:e1:b2:63:6e:65:a8:9e:5d:c2:a1:bc:
         71:d8:4d:c3:54:71:cb:30:76:7b:38:27:77:83:cd:3b:76:18:
         5b:9c:7e:14:3e:46:68:34:4e:cc:7a:64:b9:07:8e:9d:38:ba:
         84:cc:c2:7a:c0:6e:6e:bf:9a:a7:f3:91:02:e8:1f:19:a2:c6:
         b4:8d:e5:86:3f:47:6c:b6:b2:30:15:d1:84:5d:50:34:02:18:
         cd:f1:ec:4c:6d:2b:d5:11:2c:a2:6a:be:1b:33:64:c7:31:0f:
         48:7d:40:29:23:d5:1d:df:ea:03:8e:31:0f:78:a0:ad:99:84:
         7d:23:3d:0e:65:63:2f:5e:55:09:27:e3:9a:5a:bc:cb:2a:00:
         33:18:46:db:ca:51:a1:c4:a1:ba:21:dc:3c:11:0b:fa:3f:7c:
         dc:7a:db:83:e2:cc:35:36:22:2e:c2:11:45:c4:c2:60:a9:d0:
         f0:b5:b5:5f:5f:74:e9:85:c4:c3:c7:b7:a7:2d:74:2d:06:74:
         11:c9:80:c9:fb:c2:dd:17:fd:dd:4a:c2:61:ad:2b:97:6d:97:
         0c:1e:6a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:02:19 2025 by rpki-client