Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33322d3336203d3e203631363138.roa
File:                     323830343a333736633a3a2f33322d3336203d3e203631363138.roa (raw, json)
Hash identifier:          sA2O8uiPk/s1EPSiPdzofX2q8DADpRoryw5dLYbynGM=
Subject key identifier:   E5:04:98:82:28:FF:DB:75:CF:7D:36:94:FC:9E:E1:C4:47:91:FA:AE
Certificate issuer:       /CN=749E21CDD000362F14CB5C6E5B975EFE08776886
Certificate serial:       566FC09BE984AB4C65643ED972744D0F09917ED5
Authority key identifier: 74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33322d3336203d3e203631363138.roa
Signing time:             Fri 26 Sep 2025 02:09:59 +0000
ROA not before:           Fri 26 Sep 2025 02:04:59 +0000
ROA not after:            Fri 25 Sep 2026 02:09:59 +0000
asID:                     61618
IP address blocks:        2804:376c::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl
                          rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6f:c0:9b:e9:84:ab:4c:65:64:3e:d9:72:74:4d:0f:09:91:7e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749E21CDD000362F14CB5C6E5B975EFE08776886
        Validity
            Not Before: Sep 26 02:04:59 2025 GMT
            Not After : Sep 25 02:09:59 2026 GMT
        Subject: CN=E504988228FFDB75CF7D3694FC9EE1C44791FAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:c5:95:42:4f:41:90:d9:17:c7:bb:91:d7:
                    f4:04:bf:cc:b1:76:84:46:13:ae:4c:d0:60:ea:6b:
                    0e:64:51:e6:fd:92:6c:e7:5f:f6:3c:d8:e9:56:a1:
                    7b:15:27:8d:04:9b:b4:dc:c2:5c:2c:2d:bd:51:a9:
                    98:20:98:5a:87:2f:d0:c8:fa:0d:93:45:bd:0e:30:
                    fa:fc:56:7c:81:71:d0:7b:35:36:51:a3:bd:44:ee:
                    44:02:86:3d:74:81:0e:c1:63:bb:30:87:e8:99:5f:
                    d2:0d:cb:eb:50:1f:81:f6:c3:e6:cf:56:b2:f3:43:
                    5f:ef:57:a0:55:17:64:c1:1a:e0:be:e8:75:1f:5e:
                    57:c3:dd:d7:eb:79:78:60:0e:e3:a9:e1:ee:4d:b5:
                    8c:7e:8a:3f:a7:79:42:0b:0d:30:00:60:d9:b7:f5:
                    70:72:91:f0:7b:51:cf:f2:51:60:31:c9:d9:85:cd:
                    08:21:e5:1c:f8:66:2a:65:b9:af:e0:03:dc:d7:f5:
                    89:86:e0:f2:fb:11:2d:ba:3e:e2:d7:22:68:a4:1e:
                    46:5d:df:b9:95:e9:4b:16:4c:1e:31:50:0f:44:74:
                    4a:2f:25:7c:41:af:27:c1:8a:41:b8:ce:e3:4c:5c:
                    dd:f3:e8:8d:07:2a:14:0f:1a:cd:28:a0:00:a5:04:
                    73:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:04:98:82:28:FF:DB:75:CF:7D:36:94:FC:9E:E1:C4:47:91:FA:AE
            X509v3 Authority Key Identifier:
                keyid:74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33322d3336203d3e203631363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:376c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:6d:1b:78:87:d8:44:3f:e6:13:08:18:4d:8a:a7:5d:40:85:
         ef:94:e1:8a:03:36:1c:25:c3:7d:a3:de:e6:ed:8a:70:14:df:
         6c:83:03:5d:1a:35:29:68:70:57:51:c7:88:ef:28:a9:a2:9d:
         f1:b9:f3:46:f6:50:4f:5f:dd:9b:a9:c6:2d:2d:88:98:85:49:
         14:70:c7:db:ee:f0:ed:93:ac:09:9d:64:f8:6f:58:01:15:7c:
         c9:74:01:82:e4:72:80:bb:0d:75:88:da:23:e8:40:64:4a:8c:
         1d:f1:2a:bf:ab:4c:2d:96:b6:2c:d3:28:c9:a0:31:dc:6d:c4:
         8e:2d:1b:e3:60:87:a5:01:53:5d:86:17:0a:5f:dd:32:84:3b:
         9e:61:d1:b4:b0:d0:82:41:8d:a4:d5:20:df:56:03:5e:8d:4f:
         4f:b8:50:13:c7:cb:4e:74:c4:c4:ca:53:2f:14:ea:f8:10:d0:
         1c:a5:c7:1c:3a:a9:fa:ed:f3:70:15:ec:ec:c8:26:a7:61:5e:
         d7:dd:c6:a2:ca:03:4e:31:f1:95:0c:a2:d0:d5:57:b5:61:ea:
         7e:48:de:26:ac:69:e6:4d:dd:d2:1a:47:f6:15:22:9d:65:c7:
         da:2f:cd:18:89:b8:b1:74:8e:89:af:23:8c:7e:4e:a0:ac:52:
         36:77:37:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:44:10 2025 by rpki-client