Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          1cGHWxaawvDe6HW1U9BbrQbgQNoAxNOOeJl8cBd/hn8=
Subject key identifier:   33:77:9A:33:F5:4C:4D:60:C0:D0:BA:94:4E:C9:93:5D:F6:C1:6F:29
Certificate issuer:       /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Certificate serial:       2E1ABE2CBDD9C2039E00DC6437CA7E2105B0FE04
Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Wed 01 Oct 2025 22:07:09 +0000
ROA not before:           Wed 01 Oct 2025 22:02:09 +0000
ROA not after:            Wed 30 Sep 2026 22:07:09 +0000
asID:                     264936
IP address blocks:        2804:3034:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 04:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1a:be:2c:bd:d9:c2:03:9e:00:dc:64:37:ca:7e:21:05:b0:fe:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
        Validity
            Not Before: Oct  1 22:02:09 2025 GMT
            Not After : Sep 30 22:07:09 2026 GMT
        Subject: CN=33779A33F54C4D60C0D0BA944EC9935DF6C16F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:c8:a6:ce:12:75:40:4d:d5:e2:ac:f8:22:
                    2b:86:5b:2d:26:2c:5b:6c:2a:85:1e:6e:6f:8e:ad:
                    b8:d5:08:1d:90:db:50:0d:50:9b:e8:d6:94:49:b2:
                    96:6a:0e:cc:de:41:0e:15:70:b5:a2:b8:ff:5f:a4:
                    23:7b:26:9a:09:d1:52:3d:94:a7:56:08:b0:41:72:
                    c7:b9:bc:62:eb:6d:25:0e:b3:3f:a9:ee:e2:5d:cc:
                    0e:04:fc:ff:90:1c:08:32:1e:4d:58:41:78:4e:19:
                    62:f6:01:e6:6f:e4:01:cd:fb:b5:4d:2c:79:94:4f:
                    a9:88:7d:db:6a:df:e3:e9:9a:f3:1c:cb:e8:60:9d:
                    3d:06:f4:f6:21:3f:d6:8f:40:44:ce:ce:31:4e:1b:
                    e7:82:c9:d4:89:bf:8c:d8:d7:17:39:d6:77:61:8a:
                    80:58:37:54:0c:81:ce:a4:af:51:2d:c9:e0:50:db:
                    a2:b1:ed:9d:37:a4:38:db:1f:b7:68:a4:0a:e1:1e:
                    dd:aa:c3:b9:ec:c7:a8:86:2c:cf:5d:ff:5d:02:cf:
                    be:71:a9:15:33:28:55:23:c8:96:a0:1e:b5:f8:5b:
                    27:4c:b7:c9:81:fe:8e:c7:19:ac:69:da:b0:a2:bb:
                    81:b0:a6:f8:b9:5c:87:a7:c6:d1:f3:a4:d0:bb:a8:
                    2d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:77:9A:33:F5:4C:4D:60:C0:D0:BA:94:4E:C9:93:5D:F6:C1:6F:29
            X509v3 Authority Key Identifier:
                keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:b9:e0:09:a0:e1:8c:a1:7a:56:fd:a0:6f:5e:83:30:c9:03:
         d8:40:a4:65:d9:b4:9b:6e:8f:47:ab:17:89:6d:85:a5:4f:82:
         eb:3a:19:9d:cf:0a:b9:64:98:9e:75:06:31:1b:c0:42:36:c9:
         25:ef:45:11:dc:e8:b0:d4:43:f8:43:b7:55:9c:fd:a5:c1:4d:
         0b:96:f9:0a:ad:d0:11:d3:26:f3:b1:ff:67:16:e4:08:27:da:
         35:c8:ff:2a:96:79:ed:cd:da:78:d1:f2:e7:48:a4:be:62:a2:
         17:ed:10:54:5b:b3:d4:22:ff:2b:6d:8d:46:43:64:2a:f5:c7:
         23:b6:73:04:38:b5:d7:9f:56:e6:ae:c4:e1:a6:28:d2:7d:71:
         56:2e:f2:d0:c8:82:49:8f:87:b7:a2:9b:3d:63:3d:8f:6f:83:
         f7:78:51:9f:ba:5c:00:94:e3:e1:a7:13:fe:ec:c6:d2:8f:60:
         7c:5e:af:70:2f:dd:31:cd:1e:6c:57:33:63:c2:4b:66:42:27:
         5b:ae:b5:be:81:19:02:eb:87:47:a8:0d:b8:d6:21:b2:eb:4a:
         e4:39:71:ae:c5:80:92:e8:e7:7b:38:97:20:d7:41:b1:1b:ee:
         81:c5:00:a0:26:1c:08:dd:79:37:e6:2c:2d:31:f9:3b:c0:cc:
         4e:e4:48:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:57:16 2025 by rpki-client