Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33332d3333203d3e20323733363631.roa
File:                     323830343a386135303a3a2f33332d3333203d3e20323733363631.roa (raw, json)
Hash identifier:          qrca0D1TlUJdIVAjeSy6LF0A6MRtQNdKCGanqjUJNXM=
Subject key identifier:   60:BD:4E:23:FA:B1:B9:2D:E9:3D:A1:C3:70:36:39:71:34:A8:A3:5D
Certificate issuer:       /CN=B937F473A95655C5D7B945095573D217C3A1DC11
Certificate serial:       1BCC2C0E9130C4514DD5053D102B1F2BDC12FDE0
Authority key identifier: B9:37:F4:73:A9:56:55:C5:D7:B9:45:09:55:73:D2:17:C3:A1:DC:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33332d3333203d3e20323733363631.roa
Signing time:             Tue 14 Oct 2025 10:56:41 +0000
ROA not before:           Tue 14 Oct 2025 10:51:41 +0000
ROA not after:            Tue 13 Oct 2026 10:56:41 +0000
asID:                     273661
IP address blocks:        2804:8a50::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.crl
                          rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 08:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:cc:2c:0e:91:30:c4:51:4d:d5:05:3d:10:2b:1f:2b:dc:12:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B937F473A95655C5D7B945095573D217C3A1DC11
        Validity
            Not Before: Oct 14 10:51:41 2025 GMT
            Not After : Oct 13 10:56:41 2026 GMT
        Subject: CN=60BD4E23FAB1B92DE93DA1C37036397134A8A35D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:c9:72:f0:b1:4f:2b:d6:b3:86:df:86:33:
                    9e:99:3c:c3:bc:a9:14:02:f3:54:26:41:9d:0e:e6:
                    09:f5:9b:1c:07:66:49:5e:8f:4e:4f:15:72:21:4b:
                    3d:dc:38:3d:d0:4e:04:49:ee:b0:6a:de:49:aa:98:
                    c8:54:cb:db:fd:39:84:49:93:8a:12:db:23:82:9c:
                    02:db:da:44:2f:82:89:7b:2d:bb:08:08:66:fc:03:
                    89:87:05:b4:0a:81:b5:1d:fe:c7:fc:6a:44:7a:c3:
                    38:9e:9e:ea:e8:4a:5c:af:61:8b:1e:a4:96:7c:7f:
                    62:45:17:87:d8:18:75:f1:fc:97:b6:62:a0:f7:25:
                    39:cb:be:55:aa:e8:ec:75:fc:54:b8:16:17:80:b9:
                    07:24:90:0d:44:8c:78:a9:1b:dc:a6:23:4e:36:be:
                    ee:d4:3d:6b:41:5c:50:bd:25:52:2d:b0:6b:0f:23:
                    17:1e:39:59:0f:6d:d7:c9:28:92:a1:60:cc:bb:7a:
                    52:b6:e7:c3:fb:65:7c:48:55:3b:52:9d:e8:48:83:
                    a6:5f:94:90:fe:c3:50:9e:8f:09:53:29:8f:89:18:
                    1b:9e:3c:33:c2:93:79:be:48:7d:8d:dd:c7:2c:28:
                    5c:c7:56:d6:a9:fa:0d:52:85:5e:2e:b1:bd:92:51:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BD:4E:23:FA:B1:B9:2D:E9:3D:A1:C3:70:36:39:71:34:A8:A3:5D
            X509v3 Authority Key Identifier:
                keyid:B9:37:F4:73:A9:56:55:C5:D7:B9:45:09:55:73:D2:17:C3:A1:DC:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33332d3333203d3e20323733363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a50::/33

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:27:1a:f8:00:7e:26:bd:d5:14:bc:ac:13:a6:b5:c5:76:
         a0:dd:6f:60:f4:b2:01:61:a9:4f:f5:8b:6e:67:60:d1:e8:a3:
         72:03:70:38:d1:3f:e5:d2:83:2f:f1:a1:32:c8:c4:32:26:85:
         93:fd:31:cb:c4:a3:59:db:b6:a6:8e:54:08:0f:26:4a:6e:31:
         b1:f4:28:e4:9d:66:e6:e7:df:85:d6:bd:2f:78:30:cf:50:f3:
         36:00:23:3b:bd:60:a4:6c:51:e0:14:72:bb:6a:46:58:df:cb:
         07:ee:a0:db:4f:88:e1:67:de:6c:e0:24:cc:9e:79:9a:fe:a8:
         a3:28:7e:11:23:f2:00:51:49:74:d9:48:eb:51:94:81:9b:37:
         62:82:38:bf:3d:cd:e3:92:8b:2a:82:9c:04:2e:74:e3:9b:10:
         b5:0f:78:9b:e2:3b:17:8e:6d:7f:73:ae:0f:fc:13:f9:71:c9:
         b4:d5:64:3b:41:57:36:a9:0a:19:8c:4b:b6:40:c2:ad:7e:e2:
         d1:f9:98:26:c8:90:03:c6:f6:3d:46:82:32:a1:ab:db:ff:7e:
         14:c7:29:c5:b9:79:ed:37:ce:cd:3e:2a:cd:b8:5a:eb:b2:d7:
         a1:b1:1a:d4:68:a1:83:e5:41:43:0d:7d:e5:4d:45:85:79:ba:
         ce:1c:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:22 2025 by rpki-client