Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a3130303a3a2f34302d3430203d3e20323733333339.roa
File:                     323830343a386432383a3130303a3a2f34302d3430203d3e20323733333339.roa (raw, json)
Hash identifier:          gsSdZtR/65gQqeeCexsJDN5ZfOYTwdh6b+vxLWP1T9k=
Subject key identifier:   41:F4:F1:45:E0:65:64:26:1B:58:08:F1:3C:2D:7F:75:AC:B4:20:58
Certificate issuer:       /CN=A7C3FCD410E53CBCF7F64DC367269EF9625997A7
Certificate serial:       4C54B909F277ADCBF786D1F532EED03FFAC09E06
Authority key identifier: A7:C3:FC:D4:10:E5:3C:BC:F7:F6:4D:C3:67:26:9E:F9:62:59:97:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a3130303a3a2f34302d3430203d3e20323733333339.roa
Signing time:             Fri 05 Sep 2025 16:32:40 +0000
ROA not before:           Fri 05 Sep 2025 16:27:40 +0000
ROA not after:            Fri 04 Sep 2026 16:32:40 +0000
asID:                     273339
IP address blocks:        2804:8d28:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.crl
                          rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:54:b9:09:f2:77:ad:cb:f7:86:d1:f5:32:ee:d0:3f:fa:c0:9e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C3FCD410E53CBCF7F64DC367269EF9625997A7
        Validity
            Not Before: Sep  5 16:27:40 2025 GMT
            Not After : Sep  4 16:32:40 2026 GMT
        Subject: CN=41F4F145E06564261B5808F13C2D7F75ACB42058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:eb:7c:16:59:df:e5:84:1a:f0:c1:52:43:
                    55:ac:15:cc:3e:19:95:6a:9f:6c:30:27:90:33:49:
                    da:d3:cc:b8:77:1b:79:fd:ae:67:db:61:91:17:e3:
                    8c:20:9f:00:c2:42:cf:c7:e5:e7:83:89:50:19:5a:
                    c2:3a:e6:91:7c:fb:bd:f6:4b:9a:b6:60:7a:c8:0e:
                    22:a0:19:72:93:c5:d9:b9:ce:50:ba:f1:82:3e:b9:
                    4f:f8:1e:92:7c:f5:70:31:2f:00:40:94:af:aa:d6:
                    af:50:5b:6f:17:83:0e:18:3b:3d:c4:11:1c:0b:1d:
                    6b:cc:66:c7:b7:5d:92:59:d0:3a:f4:2a:ed:ec:b8:
                    e0:8d:ef:55:2a:7e:ca:f2:db:6f:af:89:e6:9b:62:
                    be:97:cd:62:7f:c5:19:46:e2:be:cc:35:0f:7d:62:
                    39:f5:43:38:b0:5a:bb:b7:d8:41:10:96:4f:25:5a:
                    86:99:1c:e8:64:91:9e:9d:79:47:b6:ea:6a:51:3a:
                    74:c7:69:97:be:26:2e:e8:46:0a:82:4a:20:97:cf:
                    30:18:8b:f9:81:7f:d8:9d:7f:38:f4:51:33:93:70:
                    e6:c3:39:82:98:9b:13:b3:3b:d1:a2:34:12:fd:be:
                    59:1f:3c:5c:d5:37:9c:ec:48:85:ab:59:af:9f:1a:
                    24:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F4:F1:45:E0:65:64:26:1B:58:08:F1:3C:2D:7F:75:AC:B4:20:58
            X509v3 Authority Key Identifier:
                keyid:A7:C3:FC:D4:10:E5:3C:BC:F7:F6:4D:C3:67:26:9E:F9:62:59:97:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a3130303a3a2f34302d3430203d3e20323733333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d28:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:9b:a2:4e:78:2e:0a:3d:39:62:79:ee:f6:e9:c8:60:b4:10:
         28:f5:1e:0e:d1:79:21:1d:50:95:3f:ad:fd:59:6f:bb:fa:f2:
         23:9c:e3:e8:a1:71:4a:55:f4:7b:e1:c5:74:10:32:8a:b4:49:
         c8:1c:f9:0d:38:94:e1:8f:ff:03:0b:e3:8d:34:6b:5a:84:eb:
         71:5b:76:9c:b9:ba:25:5a:20:49:64:14:76:56:9d:de:a1:57:
         24:14:59:f8:5f:ee:8c:fc:6c:fd:95:ba:d9:fc:d7:3a:8a:2d:
         df:ce:e5:39:0d:0a:df:20:2f:8d:c0:9f:ba:b5:76:ea:d1:eb:
         5d:bf:f0:7b:51:75:7e:ca:35:38:77:34:98:cc:31:34:56:ab:
         22:db:fe:5e:b6:d2:9b:2e:45:71:37:4c:e2:33:ec:44:40:26:
         0c:ca:03:a5:54:d5:8f:5b:7f:2f:e1:63:67:c7:c9:64:74:63:
         65:80:08:6c:18:03:b8:f2:be:b5:e5:12:ba:7f:46:de:86:34:
         1e:8b:46:7d:49:d6:c2:77:0b:f1:34:fd:58:99:07:18:2e:b4:
         8d:52:87:55:9a:16:15:c8:c6:70:24:5a:c9:df:6f:8e:9a:96:
         f8:f2:00:96:7c:93:2b:2f:f9:5a:ab:5d:23:6d:92:51:30:e8:
         a2:ff:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:30:19 2025 by rpki-client