Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/323830343a393461633a3a2f33322d313238203d3e20323734343733.roa
File:                     323830343a393461633a3a2f33322d313238203d3e20323734343733.roa (raw, json)
Hash identifier:          5dNt86QmNpkL+18z4Xw05SaIiYBHZoUuE6RI1tm97vQ=
Subject key identifier:   65:41:55:D1:76:23:D6:07:EC:98:D5:11:85:DD:C4:A1:3F:A9:76:29
Certificate issuer:       /CN=B7D297E891D0B38E9314260166E2A362DC625072
Certificate serial:       2FE12DE1B0361B791152984F82C6D72CCC8A640F
Authority key identifier: B7:D2:97:E8:91:D0:B3:8E:93:14:26:01:66:E2:A3:62:DC:62:50:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D297E891D0B38E9314260166E2A362DC625072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/323830343a393461633a3a2f33322d313238203d3e20323734343733.roa
Signing time:             Sat 20 Sep 2025 14:52:10 +0000
ROA not before:           Sat 20 Sep 2025 14:47:10 +0000
ROA not after:            Sat 19 Sep 2026 14:52:10 +0000
asID:                     274473
IP address blocks:        2804:94ac::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.crl
                          rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D297E891D0B38E9314260166E2A362DC625072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e1:2d:e1:b0:36:1b:79:11:52:98:4f:82:c6:d7:2c:cc:8a:64:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7D297E891D0B38E9314260166E2A362DC625072
        Validity
            Not Before: Sep 20 14:47:10 2025 GMT
            Not After : Sep 19 14:52:10 2026 GMT
        Subject: CN=654155D17623D607EC98D51185DDC4A13FA97629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:4e:b7:df:bf:8d:5d:58:e2:56:47:3d:63:
                    0c:2f:fb:22:09:67:6e:44:ea:ed:5c:73:b7:f2:b8:
                    a9:ae:a1:bd:89:9e:be:42:d7:1a:ae:68:7d:d1:54:
                    63:50:fd:23:70:26:a4:4f:83:9c:88:2e:d2:92:8e:
                    df:70:3b:a2:e3:20:55:a1:ac:b8:65:6e:31:1e:ea:
                    18:fc:af:e4:01:1f:50:52:c2:19:1e:5b:bd:b0:66:
                    99:94:61:13:20:48:79:a2:5d:54:6a:5e:de:41:51:
                    d4:4b:75:03:89:5a:48:dc:8b:8e:45:25:83:3e:38:
                    18:b6:40:a5:0e:e4:9f:85:ff:62:fd:e9:bf:d9:90:
                    e9:db:95:2c:25:86:61:21:01:9f:b9:cc:3c:f3:8c:
                    61:61:c3:28:f1:2c:95:4d:d7:69:25:89:7b:72:b1:
                    bb:32:28:38:03:6e:74:f1:07:fe:77:4e:0a:68:b5:
                    65:9d:f6:0a:69:b2:1b:d7:b5:60:28:65:2e:e1:d1:
                    cd:a0:e9:77:23:a6:97:76:e6:5d:a8:0a:b8:65:3f:
                    cf:a9:d5:0c:34:20:e9:d6:17:13:08:69:3b:ab:7d:
                    7e:c7:d1:d7:01:60:44:8d:bf:57:cf:c0:73:fe:3a:
                    a3:f8:c9:d3:04:6e:36:a9:d6:86:bb:88:86:2c:b2:
                    1a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:41:55:D1:76:23:D6:07:EC:98:D5:11:85:DD:C4:A1:3F:A9:76:29
            X509v3 Authority Key Identifier:
                keyid:B7:D2:97:E8:91:D0:B3:8E:93:14:26:01:66:E2:A3:62:DC:62:50:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D297E891D0B38E9314260166E2A362DC625072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/323830343a393461633a3a2f33322d313238203d3e20323734343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:94ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:8b:00:06:de:0d:4d:15:a8:83:4c:bc:66:3a:22:24:73:fe:
         20:d6:20:f2:01:79:08:50:f0:37:0f:9c:ab:fe:d7:fd:25:b4:
         bf:16:33:49:ac:b1:44:b3:cd:0e:05:d9:80:cf:85:91:c0:3d:
         2c:f5:45:7e:8c:ec:ae:40:28:63:4c:79:69:b9:7d:eb:ec:15:
         d2:5d:ab:fb:51:31:54:a8:d7:61:57:36:21:c2:c6:52:ae:b7:
         b1:6e:17:b5:97:16:f6:92:31:77:92:9e:c5:8b:f1:a1:15:6f:
         d4:d8:dc:0d:b9:17:27:50:84:56:16:12:ae:f5:67:ec:de:d9:
         51:a6:15:3c:ef:ac:4d:f8:7c:57:85:45:d6:25:d0:ca:3c:a3:
         7d:60:fa:b2:ae:1f:fc:dc:6a:1f:95:5f:0f:c5:e6:d6:84:01:
         48:64:07:4d:07:1a:d3:ec:f8:53:93:64:94:f8:cb:9a:48:ae:
         fe:93:63:a0:3b:6e:55:81:1d:e8:4f:44:b5:c2:a3:ea:50:ae:
         78:c0:37:b6:95:1f:99:b4:df:1c:f2:10:60:9f:c4:f7:4a:eb:
         cd:19:83:bb:d5:42:19:8b:9e:eb:b7:96:22:79:fd:6c:b9:86:
         dc:bd:ff:9d:57:5d:cd:4e:d6:6f:e4:69:5d:e1:54:18:aa:2a:
         63:d6:23:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:49 2025 by rpki-client