Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/323830343a313032633a3a2f33322d3438203d3e20323633363233.roa
File:                     323830343a313032633a3a2f33322d3438203d3e20323633363233.roa (raw, json)
Hash identifier:          3Ghujwd9UJr9rmn+1oBjDbpHtaxE8dNt1tzIlqfBhgM=
Subject key identifier:   DD:9C:EB:36:C7:78:1F:5D:41:98:15:EC:B6:2D:AE:AF:68:37:46:C8
Certificate issuer:       /CN=3D4519C7769E089F7D05327003C6A50E92B8C0B8
Certificate serial:       32C9626E9A78ADF3B2B023BF9DA281FC71BD1D3E
Authority key identifier: 3D:45:19:C7:76:9E:08:9F:7D:05:32:70:03:C6:A5:0E:92:B8:C0:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/323830343a313032633a3a2f33322d3438203d3e20323633363233.roa
Signing time:             Mon 13 Oct 2025 14:35:59 +0000
ROA not before:           Mon 13 Oct 2025 14:30:59 +0000
ROA not after:            Mon 12 Oct 2026 14:35:59 +0000
asID:                     263623
IP address blocks:        2804:102c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl
                          rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c9:62:6e:9a:78:ad:f3:b2:b0:23:bf:9d:a2:81:fc:71:bd:1d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4519C7769E089F7D05327003C6A50E92B8C0B8
        Validity
            Not Before: Oct 13 14:30:59 2025 GMT
            Not After : Oct 12 14:35:59 2026 GMT
        Subject: CN=DD9CEB36C7781F5D419815ECB62DAEAF683746C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:ca:09:07:e4:58:88:c4:18:ad:b7:83:56:
                    4c:b3:fc:be:89:c0:f6:56:9d:47:6f:1b:42:7e:26:
                    36:66:7b:02:1c:da:e0:66:09:61:5c:56:07:a4:e9:
                    09:b5:85:9f:45:56:13:5a:91:ef:63:6d:98:56:d1:
                    6d:23:25:82:09:b7:78:63:6d:73:62:c2:51:ec:8e:
                    a0:56:3e:73:f8:8a:7a:f0:48:d1:79:10:81:10:e3:
                    c2:e5:76:58:fe:d9:20:b9:72:5f:ee:ad:82:9a:95:
                    6b:17:de:cc:69:0c:67:98:10:57:bd:11:7e:c0:f4:
                    12:db:fd:61:d6:a6:eb:ac:61:1d:38:dc:c1:5c:2c:
                    4b:ea:70:f4:4d:fb:a0:d0:b1:a1:0e:70:df:11:d6:
                    f1:4f:a5:29:42:06:af:d0:ff:b7:5e:24:85:39:60:
                    30:42:38:48:32:21:bd:1c:4c:e9:65:37:91:03:8f:
                    7d:3a:68:fd:5e:39:01:a0:a4:8e:94:c7:3f:58:d7:
                    04:47:c3:3a:53:81:10:6e:58:63:18:6d:47:40:5c:
                    a8:3c:e1:53:f8:19:c0:20:67:91:3a:50:d0:8b:83:
                    df:bf:fa:8c:62:f9:44:5b:2d:bb:92:67:8a:4c:94:
                    e1:79:0d:cc:b0:6e:de:d4:01:11:49:e9:7d:5c:9a:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9C:EB:36:C7:78:1F:5D:41:98:15:EC:B6:2D:AE:AF:68:37:46:C8
            X509v3 Authority Key Identifier:
                keyid:3D:45:19:C7:76:9E:08:9F:7D:05:32:70:03:C6:A5:0E:92:B8:C0:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/323830343a313032633a3a2f33322d3438203d3e20323633363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:102c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:6a:ba:bd:c2:27:7f:3c:f4:ee:45:26:53:cc:b8:6b:76:a4:
         e6:3a:83:95:d8:14:ed:20:70:c0:74:a2:a0:da:7f:ef:16:68:
         cc:2d:73:d7:a9:ad:69:79:b8:89:68:35:91:35:c0:8e:ee:8b:
         2c:b3:d0:7c:8a:8b:15:34:9d:a4:b4:59:78:50:9b:c5:89:d0:
         59:0c:63:1e:1f:a2:07:54:21:9d:a0:75:0d:05:5d:00:a8:54:
         38:b9:d1:71:4c:ac:5b:6f:35:bc:dc:76:d5:10:ce:15:50:3a:
         26:fa:9d:70:1f:c0:62:55:50:da:b9:59:21:60:43:59:01:40:
         66:42:5d:05:50:e1:e1:29:40:d7:f6:9d:c7:49:ae:18:fd:6c:
         fa:c9:f2:b8:a0:b4:e1:10:73:92:27:05:f8:02:e2:61:4f:cc:
         a9:76:85:db:32:80:30:71:3d:37:a1:3f:29:96:14:11:ce:68:
         ee:60:c5:87:35:00:3f:2e:cc:9e:e1:8f:ad:28:4a:80:bf:96:
         b6:1a:bb:fc:97:ca:de:df:0a:f3:e0:03:a6:e9:67:fa:52:fb:
         c5:ed:77:63:76:56:1e:08:e5:30:4a:ac:d4:48:d3:4e:91:f7:
         fc:04:13:6a:11:80:ee:b3:18:d0:2e:78:bd:ba:83:8f:5e:6c:
         d2:24:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:26:40 2025 by rpki-client