Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/323830343a343535343a3a2f33322d313238203d3e20323636393139.roa
File:                     323830343a343535343a3a2f33322d313238203d3e20323636393139.roa (raw, json)
Hash identifier:          4tAaveoCXdDcpHp2LFl8RU4V7u4EaA1z6K9jhZ1hLbU=
Subject key identifier:   52:F7:76:C9:18:A6:BD:1F:FA:C2:5E:DA:3F:BC:59:3A:B0:56:7E:90
Certificate issuer:       /CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026
Certificate serial:       5317324F604750DDB0DFF0B433FA9CE90C101BDC
Authority key identifier: DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/323830343a343535343a3a2f33322d313238203d3e20323636393139.roa
Signing time:             Wed 15 Oct 2025 18:43:59 +0000
ROA not before:           Wed 15 Oct 2025 18:38:59 +0000
ROA not after:            Wed 14 Oct 2026 18:43:59 +0000
asID:                     266919
IP address blocks:        2804:4554::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl
                          rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:17:32:4f:60:47:50:dd:b0:df:f0:b4:33:fa:9c:e9:0c:10:1b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026
        Validity
            Not Before: Oct 15 18:38:59 2025 GMT
            Not After : Oct 14 18:43:59 2026 GMT
        Subject: CN=52F776C918A6BD1FFAC25EDA3FBC593AB0567E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:89:9b:6b:89:3d:94:92:6f:ad:04:62:f9:
                    1f:ce:4a:16:fc:4c:26:59:ea:80:3f:09:05:fa:6e:
                    63:3c:c1:77:d2:68:26:d7:19:8d:2a:f6:f6:4b:e1:
                    29:d4:04:3d:d4:e0:f7:49:cb:9a:53:39:71:fb:30:
                    a3:e1:6d:34:fa:12:f9:72:4a:98:14:77:74:00:d5:
                    b9:79:7d:58:4f:c1:34:6a:0d:fe:28:d7:e3:7d:d7:
                    a8:83:87:0a:db:fc:c9:44:3e:a4:5a:d9:33:eb:b7:
                    8a:f2:ca:c9:f9:37:8e:df:da:df:08:b0:e0:17:f6:
                    40:26:07:9d:b7:5a:bc:f3:06:17:0a:5f:11:4e:4f:
                    59:19:4c:81:0e:bb:f6:74:d9:98:ea:4a:cc:ae:f4:
                    d3:d5:17:81:ea:13:8c:a0:99:3d:64:b4:0b:34:3e:
                    9e:64:81:a0:68:b7:2c:95:bc:66:32:82:f9:66:bd:
                    03:3d:ea:51:95:8e:42:a8:83:1c:26:95:17:e5:76:
                    e7:2e:5b:c1:32:23:6d:73:2a:b6:4e:6d:e1:f8:70:
                    de:eb:b5:d4:0d:7b:cd:53:09:eb:1f:9c:12:77:38:
                    6b:73:a5:eb:1e:b3:d3:a0:c9:8e:81:bc:a6:2e:f0:
                    a0:cc:8b:94:0d:1b:1b:d8:d6:d4:56:4a:b2:5d:1a:
                    9f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F7:76:C9:18:A6:BD:1F:FA:C2:5E:DA:3F:BC:59:3A:B0:56:7E:90
            X509v3 Authority Key Identifier:
                keyid:DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/323830343a343535343a3a2f33322d313238203d3e20323636393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4554::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:38:15:61:07:f2:6c:22:0c:9b:16:cf:0f:21:dd:4f:5e:bc:
         55:45:68:66:00:aa:1e:6e:23:17:62:13:b4:aa:12:ff:53:a3:
         65:14:22:36:f9:86:c9:de:5c:ee:cf:96:f9:34:5f:a8:95:7a:
         6e:8b:a1:b5:b8:33:d5:3b:90:3c:50:85:fb:70:96:88:a8:e1:
         0e:91:5e:d0:d9:bd:2b:da:f0:da:c5:52:68:13:e2:9e:56:05:
         86:09:fd:f2:a0:e9:de:a3:41:80:ca:d5:67:9f:14:08:40:d3:
         6b:c6:02:38:39:a2:4a:05:64:b7:5e:35:af:a5:d1:69:9e:60:
         2e:e6:dd:fa:15:31:c0:da:9c:d9:f1:e4:38:9d:7c:00:a2:ca:
         74:c6:60:c2:5b:e1:68:fa:08:0e:2e:f2:f9:6e:d4:52:23:84:
         e1:06:e9:17:89:f9:38:26:05:59:b6:03:d2:be:dd:fa:6d:b5:
         9d:4f:e7:9c:d9:e6:8c:1c:c6:3c:5d:b7:a9:3d:80:31:fa:1a:
         24:7d:11:ac:95:8a:ae:28:e7:01:06:a0:54:f8:f2:3a:bc:f3:
         b6:1f:51:14:e9:8c:be:d7:bd:31:6b:10:85:a8:8c:11:f5:47:
         cb:0b:d1:72:09:63:0f:c0:10:f3:ac:cb:8c:a9:f7:b0:08:04:
         f8:3b:2c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:36:10 2025 by rpki-client