Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/323830343a313464633a3a2f33322d3332203d3e20323633333535.roa
File:                     323830343a313464633a3a2f33322d3332203d3e20323633333535.roa (raw, json)
Hash identifier:          ebyc3yc2hKDi5hX7+b4F5vvsAT+SmF7HRpaQeM6LYcs=
Subject key identifier:   F7:FD:D3:D9:3C:78:41:DC:C8:29:BC:7C:DA:83:C4:DC:FE:09:9F:9A
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       059EFCE14F7195A67723D50ACD5CDA3F19340C9C
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/323830343a313464633a3a2f33322d3332203d3e20323633333535.roa
Signing time:             Tue 23 Sep 2025 18:08:09 +0000
ROA not before:           Tue 23 Sep 2025 18:03:09 +0000
ROA not after:            Tue 22 Sep 2026 18:08:09 +0000
asID:                     263355
IP address blocks:        2804:14dc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9e:fc:e1:4f:71:95:a6:77:23:d5:0a:cd:5c:da:3f:19:34:0c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Sep 23 18:03:09 2025 GMT
            Not After : Sep 22 18:08:09 2026 GMT
        Subject: CN=F7FDD3D93C7841DCC829BC7CDA83C4DCFE099F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4a:a6:9b:fd:24:35:79:8d:3f:ea:1f:5a:c9:
                    2c:1a:ce:86:b3:88:88:3d:8f:5f:93:16:47:5b:d2:
                    ea:25:f1:82:86:0a:5f:f8:26:39:f9:2c:34:d1:82:
                    08:fc:6e:cf:d1:22:b2:11:d6:91:8c:34:9b:a6:68:
                    66:d9:c4:4e:fc:cd:c7:74:af:28:02:b1:21:fe:ac:
                    86:36:8d:e1:c7:3d:c9:11:45:13:91:86:cb:08:17:
                    29:ee:8c:c2:22:c3:d6:0a:c7:87:fe:b7:ae:2c:36:
                    26:96:a0:d4:57:12:7f:8c:03:fe:d0:40:6b:a0:34:
                    bb:94:ee:81:71:45:f1:03:4f:e3:08:2b:04:7b:9d:
                    3b:9a:98:8a:a0:97:18:a2:60:e2:28:2e:f6:d4:ef:
                    74:ac:92:69:ae:d7:6c:eb:49:4f:f7:78:68:e8:e3:
                    30:ca:ee:1e:e6:0a:ce:fe:59:03:a2:96:90:b3:87:
                    ce:f4:20:84:55:45:8c:9c:55:e5:06:72:a5:96:48:
                    ca:c1:dc:07:b0:be:e9:29:b8:96:b8:25:4c:62:71:
                    e7:5c:2f:85:7b:c2:28:5c:15:ef:6a:ae:4b:d3:50:
                    68:23:72:45:24:d9:50:b8:14:ef:ac:26:b5:27:68:
                    d3:a7:3a:53:e5:13:d1:83:e0:24:8f:3f:7d:67:72:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FD:D3:D9:3C:78:41:DC:C8:29:BC:7C:DA:83:C4:DC:FE:09:9F:9A
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/323830343a313464633a3a2f33322d3332203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:d5:91:a8:c5:b7:16:45:81:33:07:2d:9c:99:e0:79:6a:5a:
         07:77:a2:9b:e9:f2:49:fc:3c:4f:6a:6a:74:30:35:ad:dd:c5:
         2a:bc:b8:66:5e:47:e4:47:16:2d:f8:fc:2f:82:61:aa:08:c1:
         3f:37:55:38:8a:56:ae:7d:44:cc:3e:b6:c5:3b:91:d2:15:14:
         f3:58:79:1d:2e:1a:d4:08:f5:c0:f6:61:58:17:1c:3b:b8:28:
         e9:d3:5a:df:b0:88:f5:3d:4a:28:2c:7b:07:43:75:46:53:77:
         74:95:ed:f0:3e:32:ba:59:66:28:0b:fb:72:6e:69:95:b1:fc:
         e9:c5:99:77:d6:de:a4:12:1e:a8:85:ee:fc:e5:bc:9f:67:1d:
         25:bb:3e:6a:cc:9a:1d:8d:8b:9a:bd:3e:16:de:72:04:fb:db:
         22:c2:b9:b2:a3:cd:5f:2a:88:59:6e:bc:45:2b:67:57:5c:1b:
         9d:25:2e:2c:6d:13:33:f7:b0:7c:44:9c:d1:e5:d0:ba:41:8f:
         da:ea:6b:08:7f:4f:33:4b:7e:38:78:f5:95:93:95:c4:dc:18:
         e6:04:05:03:6a:ce:ab:72:06:48:ad:7f:82:b7:19:c7:fb:a8:
         26:28:43:09:c6:0f:e9:41:20:de:de:58:7b:81:7e:f3:8c:cc:
         57:04:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:54 2025 by rpki-client