Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/323830343a366334343a3a2f33322d3332203d3e20323730343536.roa
File:                     323830343a366334343a3a2f33322d3332203d3e20323730343536.roa (raw, json)
Hash identifier:          2L8zD62O1wMhDNc/p81/SI2b9EhFBNdk9H24rYkX1eU=
Subject key identifier:   21:A4:DD:2C:32:01:F1:E0:81:CA:C2:39:38:36:4D:48:E2:0B:D2:1C
Certificate issuer:       /CN=012DE66F741FB1D6284ADAD342BFA01A40451BA4
Certificate serial:       2CA0F6A3FF11FED9AF852F78B2507CA8AA0A7A59
Authority key identifier: 01:2D:E6:6F:74:1F:B1:D6:28:4A:DA:D3:42:BF:A0:1A:40:45:1B:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/012DE66F741FB1D6284ADAD342BFA01A40451BA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/323830343a366334343a3a2f33322d3332203d3e20323730343536.roa
Signing time:             Tue 02 Sep 2025 17:33:32 +0000
ROA not before:           Tue 02 Sep 2025 17:28:32 +0000
ROA not after:            Tue 01 Sep 2026 17:33:32 +0000
asID:                     270456
IP address blocks:        2804:6c44::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/012DE66F741FB1D6284ADAD342BFA01A40451BA4.crl
                          rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/012DE66F741FB1D6284ADAD342BFA01A40451BA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/012DE66F741FB1D6284ADAD342BFA01A40451BA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 20:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a0:f6:a3:ff:11:fe:d9:af:85:2f:78:b2:50:7c:a8:aa:0a:7a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012DE66F741FB1D6284ADAD342BFA01A40451BA4
        Validity
            Not Before: Sep  2 17:28:32 2025 GMT
            Not After : Sep  1 17:33:32 2026 GMT
        Subject: CN=21A4DD2C3201F1E081CAC23938364D48E20BD21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:99:f3:33:02:11:f9:ba:f6:b1:b1:21:29:
                    1b:84:ce:40:f4:b0:ca:38:0f:52:2e:9c:5e:8d:10:
                    db:57:b2:91:ed:ee:f5:d8:06:d9:e7:1f:07:12:af:
                    cd:06:ee:33:8a:2c:f4:68:44:88:f9:31:02:a9:a7:
                    4f:7e:4c:b3:ff:58:e4:88:a6:12:a4:82:73:da:bf:
                    57:38:96:b7:f0:e9:59:98:5f:99:ca:d3:6a:0d:93:
                    13:f8:ec:0c:e0:ec:36:5f:68:af:bc:3f:77:74:d7:
                    09:29:65:c6:f0:54:81:6c:e7:eb:1e:d2:b1:25:0a:
                    44:a8:d1:5a:a8:a9:97:20:74:7e:92:53:b2:9e:78:
                    68:a5:91:91:fb:b7:d2:c5:bd:32:ad:e4:c9:6b:4a:
                    f0:15:c5:5e:cf:ce:cd:23:70:c8:e5:44:e4:89:45:
                    ea:2c:65:ec:51:8c:70:33:bc:7d:52:93:0c:ec:d5:
                    d9:31:8a:64:d3:ed:cc:8f:8d:d2:af:7e:fc:70:30:
                    52:42:6d:f3:f8:15:8f:d6:f4:d3:e0:28:23:e1:25:
                    8d:60:1f:8a:bf:ee:e5:09:f0:bb:0b:17:86:ea:08:
                    31:cf:5a:d9:ea:ab:c3:26:14:1b:3b:12:84:c8:48:
                    9f:5c:20:cb:9b:47:66:1a:b8:17:4e:cf:fc:44:47:
                    8d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A4:DD:2C:32:01:F1:E0:81:CA:C2:39:38:36:4D:48:E2:0B:D2:1C
            X509v3 Authority Key Identifier:
                keyid:01:2D:E6:6F:74:1F:B1:D6:28:4A:DA:D3:42:BF:A0:1A:40:45:1B:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/012DE66F741FB1D6284ADAD342BFA01A40451BA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/012DE66F741FB1D6284ADAD342BFA01A40451BA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/323830343a366334343a3a2f33322d3332203d3e20323730343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c44::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:4d:df:1e:9e:04:ea:fc:45:b7:80:51:42:de:a5:e3:63:cc:
         16:c8:92:35:01:17:85:e2:15:56:df:dd:b3:92:b1:8d:05:4e:
         26:50:58:25:9d:a2:0b:dd:1e:ac:f1:56:17:8c:6b:39:19:77:
         89:a7:9a:65:29:67:3f:e8:3a:f9:ae:6d:dc:e8:5e:51:57:27:
         f0:a8:0f:04:dd:4e:36:ad:9b:cc:0a:19:72:e2:39:4b:d6:db:
         8e:89:29:e7:c5:44:c2:15:f5:01:c2:e5:a5:d7:ac:13:38:89:
         8a:f5:11:47:1e:d9:cc:6a:9f:29:fb:9f:2d:d7:6c:dc:d8:98:
         9d:ce:ae:96:b5:dd:ba:e5:51:0a:d3:56:e2:bd:12:cf:de:10:
         3f:69:b8:15:7d:2e:f4:65:ea:94:01:dd:f6:40:e2:59:a7:b3:
         c8:9e:c8:c4:92:a3:26:84:b3:10:a0:ee:39:8f:fa:4b:9e:5c:
         18:de:02:5e:8b:dd:cb:a4:73:3e:c1:11:42:b3:62:b1:04:4e:
         2a:a5:2b:bb:61:e2:02:97:35:af:4a:24:3a:a4:0e:51:b5:21:
         f0:2b:14:8f:61:36:e9:82:58:e5:58:a8:70:8e:28:b3:71:3b:
         df:ea:67:47:1e:22:33:82:d8:b0:5a:03:e9:88:0d:18:3e:17:
         06:cf:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:12:22 2025 by rpki-client