Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a3a2f33322d3438203d3e20323635313937.roa
File:                     323830343a326332303a3a2f33322d3438203d3e20323635313937.roa (raw, json)
Hash identifier:          mN/OEDsy7qIKISmNbS9vV/+xj04IBV0dHTjTLchzly8=
Subject key identifier:   5C:8A:E5:70:6A:8E:CF:D7:E4:F9:DE:26:CE:32:F7:55:58:95:FC:FB
Certificate issuer:       /CN=4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318
Certificate serial:       53497E75EF23E0DA98147168F89998EDCA8323DB
Authority key identifier: 4B:FB:FA:A0:5D:90:56:4C:CE:A2:CF:D8:A6:05:09:E5:D6:EA:33:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a3a2f33322d3438203d3e20323635313937.roa
Signing time:             Thu 09 Oct 2025 18:33:26 +0000
ROA not before:           Thu 09 Oct 2025 18:28:26 +0000
ROA not after:            Thu 08 Oct 2026 18:33:26 +0000
asID:                     265197
IP address blocks:        2804:2c20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.crl
                          rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:49:7e:75:ef:23:e0:da:98:14:71:68:f8:99:98:ed:ca:83:23:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318
        Validity
            Not Before: Oct  9 18:28:26 2025 GMT
            Not After : Oct  8 18:33:26 2026 GMT
        Subject: CN=5C8AE5706A8ECFD7E4F9DE26CE32F7555895FCFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:0c:5e:eb:92:44:63:39:85:df:fc:4f:17:
                    b4:d6:2f:5f:96:26:5a:75:da:b4:c9:a9:ab:30:e6:
                    fa:e3:0c:fb:8a:5c:03:04:d0:7e:f8:12:4c:1c:29:
                    e1:7e:69:c1:8b:ff:6f:14:fb:f0:8f:42:59:a1:7e:
                    f4:ed:59:d5:28:ab:52:6f:15:e0:e5:f3:a4:43:cf:
                    2e:3b:90:8e:24:1e:0c:f0:67:cf:18:e1:0c:3b:b7:
                    ef:cb:59:99:3a:4a:57:ae:25:92:3b:bd:db:62:0a:
                    6b:b1:dc:2f:48:58:60:1d:25:ce:d4:46:f5:28:7b:
                    65:f6:2c:e0:bf:33:f5:d2:6b:d6:c1:84:f8:97:2b:
                    1b:22:ee:64:88:65:89:73:dd:bf:00:15:d5:86:77:
                    79:08:7f:b9:9e:3b:77:53:1b:ab:1c:52:1f:a6:ab:
                    08:bf:b2:1c:4d:de:1c:75:85:92:f7:d7:53:39:32:
                    5c:5c:52:9e:90:44:95:1c:fd:5d:b5:25:ef:67:22:
                    ef:e0:a4:29:8e:3f:9f:8a:ec:9b:59:78:1f:7d:05:
                    38:4a:f0:37:11:09:5b:8d:23:2f:27:a0:e8:4c:f6:
                    4c:2c:61:4a:9f:c1:56:94:08:27:e6:71:ca:dc:dd:
                    8a:8e:5f:1e:57:8c:c7:73:66:db:33:bf:6b:fc:96:
                    73:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8A:E5:70:6A:8E:CF:D7:E4:F9:DE:26:CE:32:F7:55:58:95:FC:FB
            X509v3 Authority Key Identifier:
                keyid:4B:FB:FA:A0:5D:90:56:4C:CE:A2:CF:D8:A6:05:09:E5:D6:EA:33:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a3a2f33322d3438203d3e20323635313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:4e:96:e7:2d:40:7a:dc:87:6b:d2:a6:26:88:5b:07:64:e3:
         c2:86:da:66:65:13:f0:a8:96:01:97:67:47:2d:da:73:ac:07:
         56:12:1a:f0:aa:67:37:67:1a:f1:30:e0:93:08:43:0a:31:e9:
         06:2f:a0:f4:62:74:53:e1:b2:a8:95:87:fb:e6:70:db:0f:cf:
         d1:81:9c:39:74:bd:16:bd:b9:e1:bf:cf:6b:23:70:bf:16:cc:
         5a:d3:01:78:14:31:6b:a6:74:19:a6:80:d2:b8:17:8b:7a:ab:
         c8:d7:a5:cc:e7:e7:cd:b7:07:21:9b:49:f0:dc:c0:e5:8f:46:
         a8:69:03:4d:1c:a1:a7:f4:6b:87:80:69:99:b4:1e:92:b4:b3:
         e8:4f:a9:5a:08:b3:be:e6:17:30:69:7a:cb:8b:97:9a:d6:f7:
         14:ed:ff:59:ff:00:c8:01:ad:05:39:13:8a:6b:b9:8c:79:9f:
         6f:55:f5:a8:ba:1d:d5:c9:75:28:bb:48:3f:a7:f0:cf:8f:da:
         9c:bd:82:7d:06:87:99:82:e2:e9:40:ee:6b:ad:b5:4a:69:77:
         df:c8:36:e6:1c:d4:1d:c8:b7:fc:47:f1:12:56:26:a9:c3:fe:
         7e:3b:02:34:99:4a:11:1d:22:15:e2:83:b4:a8:c4:20:0b:84:
         bd:ae:01:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:04 2025 by rpki-client