Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/323830343a363735383a3a2f33322d313238203d3e20323639363232.roa
File:                     323830343a363735383a3a2f33322d313238203d3e20323639363232.roa (raw, json)
Hash identifier:          VZONwWssioer+MFFRLzQo5lZipYAs6sDUdc1KsAuSIc=
Subject key identifier:   34:50:D1:78:D6:B1:07:35:92:EA:20:03:0C:76:96:EA:91:0F:91:9A
Certificate issuer:       /CN=53C092812661ADDEB8F46FEE239AB18C9F9DE631
Certificate serial:       7017A1D1354D109761BA38985FB1F7D46976CC27
Authority key identifier: 53:C0:92:81:26:61:AD:DE:B8:F4:6F:EE:23:9A:B1:8C:9F:9D:E6:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C092812661ADDEB8F46FEE239AB18C9F9DE631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/323830343a363735383a3a2f33322d313238203d3e20323639363232.roa
Signing time:             Thu 25 Sep 2025 19:57:30 +0000
ROA not before:           Thu 25 Sep 2025 19:52:30 +0000
ROA not after:            Thu 24 Sep 2026 19:57:30 +0000
asID:                     269622
IP address blocks:        2804:6758::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/53C092812661ADDEB8F46FEE239AB18C9F9DE631.crl
                          rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/53C092812661ADDEB8F46FEE239AB18C9F9DE631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C092812661ADDEB8F46FEE239AB18C9F9DE631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:17:a1:d1:35:4d:10:97:61:ba:38:98:5f:b1:f7:d4:69:76:cc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C092812661ADDEB8F46FEE239AB18C9F9DE631
        Validity
            Not Before: Sep 25 19:52:30 2025 GMT
            Not After : Sep 24 19:57:30 2026 GMT
        Subject: CN=3450D178D6B1073592EA20030C7696EA910F919A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:0b:fe:e1:31:5d:bf:5f:a5:06:2f:9b:92:
                    5a:96:50:05:35:3e:61:cd:72:a6:47:a3:c1:d7:91:
                    b5:ce:7d:d9:7f:3d:2e:06:36:62:8a:b5:0a:1a:e1:
                    16:ca:10:7c:62:4e:5a:d2:a2:e7:2c:cf:ad:c4:0f:
                    98:61:37:0f:62:57:9a:c1:38:ad:1b:dc:96:89:43:
                    56:88:dd:7b:d0:24:fd:f3:bc:f3:0f:93:4f:6c:63:
                    54:ed:ad:97:37:7c:c2:5b:53:52:56:22:a5:de:8c:
                    3f:64:a4:71:59:db:71:cd:18:11:29:c5:f3:7b:c6:
                    8a:e7:9f:ea:62:75:58:08:23:4d:31:39:ec:ad:c3:
                    be:7b:8e:e6:a3:e7:98:3c:64:78:c8:db:37:5d:78:
                    00:6d:0f:52:30:5c:2e:6f:fd:06:15:67:9c:a8:be:
                    76:58:9e:57:f2:09:6c:3a:1e:c7:73:a7:92:26:dd:
                    eb:21:be:f6:68:e6:d3:b5:7c:21:d7:58:49:f6:75:
                    83:fe:bf:71:9d:e7:83:8f:4b:73:ba:57:76:22:59:
                    56:29:5e:80:f8:0e:0f:59:9e:f8:39:fa:d0:9b:58:
                    79:55:75:9d:c0:c2:cf:4b:71:d9:7a:6b:e6:ea:66:
                    a5:a5:cb:20:5f:0a:87:e1:e4:b3:73:8a:e2:78:38:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:50:D1:78:D6:B1:07:35:92:EA:20:03:0C:76:96:EA:91:0F:91:9A
            X509v3 Authority Key Identifier:
                keyid:53:C0:92:81:26:61:AD:DE:B8:F4:6F:EE:23:9A:B1:8C:9F:9D:E6:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/53C092812661ADDEB8F46FEE239AB18C9F9DE631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C092812661ADDEB8F46FEE239AB18C9F9DE631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/323830343a363735383a3a2f33322d313238203d3e20323639363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6758::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:a2:c5:fd:52:e9:f3:7d:38:7c:94:04:94:bd:33:f1:79:73:
         a2:6e:27:ee:87:de:e5:ad:d0:c9:ab:75:17:19:79:41:f4:c0:
         8b:dd:c6:2a:c4:ef:d4:4f:7f:a6:34:73:d2:e9:ef:a4:8c:ee:
         c6:13:41:6c:4a:33:72:20:2a:17:68:b7:87:6a:7b:7d:26:58:
         80:d6:e0:cc:2c:ac:60:9c:9a:c6:8a:2b:91:8e:af:f1:05:9c:
         43:a9:19:51:27:48:ad:8e:b1:a9:1e:f3:92:5b:2a:4c:0e:8d:
         ba:9a:93:a2:86:3d:b4:f9:9f:45:e5:4c:69:e5:3d:8a:5f:70:
         90:67:19:02:4b:ca:56:6f:f5:f2:1f:44:45:d7:83:a6:b8:d2:
         76:af:d5:1f:53:95:7c:f2:78:d9:e2:1b:e5:4f:0d:c5:32:05:
         d7:64:d0:f3:5b:1e:c7:bc:d9:a3:cb:c9:be:77:b5:ed:f6:91:
         9b:b0:44:e3:0b:18:6d:a2:50:ea:d4:a2:40:76:61:5d:21:5d:
         1a:da:fc:ef:85:80:ff:43:16:bc:fc:ac:92:4a:d1:5b:f7:b2:
         6a:4f:84:18:6b:43:9b:c3:64:29:af:a0:d1:e9:20:9c:2f:54:
         a0:3a:51:4d:10:ca:d7:e1:80:0e:25:c6:69:38:66:b5:d3:89:
         17:50:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:03:53 2025 by rpki-client