Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/323830343a353864633a3a2f33322d313238203d3e20323638313534.roa
File:                     323830343a353864633a3a2f33322d313238203d3e20323638313534.roa (raw, json)
Hash identifier:          38zRo7A0+KPQpiwKgVrTbT920X9tN5I8okOTj98xZEQ=
Subject key identifier:   7F:17:67:3D:A0:DF:F4:4D:AF:FC:3C:7E:27:57:75:F1:5A:BA:4C:67
Certificate issuer:       /CN=4CC61E0413223049CADAB5E72C646EA11B2C4E36
Certificate serial:       3A897D4225D1AADCE886EE5E993B192D9BA3882B
Authority key identifier: 4C:C6:1E:04:13:22:30:49:CA:DA:B5:E7:2C:64:6E:A1:1B:2C:4E:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC61E0413223049CADAB5E72C646EA11B2C4E36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/323830343a353864633a3a2f33322d313238203d3e20323638313534.roa
Signing time:             Fri 26 Sep 2025 22:56:51 +0000
ROA not before:           Fri 26 Sep 2025 22:51:51 +0000
ROA not after:            Fri 25 Sep 2026 22:56:51 +0000
asID:                     268154
IP address blocks:        2804:58dc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/4CC61E0413223049CADAB5E72C646EA11B2C4E36.crl
                          rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/4CC61E0413223049CADAB5E72C646EA11B2C4E36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC61E0413223049CADAB5E72C646EA11B2C4E36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:89:7d:42:25:d1:aa:dc:e8:86:ee:5e:99:3b:19:2d:9b:a3:88:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC61E0413223049CADAB5E72C646EA11B2C4E36
        Validity
            Not Before: Sep 26 22:51:51 2025 GMT
            Not After : Sep 25 22:56:51 2026 GMT
        Subject: CN=7F17673DA0DFF44DAFFC3C7E275775F15ABA4C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:3b:75:6e:01:22:da:95:c8:66:d8:87:36:
                    8f:c6:eb:df:03:ab:01:da:8c:4e:fa:c3:1a:43:4a:
                    54:dc:31:9c:5d:17:3a:40:e4:5a:9e:e5:ac:90:cb:
                    73:d8:95:b6:fe:94:c3:69:0c:93:17:01:0f:e4:fb:
                    d9:d8:5a:a5:f1:b6:77:fb:e9:8a:cb:8b:ea:ff:75:
                    ce:17:4e:a6:ea:9a:d2:af:3d:4c:c6:53:f1:5b:e8:
                    8b:9e:42:ea:9a:c5:71:b9:67:8f:11:63:d5:c3:02:
                    a9:c9:ac:48:f9:75:e6:31:1d:1c:38:5b:13:ba:74:
                    47:e4:cb:6c:31:bc:93:b8:e2:65:33:b4:ed:3d:4c:
                    e7:35:5c:a4:a1:68:fc:fa:f9:a7:cc:c5:0c:b4:eb:
                    39:82:b8:e0:88:4e:fb:2d:a8:08:f5:17:35:93:b2:
                    80:9b:e6:e4:cb:62:e4:73:1e:0a:1e:4b:ba:0f:bd:
                    46:25:56:ec:fa:9f:f2:63:21:f2:dd:fd:7d:29:98:
                    76:ae:45:d4:54:a2:63:26:57:17:04:e7:d4:a2:61:
                    d2:3b:24:f3:cb:43:55:61:62:30:ed:1e:2f:36:71:
                    53:3d:58:76:79:d2:0f:65:91:ee:8b:74:b1:52:68:
                    2b:f1:07:db:59:2c:5b:d6:44:57:49:25:7f:18:60:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:17:67:3D:A0:DF:F4:4D:AF:FC:3C:7E:27:57:75:F1:5A:BA:4C:67
            X509v3 Authority Key Identifier:
                keyid:4C:C6:1E:04:13:22:30:49:CA:DA:B5:E7:2C:64:6E:A1:1B:2C:4E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/4CC61E0413223049CADAB5E72C646EA11B2C4E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC61E0413223049CADAB5E72C646EA11B2C4E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/323830343a353864633a3a2f33322d313238203d3e20323638313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:59:3d:87:d6:1e:a3:2d:31:7e:e2:66:08:f1:2f:a7:6b:e2:
         f8:a4:5a:28:ff:c8:80:87:c2:d2:c3:b4:3c:80:e5:e6:a8:02:
         b7:fa:8b:70:f9:67:a1:6f:7c:83:e6:45:b4:ac:37:8f:7a:94:
         38:5b:cb:62:2d:b0:06:d5:ff:ce:a3:9e:9a:a2:ab:86:7a:43:
         de:4a:54:66:e4:59:6a:b2:c6:f6:7e:45:14:1e:7f:89:91:cb:
         58:33:03:9b:97:d9:0d:78:be:bc:0e:a3:60:30:ce:64:0c:20:
         e7:fd:c2:47:a2:fa:14:69:f1:a0:a3:ed:32:f7:83:b0:18:78:
         93:38:40:39:93:15:85:69:24:d2:b7:81:10:13:83:0e:0f:08:
         28:34:ae:75:ce:54:db:64:75:6d:1c:97:57:ca:ed:4f:8e:f5:
         b3:1d:60:40:fa:13:f8:f7:7a:93:a2:bc:30:ba:02:2c:1d:98:
         c6:07:19:14:4a:2e:ec:f6:46:c2:46:93:67:d0:c2:7f:44:fc:
         8a:bc:d4:da:dc:ab:c2:ae:02:09:75:7a:60:d0:8c:35:fc:ea:
         fc:d8:20:1b:07:8e:c0:14:67:8d:05:a9:4f:da:e3:33:43:f6:
         1e:34:7b:6c:8a:6d:b9:8f:89:d3:1e:62:e5:a3:1b:27:b1:f9:
         c9:8b:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:15:13 2025 by rpki-client