Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/323830343a373064343a3a2f33322d3438203d3e20323730373531.roa
File:                     323830343a373064343a3a2f33322d3438203d3e20323730373531.roa (raw, json)
Hash identifier:          BBQfvfs5At2uATUo3OhItBuxlawLkJ1AX7cM59tiKVk=
Subject key identifier:   CC:F5:6E:57:A6:C1:5D:85:DB:0F:BA:4C:69:F2:D4:F3:C4:8F:18:B2
Certificate issuer:       /CN=C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8
Certificate serial:       03F8F219DB2428229168C5A080187DB88C6CCF59
Authority key identifier: C1:EB:54:5F:26:E5:2D:C8:9E:77:A7:72:F1:AD:8A:6B:70:57:B2:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/323830343a373064343a3a2f33322d3438203d3e20323730373531.roa
Signing time:             Fri 03 Oct 2025 19:36:32 +0000
ROA not before:           Fri 03 Oct 2025 19:31:32 +0000
ROA not after:            Fri 02 Oct 2026 19:36:32 +0000
asID:                     270751
IP address blocks:        2804:70d4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.crl
                          rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f8:f2:19:db:24:28:22:91:68:c5:a0:80:18:7d:b8:8c:6c:cf:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8
        Validity
            Not Before: Oct  3 19:31:32 2025 GMT
            Not After : Oct  2 19:36:32 2026 GMT
        Subject: CN=CCF56E57A6C15D85DB0FBA4C69F2D4F3C48F18B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ba:bd:cd:e1:ea:c0:9e:5a:eb:47:82:1e:b7:
                    06:26:1f:96:ba:48:86:36:e7:57:25:91:91:be:d1:
                    b6:79:24:ad:a4:c3:52:69:ce:04:62:5e:d0:2b:c2:
                    cf:24:19:0a:41:55:fd:1a:b9:46:1b:cc:c5:6a:32:
                    12:b9:92:f6:43:2e:d0:af:7a:17:94:a9:2e:3c:e7:
                    99:02:5d:77:48:88:70:e4:9c:7a:fa:2c:80:6c:7a:
                    5c:79:15:fa:21:c8:b6:44:01:a8:8f:13:dd:37:a4:
                    12:ec:1c:f6:60:38:02:21:59:73:67:56:0d:13:9f:
                    be:b1:30:2b:58:19:60:10:ac:88:d0:e8:9c:f3:84:
                    9b:de:47:21:c5:19:4a:bd:a5:e7:0a:15:95:6f:f5:
                    01:3b:45:1d:87:5d:ae:0d:e2:58:84:db:75:15:4b:
                    f2:6b:86:79:de:54:32:12:b9:c6:f3:c4:aa:ed:b4:
                    ce:de:8a:cf:48:39:5e:d1:f0:b9:d8:93:7d:07:36:
                    1e:a0:23:e6:8f:61:38:a7:02:1b:cb:f9:57:43:29:
                    3f:0c:af:84:38:53:c3:f0:9e:4a:36:9a:32:17:76:
                    31:bb:3a:fa:30:28:f9:d2:d2:4a:55:a6:66:eb:3d:
                    ca:56:9a:0c:b9:c7:26:34:9e:95:f1:99:22:95:e8:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F5:6E:57:A6:C1:5D:85:DB:0F:BA:4C:69:F2:D4:F3:C4:8F:18:B2
            X509v3 Authority Key Identifier:
                keyid:C1:EB:54:5F:26:E5:2D:C8:9E:77:A7:72:F1:AD:8A:6B:70:57:B2:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/323830343a373064343a3a2f33322d3438203d3e20323730373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:c4:a2:03:92:9b:1a:7a:95:c6:ac:3b:bb:ab:16:c5:b6:bc:
         ec:a8:1d:09:d7:61:f4:71:df:c1:5e:af:a3:20:b3:3a:8e:55:
         3d:b4:e5:7c:d7:8c:2f:ce:8f:17:a5:c9:58:51:ad:ef:de:33:
         ec:9c:0b:09:9f:a4:93:45:d0:2b:42:97:7e:18:3f:7f:5b:9d:
         63:4e:68:5f:33:69:08:7e:3f:0a:4a:67:ab:d4:44:96:97:e1:
         f5:1f:b4:59:e9:10:7b:3b:b8:de:74:ee:62:d6:ac:0a:46:1d:
         58:e6:95:cf:7a:e4:fe:b8:cd:25:66:77:3f:f7:a9:dc:eb:94:
         42:00:68:9a:75:eb:29:1e:78:8b:85:5d:a5:6b:64:89:67:06:
         56:47:c9:bb:f0:c0:4e:5c:d0:48:17:07:79:4e:7d:db:4c:de:
         6a:7c:1d:97:a2:be:d6:7c:d5:04:08:ea:45:30:00:ef:fd:e2:
         cb:3d:3c:65:98:34:69:36:17:0e:51:c0:e6:1e:3b:e0:6c:61:
         01:0b:0b:fa:e5:8d:5b:4d:25:24:e9:d7:83:01:ea:01:30:70:
         c5:de:e3:89:5b:e9:83:2b:da:60:ab:f9:74:96:3b:a5:00:68:
         7c:bc:62:c8:09:61:94:e6:ac:89:ca:d1:39:c3:b9:62:e5:fa:
         41:97:2c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:12 2025 by rpki-client