Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
File:                     323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa (raw, json)
Hash identifier:          ld4uyLfFHZj/4L/fqIv07nLYYtVnioiZZg/J8rm8DEE=
Subject key identifier:   8A:97:4E:9F:C9:29:DE:E6:A0:D8:6C:55:BB:7A:C1:59:D7:34:EB:F6
Certificate issuer:       /CN=A9A028180095CF5E2153D60C1B49E4B7E950C76A
Certificate serial:       151610CE343FAAC7616066245B54A334ADF78980
Authority key identifier: A9:A0:28:18:00:95:CF:5E:21:53:D6:0C:1B:49:E4:B7:E9:50:C7:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A028180095CF5E2153D60C1B49E4B7E950C76A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
Signing time:             Fri 03 Oct 2025 12:55:36 +0000
ROA not before:           Fri 03 Oct 2025 12:50:36 +0000
ROA not after:            Fri 02 Oct 2026 12:55:36 +0000
asID:                     273679
IP address blocks:        2801:80:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/A9A028180095CF5E2153D60C1B49E4B7E950C76A.crl
                          rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/A9A028180095CF5E2153D60C1B49E4B7E950C76A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A028180095CF5E2153D60C1B49E4B7E950C76A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:16:10:ce:34:3f:aa:c7:61:60:66:24:5b:54:a3:34:ad:f7:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9A028180095CF5E2153D60C1B49E4B7E950C76A
        Validity
            Not Before: Oct  3 12:50:36 2025 GMT
            Not After : Oct  2 12:55:36 2026 GMT
        Subject: CN=8A974E9FC929DEE6A0D86C55BB7AC159D734EBF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:10:6b:e4:2b:b6:94:32:24:e3:0e:ce:3a:
                    90:20:9e:65:91:3e:de:f6:c3:fc:1c:20:d1:49:01:
                    f2:9d:5f:64:8c:02:0c:f5:da:f6:3f:47:3c:5e:40:
                    89:94:9a:37:29:5b:50:51:2d:13:d4:63:ef:26:08:
                    9b:ea:2a:f9:0f:e6:c8:58:4f:a2:bb:be:5e:e8:1d:
                    f6:fc:8c:d5:29:9d:89:bb:b8:70:48:b7:f6:4d:af:
                    57:b0:a3:2c:99:65:f7:2a:89:58:9d:b0:ce:4a:fc:
                    84:1f:84:6a:e9:11:47:a0:65:35:4e:97:75:4c:b6:
                    aa:84:ce:af:c6:38:f9:ae:77:8b:c6:b0:48:40:bf:
                    95:1f:0b:68:86:34:33:f8:c0:0c:30:63:68:76:47:
                    30:91:25:0a:71:fa:af:86:55:e3:6a:43:d5:6a:08:
                    5c:77:b1:b6:99:e0:b7:85:f3:17:3e:3b:0e:ec:39:
                    b0:28:f6:1b:94:66:21:18:e0:b1:34:96:58:ef:8f:
                    77:15:43:68:9c:d1:68:80:41:c5:50:5b:3a:d0:26:
                    21:fe:a3:6e:1a:d0:62:4b:00:54:71:c0:a7:ca:f0:
                    e3:2c:cd:b7:15:6c:11:6f:29:94:31:de:ba:57:ec:
                    3d:d5:11:8a:25:8c:ed:16:47:69:05:3d:50:45:eb:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:97:4E:9F:C9:29:DE:E6:A0:D8:6C:55:BB:7A:C1:59:D7:34:EB:F6
            X509v3 Authority Key Identifier:
                keyid:A9:A0:28:18:00:95:CF:5E:21:53:D6:0C:1B:49:E4:B7:E9:50:C7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/A9A028180095CF5E2153D60C1B49E4B7E950C76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A028180095CF5E2153D60C1B49E4B7E950C76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:12:77:92:70:f0:0b:c2:f3:92:45:da:9e:49:ab:2a:f0:72:
         25:b7:c2:9f:73:d8:7d:af:68:6d:88:e0:68:85:0c:29:a2:5a:
         53:87:92:5d:ca:b5:65:35:b9:32:c6:5b:e1:8b:f5:1c:81:30:
         86:55:f4:7b:f0:6f:82:10:49:e8:84:af:b6:8d:e5:1b:48:09:
         b0:11:26:16:fa:ac:b7:d3:19:df:6a:74:08:e4:f4:47:b1:7e:
         bc:42:d0:88:3e:7f:e1:1c:d5:ef:78:43:bf:2d:f3:e7:b9:96:
         fe:6b:53:b8:e4:15:b3:53:fd:e2:ba:be:4e:33:dd:af:af:fe:
         98:9b:94:1c:b1:8a:93:0a:94:4a:65:1f:ee:42:31:31:9d:bb:
         a4:db:c1:c9:82:57:42:3b:31:4a:ad:ef:46:ac:d6:bb:18:43:
         77:e4:25:2d:ce:11:f8:d1:5a:ca:d1:4d:29:23:db:d9:a9:de:
         6b:80:c9:99:4e:e0:95:6b:f0:2a:a1:e2:5c:ef:a3:33:c3:a8:
         9e:1b:18:73:ce:11:4e:6a:c3:fc:49:56:3e:6b:f1:1d:ea:e1:
         f5:1b:48:b9:8d:d3:58:57:a4:9d:6d:71:69:dc:aa:ec:9a:c0:
         e4:57:c9:d9:f2:77:71:ba:09:90:32:a6:dc:d1:de:f6:3e:01:
         2c:3a:8b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:39 2025 by rpki-client