Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/323830343a376462633a3a2f33322d313238203d3e20323731353739.roa
File:                     323830343a376462633a3a2f33322d313238203d3e20323731353739.roa (raw, json)
Hash identifier:          OIjMjTWmF+k44FPquwiH8/84mj/tt8V4clefjWOVjcQ=
Subject key identifier:   65:91:6F:A3:A9:A3:1F:17:E9:65:F2:16:58:DA:29:8F:27:AC:FD:1C
Certificate issuer:       /CN=933741FECC86D83F16218875E8CEBD815DB63DC3
Certificate serial:       1BD5800CD086ABE98183F897297B0DE591AF6621
Authority key identifier: 93:37:41:FE:CC:86:D8:3F:16:21:88:75:E8:CE:BD:81:5D:B6:3D:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933741FECC86D83F16218875E8CEBD815DB63DC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/323830343a376462633a3a2f33322d313238203d3e20323731353739.roa
Signing time:             Mon 29 Sep 2025 14:16:48 +0000
ROA not before:           Mon 29 Sep 2025 14:11:48 +0000
ROA not after:            Mon 28 Sep 2026 14:16:48 +0000
asID:                     271579
IP address blocks:        2804:7dbc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/933741FECC86D83F16218875E8CEBD815DB63DC3.crl
                          rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/933741FECC86D83F16218875E8CEBD815DB63DC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933741FECC86D83F16218875E8CEBD815DB63DC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d5:80:0c:d0:86:ab:e9:81:83:f8:97:29:7b:0d:e5:91:af:66:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=933741FECC86D83F16218875E8CEBD815DB63DC3
        Validity
            Not Before: Sep 29 14:11:48 2025 GMT
            Not After : Sep 28 14:16:48 2026 GMT
        Subject: CN=65916FA3A9A31F17E965F21658DA298F27ACFD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a7:40:a4:91:e0:c2:3e:b8:7a:76:a0:52:e8:
                    f3:85:e5:16:47:88:b6:dc:b9:ed:38:a5:38:42:a0:
                    95:ef:ec:d2:75:e8:4f:68:d0:19:25:ce:d1:91:8f:
                    dc:ce:f3:c2:40:19:6b:40:15:19:f2:1f:62:7f:76:
                    c1:c2:e0:bd:37:bb:23:b2:e3:93:9a:ca:34:76:d1:
                    3b:31:09:3c:d8:49:23:f9:fd:41:ba:55:72:cf:cc:
                    52:f4:7e:01:c1:71:fa:d0:51:89:b8:8e:ed:14:89:
                    ef:c0:4f:cb:72:bb:50:69:cd:66:13:9a:70:1e:17:
                    62:d3:88:64:a0:f4:e7:44:18:e0:78:34:49:79:1c:
                    68:f5:1a:47:16:28:9c:7b:d9:8a:27:c1:bb:6d:ba:
                    b7:43:92:2d:75:8b:43:75:4e:b6:94:e3:fa:92:6a:
                    26:50:57:9c:45:94:40:51:d6:61:c6:11:48:8d:8e:
                    2a:27:e7:ec:cc:f8:ff:0e:52:f5:a2:11:9c:06:ac:
                    79:6e:56:06:58:cc:e1:35:9a:ed:6f:1a:1b:f4:86:
                    bd:bb:b3:eb:65:0c:51:55:d0:c5:95:78:75:83:01:
                    13:c1:2b:7f:60:93:dd:30:17:2f:d0:93:4b:f1:3c:
                    b1:e5:43:34:15:7d:1a:34:12:37:98:a7:f1:09:11:
                    68:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:91:6F:A3:A9:A3:1F:17:E9:65:F2:16:58:DA:29:8F:27:AC:FD:1C
            X509v3 Authority Key Identifier:
                keyid:93:37:41:FE:CC:86:D8:3F:16:21:88:75:E8:CE:BD:81:5D:B6:3D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/933741FECC86D83F16218875E8CEBD815DB63DC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933741FECC86D83F16218875E8CEBD815DB63DC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/323830343a376462633a3a2f33322d313238203d3e20323731353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7dbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:65:a7:38:24:51:6e:40:e1:12:67:83:a0:6b:c0:ce:a2:0d:
         f3:7b:f2:4e:7f:3d:bd:1e:76:32:b3:6d:90:9a:57:1e:0a:36:
         f2:87:28:28:f9:11:82:3e:34:45:fc:9a:ce:b1:79:16:d9:ef:
         28:ed:af:d3:dd:5a:e3:69:c2:ea:b1:f7:5b:b1:b9:ef:40:da:
         f3:07:82:77:d8:67:24:62:52:7b:c0:b0:e2:8f:86:a3:e9:e0:
         ea:07:8c:08:4c:81:5b:81:a4:f0:c2:19:57:e7:c6:80:36:ea:
         55:c4:13:d9:27:22:c5:c4:5f:ae:93:95:23:4d:7e:2d:a0:cf:
         50:ad:ad:3c:7b:7b:5e:c3:e5:3a:4b:cc:1c:2b:e9:d4:14:70:
         ce:c7:c5:9c:c9:dd:45:82:81:6d:47:b8:a3:04:d7:a5:bc:77:
         64:10:3f:96:12:01:7e:dc:29:d2:12:d0:dd:71:4e:e3:14:12:
         a6:c9:62:84:8e:0e:1c:a6:c9:6c:cb:2c:f0:cf:19:8c:02:3c:
         94:ae:60:ef:0d:59:fa:47:a6:e6:8a:7e:6e:c7:87:74:be:21:
         f6:3c:27:12:bc:23:9b:25:2b:c6:61:19:15:71:29:90:39:0f:
         d7:dd:41:16:9b:6a:7f:ae:5f:fd:c7:82:eb:f7:ad:64:43:07:
         71:c4:c8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:26:10 2025 by rpki-client