Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa
File:                     323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa (raw, json)
Hash identifier:          rbV//LDqEwxf/yvQLbExO7S7+LFqZ9dwPqrAVeXO/As=
Subject key identifier:   88:C7:87:2C:4D:AA:04:D6:BA:58:F2:08:C7:00:4A:B4:4F:BD:7E:07
Certificate issuer:       /CN=D40B256042895F431460325AC5DB0F0088D3437F
Certificate serial:       267F87F30C79B3C38684EB7AD4700F54B49B0706
Authority key identifier: D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa
Signing time:             Tue 26 Aug 2025 01:04:13 +0000
ROA not before:           Tue 26 Aug 2025 00:59:13 +0000
ROA not after:            Tue 25 Aug 2026 01:04:13 +0000
asID:                     265500
IP address blocks:        2804:3518:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7f:87:f3:0c:79:b3:c3:86:84:eb:7a:d4:70:0f:54:b4:9b:07:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40B256042895F431460325AC5DB0F0088D3437F
        Validity
            Not Before: Aug 26 00:59:13 2025 GMT
            Not After : Aug 25 01:04:13 2026 GMT
        Subject: CN=88C7872C4DAA04D6BA58F208C7004AB44FBD7E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:92:b3:95:5f:eb:0c:04:6a:d5:8b:07:66:
                    44:e5:01:e5:86:21:ef:e4:06:20:c3:25:7e:ce:80:
                    42:b4:38:70:05:2c:1f:36:c7:a9:c1:d8:d3:3f:83:
                    32:26:ab:1f:04:13:7d:71:25:02:91:a2:ce:a9:a5:
                    8b:d4:a4:16:fa:9e:5a:a9:c3:07:6b:d8:87:27:03:
                    fe:dd:10:4a:19:2c:8b:54:7c:11:aa:d9:77:72:dc:
                    f6:bc:ce:5d:5e:e3:34:2b:d6:2b:84:2c:03:16:12:
                    d3:40:c9:3d:bf:0e:36:1d:9f:05:eb:e5:78:ee:6f:
                    18:a4:a5:11:c5:7e:03:70:49:d4:70:e7:b0:e7:6d:
                    59:5e:e8:3e:8c:b4:f7:5e:c2:53:8e:59:27:2f:0e:
                    24:07:e5:bf:cf:81:b2:3b:aa:15:fb:07:4e:73:ba:
                    67:73:7c:df:2b:35:cb:0d:88:21:46:86:19:e3:8f:
                    af:ab:c1:45:ae:15:cc:c6:dd:a6:e4:cb:84:da:eb:
                    39:47:1b:56:0e:ec:51:0b:8f:68:4c:6a:7f:58:7c:
                    44:54:1c:dd:89:bc:92:b8:75:38:aa:6d:74:c8:b6:
                    99:f0:64:75:d5:a3:2c:5c:2f:16:27:41:44:c7:71:
                    13:31:6a:5c:3b:e7:6a:0e:5e:f6:90:69:b7:6a:d3:
                    91:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C7:87:2C:4D:AA:04:D6:BA:58:F2:08:C7:00:4A:B4:4F:BD:7E:07
            X509v3 Authority Key Identifier:
                keyid:D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cb:17:a7:75:98:e4:a7:63:02:13:4b:1f:11:5a:90:e9:91:ca:
         6e:88:5c:c7:0c:6f:5b:0a:a6:4c:50:ea:f6:bf:90:32:44:07:
         70:49:93:4c:27:2d:28:61:07:8a:03:55:7a:c1:a8:01:c8:7c:
         32:ef:1d:d2:a5:00:27:b0:12:06:15:9f:58:32:dd:63:b7:b1:
         de:de:00:38:bb:21:a0:66:77:a0:82:88:e1:03:2b:d7:00:26:
         52:dc:ab:37:ed:44:4c:98:4a:6e:b2:69:2f:c5:ba:6d:63:81:
         80:b6:9b:81:8b:61:a5:cd:14:f9:9d:96:5a:6a:56:3d:1f:b6:
         dc:a5:a1:17:0c:ff:6f:dd:12:56:c8:51:6d:a9:57:5e:c8:f4:
         5c:ac:7b:48:37:5e:09:32:20:dd:b2:ca:4e:0b:23:ca:c0:a8:
         ce:36:7a:aa:2f:b3:a2:75:c4:38:d2:d0:09:3e:01:d9:d0:bc:
         af:19:f5:08:85:50:e4:2f:9c:54:36:a9:8d:cf:61:aa:e3:ba:
         87:04:78:fb:4e:72:c2:32:8c:b1:98:63:38:3b:01:b6:05:a4:
         58:1e:76:42:4b:70:0f:9d:35:28:c7:4c:65:53:7b:88:32:a0:
         bd:f4:b9:d6:70:01:8c:b8:49:1b:3c:6a:94:b7:ce:68:a3:b7:
         52:e3:16:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:37:22 2025 by rpki-client