Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa
File:                     323830343a376532633a3a2f33322d3332203d3e20323731363037.roa (raw, json)
Hash identifier:          b3clEwqCI3P8YcKVBjN5GNmnsLdTIb0mQjtPOehhoFg=
Subject key identifier:   B5:4A:A7:4C:E3:1B:B0:25:6F:32:F0:82:70:2B:8C:2E:33:E0:F4:0F
Certificate issuer:       /CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
Certificate serial:       2036CDEA7FAAA9BEA7BFA170E09CC6C09B440CD0
Authority key identifier: 23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa
Signing time:             Wed 01 Oct 2025 18:07:18 +0000
ROA not before:           Wed 01 Oct 2025 18:02:18 +0000
ROA not after:            Wed 30 Sep 2026 18:07:18 +0000
asID:                     271607
IP address blocks:        2804:7e2c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:36:cd:ea:7f:aa:a9:be:a7:bf:a1:70:e0:9c:c6:c0:9b:44:0c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
        Validity
            Not Before: Oct  1 18:02:18 2025 GMT
            Not After : Sep 30 18:07:18 2026 GMT
        Subject: CN=B54AA74CE31BB0256F32F082702B8C2E33E0F40F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:bc:80:d1:45:f8:83:9a:4c:c3:0b:e5:3c:
                    32:57:e1:5e:11:8a:de:73:2b:f7:43:3b:ef:df:e9:
                    58:87:29:b1:f9:21:70:0a:d6:06:c1:8c:af:3b:35:
                    25:e3:cb:d2:41:1d:49:ba:8c:bd:2f:5d:d9:8e:c8:
                    a0:fc:9e:e0:c8:cb:6f:56:97:81:00:2e:03:c6:a9:
                    96:65:a1:05:2f:df:b2:73:99:13:99:d6:04:1e:05:
                    3d:7e:d6:69:c7:bb:06:a2:11:3c:fa:1b:84:9f:ea:
                    46:05:b9:f1:e5:d8:73:c8:8e:12:66:33:14:73:0a:
                    a7:0f:d3:aa:d9:c5:c1:7e:0b:47:3f:6e:5b:c3:f1:
                    e0:1a:6d:ee:c3:9c:9b:3e:5b:19:43:1a:6d:49:80:
                    f8:58:62:ea:2e:0b:02:35:3f:4d:61:6f:7d:a3:d8:
                    f7:7b:9f:0f:a6:d5:e2:45:3d:45:d0:ef:33:ed:12:
                    f8:1f:2e:de:8d:3a:29:1c:f9:b1:a3:65:92:c8:65:
                    c1:28:88:6a:88:f5:40:73:72:28:db:91:b9:fe:57:
                    98:8e:5a:48:f3:45:dd:de:9b:ed:76:ce:6f:df:33:
                    64:0e:fe:20:87:ba:35:04:01:1f:30:fa:20:5e:e7:
                    38:37:58:c6:5c:b4:c2:66:17:b3:f3:50:4f:6c:99:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4A:A7:4C:E3:1B:B0:25:6F:32:F0:82:70:2B:8C:2E:33:E0:F4:0F
            X509v3 Authority Key Identifier:
                keyid:23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:6d:23:41:8d:7d:82:72:b9:5b:ca:99:89:e9:71:cb:75:c1:
         f5:00:e9:0a:d2:c0:db:d3:92:30:ec:5b:27:bd:eb:41:37:62:
         e6:99:2c:62:15:34:f0:14:c4:c3:65:86:d0:bf:36:46:33:69:
         8f:7f:9b:4c:0c:44:9b:2e:8a:58:ae:47:c1:e6:50:3f:69:6a:
         57:23:75:15:92:e0:2f:8c:33:cd:80:ed:58:43:82:d8:b5:fe:
         66:24:cd:cb:34:62:1d:67:3a:b1:45:35:02:1a:08:ca:47:55:
         4a:d4:fb:ea:f3:73:d9:43:f4:1e:44:3f:90:64:6d:a6:b9:53:
         ea:91:1f:f3:61:8c:3e:35:89:45:41:d2:13:5e:63:84:b6:32:
         ed:e3:a5:61:a9:02:27:fc:fe:44:f0:c0:39:0f:b7:7e:74:f7:
         41:08:1e:8c:27:a6:6d:06:c6:24:2a:1e:ba:cf:eb:de:1d:3f:
         dc:6f:7a:37:3b:d5:11:7e:c8:20:6a:7e:1c:0d:1e:32:62:28:
         1b:aa:87:ce:4d:b6:53:1b:56:e2:4d:b4:a6:09:1e:e7:e2:a8:
         44:9d:75:61:4a:8b:56:41:bd:bc:df:ab:30:9a:af:95:d4:65:
         79:21:c8:04:c8:b1:00:d5:d0:db:6b:cf:78:56:8c:7c:8a:53:
         67:b3:8a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:00:31 2025 by rpki-client