Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/323830343a336163383a3a2f33322d313238203d3e20323636313039.roa
File:                     323830343a336163383a3a2f33322d313238203d3e20323636313039.roa (raw, json)
Hash identifier:          Jgbac0riOJUgN7URLxriehRE7j3/ToQ4EHNWzUeccPs=
Subject key identifier:   84:CD:64:CD:76:36:74:82:92:2D:CA:AB:12:3D:5E:C8:A3:1B:E6:97
Certificate issuer:       /CN=77CCF7DDC54E91B783BD705032C44EBE1A52DAA1
Certificate serial:       46480A4F55B324D3BB38744B6DBD773506F6F97A
Authority key identifier: 77:CC:F7:DD:C5:4E:91:B7:83:BD:70:50:32:C4:4E:BE:1A:52:DA:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/323830343a336163383a3a2f33322d313238203d3e20323636313039.roa
Signing time:             Wed 01 Oct 2025 16:53:20 +0000
ROA not before:           Wed 01 Oct 2025 16:48:20 +0000
ROA not after:            Wed 30 Sep 2026 16:53:20 +0000
asID:                     266109
IP address blocks:        2804:3ac8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.crl
                          rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:48:0a:4f:55:b3:24:d3:bb:38:74:4b:6d:bd:77:35:06:f6:f9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77CCF7DDC54E91B783BD705032C44EBE1A52DAA1
        Validity
            Not Before: Oct  1 16:48:20 2025 GMT
            Not After : Sep 30 16:53:20 2026 GMT
        Subject: CN=84CD64CD76367482922DCAAB123D5EC8A31BE697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:f7:b6:cc:d9:bc:0c:31:18:f5:ab:63:61:
                    2e:72:d7:99:73:78:01:a2:85:86:0e:f5:ab:cc:36:
                    80:24:66:83:e7:9f:a6:ac:bc:82:75:44:a5:75:3d:
                    ba:f9:74:0c:83:c2:1d:91:c3:2b:86:71:92:9b:0e:
                    c4:e3:a7:98:0d:f9:e9:ed:9b:db:a7:10:fa:7b:fe:
                    1c:22:25:8f:49:80:02:df:78:73:65:19:d9:fd:ba:
                    26:80:3c:02:a7:79:9c:3b:c0:5d:39:7f:c3:b7:da:
                    19:87:51:e5:19:f1:fb:2b:a0:39:57:e5:2c:65:84:
                    1c:6f:4a:72:62:4d:b3:a0:ce:f6:7c:2e:9d:35:77:
                    60:a5:5e:90:c3:92:b2:e3:37:d8:84:d8:c0:25:30:
                    e2:78:14:8f:02:d7:2d:c3:98:1f:04:fd:c0:04:ab:
                    62:45:14:b3:63:08:84:31:da:22:35:cb:37:32:fc:
                    3c:cf:15:e9:58:be:ec:a5:00:c8:fc:5d:25:c1:5a:
                    3c:e1:55:d5:a7:1e:27:cf:47:1b:c3:70:94:4b:46:
                    b3:c4:02:fe:ac:1b:95:1d:00:27:05:b8:89:4b:61:
                    d3:9c:d4:d5:ec:91:37:7b:a2:c7:c6:98:ed:ad:04:
                    21:13:bb:58:3a:ee:0e:b0:03:b5:c7:5a:76:ba:ca:
                    3e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CD:64:CD:76:36:74:82:92:2D:CA:AB:12:3D:5E:C8:A3:1B:E6:97
            X509v3 Authority Key Identifier:
                keyid:77:CC:F7:DD:C5:4E:91:B7:83:BD:70:50:32:C4:4E:BE:1A:52:DA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/323830343a336163383a3a2f33322d313238203d3e20323636313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:b6:18:f3:d1:19:87:36:c4:8d:0f:48:84:40:3c:82:a5:5a:
         43:ee:87:ad:15:c2:8c:24:86:be:38:91:59:47:01:7f:9a:c5:
         a3:16:ce:30:da:1a:04:b5:73:c3:3a:4b:9c:da:73:a4:bb:e4:
         9b:30:02:4c:bf:77:eb:39:00:40:1f:a0:ea:30:f2:e3:14:46:
         f1:4d:08:df:70:cd:e0:42:de:d1:15:53:9b:d3:a8:f7:f0:8e:
         3a:76:45:58:f6:7f:93:3b:46:90:6c:6a:83:be:01:2b:90:5f:
         e1:5e:ba:e9:80:35:99:2e:08:ce:9d:ba:99:ec:15:b3:6e:27:
         42:ac:63:23:50:f7:69:80:d1:82:45:3e:e6:2a:74:38:5e:9c:
         53:fc:d3:06:55:66:d9:28:5a:68:7e:01:da:44:fc:76:45:2b:
         55:e2:30:33:e6:64:51:81:e8:93:d3:2f:cb:fe:b8:4f:7c:91:
         0a:04:70:bb:24:88:36:2f:5c:d2:3c:2a:0c:0c:85:02:a3:a1:
         89:b1:89:c6:7d:38:35:cb:17:8a:91:4c:09:40:78:45:f8:66:
         aa:52:e9:55:0f:69:81:7f:aa:ad:eb:63:4f:e6:67:6a:fd:75:
         c0:1e:7b:8e:29:d0:b6:8c:43:bb:3f:9a:25:d5:bb:db:c6:a9:
         92:70:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:34:29 2025 by rpki-client