Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/323830343a333665383a3a2f33322d313238203d3e203532393234.roa
File:                     323830343a333665383a3a2f33322d313238203d3e203532393234.roa (raw, json)
Hash identifier:          CmrKvDLhcDv1r2PrhVlZCz2GKreNOwMygVFrjT4bGkk=
Subject key identifier:   3A:02:90:07:58:2D:43:9F:36:77:CF:7B:A8:DD:0F:1A:18:BB:70:08
Certificate issuer:       /CN=88F45CA9F42577057740B3862841E292FEE58105
Certificate serial:       2CD53D204D5FEBEDBABB27B4F0379E95AC6A25A1
Authority key identifier: 88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/323830343a333665383a3a2f33322d313238203d3e203532393234.roa
Signing time:             Sat 11 Oct 2025 14:46:20 +0000
ROA not before:           Sat 11 Oct 2025 14:41:20 +0000
ROA not after:            Sat 10 Oct 2026 14:46:20 +0000
asID:                     52924
IP address blocks:        2804:36e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.crl
                          rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d5:3d:20:4d:5f:eb:ed:ba:bb:27:b4:f0:37:9e:95:ac:6a:25:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F45CA9F42577057740B3862841E292FEE58105
        Validity
            Not Before: Oct 11 14:41:20 2025 GMT
            Not After : Oct 10 14:46:20 2026 GMT
        Subject: CN=3A029007582D439F3677CF7BA8DD0F1A18BB7008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:fe:2d:2c:76:b5:98:a6:78:21:1a:32:47:
                    64:c3:e6:87:6c:99:f5:3b:74:2d:b0:ae:d6:45:27:
                    00:0b:f9:9a:6f:a3:5d:59:eb:ca:78:43:37:7a:4d:
                    a1:d9:62:db:77:f8:74:e7:01:6e:c6:ce:af:6a:b5:
                    25:9c:f7:ac:d2:f0:2a:e4:55:6c:25:14:14:bb:20:
                    39:80:4b:95:bc:bd:d6:e9:da:0d:93:88:26:f1:5a:
                    ce:95:3e:d3:eb:75:34:79:d2:2c:0a:ca:7e:e2:be:
                    0e:cd:fb:5e:72:1b:cc:f2:d5:54:fb:49:4b:4a:fd:
                    69:85:7c:d9:5d:8f:4e:72:15:45:44:6b:45:c5:11:
                    c7:1c:83:45:e6:05:42:8b:63:43:04:b4:02:b9:f5:
                    97:7c:82:dc:6b:4f:54:4a:2e:d4:3f:76:89:5d:96:
                    13:56:34:f0:f2:7d:23:da:cd:ea:a1:6d:d8:ac:ec:
                    c3:13:07:8f:b7:ac:14:86:ae:95:4b:3c:42:d8:51:
                    e7:a6:bc:af:0b:29:52:d9:64:18:0d:b5:a2:37:78:
                    bd:85:bc:00:d0:42:45:e8:d5:33:2d:14:a6:ed:4d:
                    cf:31:51:c3:a1:53:3f:f2:f6:92:e3:52:90:2e:f6:
                    33:06:4b:4f:3b:02:04:5c:be:92:f2:e2:e3:47:3f:
                    ed:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:02:90:07:58:2D:43:9F:36:77:CF:7B:A8:DD:0F:1A:18:BB:70:08
            X509v3 Authority Key Identifier:
                keyid:88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/323830343a333665383a3a2f33322d313238203d3e203532393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:66:28:34:f0:7d:57:7f:ce:9b:be:dc:74:cc:74:8e:97:be:
         bb:2e:1e:a5:fa:22:d4:ac:19:c5:9b:a2:b8:e6:5a:03:a1:07:
         32:5a:61:57:34:70:e5:5a:8b:64:19:d4:1b:e4:2a:97:32:04:
         52:05:56:b9:0f:81:68:45:a2:e2:e5:a5:03:e9:51:db:c1:af:
         bb:75:83:c2:d1:83:4b:7b:64:f4:13:1e:67:50:49:9a:bb:f1:
         cf:15:53:30:e8:71:91:9f:14:b2:be:73:19:4c:57:27:45:51:
         71:11:07:ca:35:ad:aa:24:0f:97:6a:a2:5c:b9:77:76:69:36:
         4d:7a:b9:f6:91:21:16:bb:64:11:b3:25:8f:b8:dc:fb:c1:87:
         66:0d:e0:97:26:cb:70:28:a4:9b:47:a3:e6:78:e1:83:6e:fc:
         0f:c9:62:b7:52:8f:e9:0d:27:d3:32:ad:d7:28:11:00:32:0a:
         94:82:a6:ac:95:03:3b:c6:96:e0:77:0f:67:c2:0e:dd:86:3c:
         39:e9:e3:af:eb:70:66:f8:1c:d8:f9:60:7d:5d:56:c6:ed:77:
         5f:e1:22:68:11:25:12:ec:23:94:1f:b7:a9:d3:63:f6:e7:2a:
         1e:e0:48:b0:a9:ee:be:99:8c:5a:8a:86:97:c9:df:01:d5:0f:
         35:08:62:2d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULNU9IE1f6+26uye08DeelaxqJaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhGNDVDQTlGNDI1NzcwNTc3NDBCMzg2Mjg0MUUyOTJG
RUU1ODEwNTAeFw0yNTEwMTExNDQxMjBaFw0yNjEwMTAxNDQ2MjBaMDMxMTAvBgNV
BAMTKDNBMDI5MDA3NTgyRDQzOUYzNjc3Q0Y3QkE4REQwRjFBMThCQjcwMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Pf4tLHa1mKZ4IRoyR2TD5ods
mfU7dC2wrtZFJwAL+Zpvo11Z68p4Qzd6TaHZYtt3+HTnAW7Gzq9qtSWc96zS8Crk
VWwlFBS7IDmAS5W8vdbp2g2TiCbxWs6VPtPrdTR50iwKyn7ivg7N+15yG8zy1VT7
SUtK/WmFfNldj05yFUVEa0XFEcccg0XmBUKLY0MEtAK59Zd8gtxrT1RKLtQ/dold
lhNWNPDyfSPazeqhbdis7MMTB4+3rBSGrpVLPELYUeemvK8LKVLZZBgNtaI3eL2F
vADQQkXo1TMtFKbtTc8xUcOhUz/y9pLjUpAu9jMGS087AgRcvpLy4uNHP+0ZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOgKQB1gtQ582d897qN0PGhi7cAgwHwYDVR0j
BBgwFoAUiPRcqfQldwV3QLOGKEHikv7lgQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJzcmNyU0piVm5odUxoWWhCczNycFJUQ3E3bVp5dXJYRm1IV25pbkJH
TUYvMC84OEY0NUNBOUY0MjU3NzA1Nzc0MEIzODYyODQxRTI5MkZFRTU4MTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RjQ1Q0E5RjQyNTc3MDU3
NzQwQjM4NjI4NDFFMjkyRkVFNTgxMDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Qyc3JjclNKYlZuaHVMaFloQnMzcnBSVENxN21aeXVyWEZtSFduaW5CR01GLzAv
MzIzODMwMzQzYTMzMzY2NTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMy
MzkzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ26DANBgkqhkiG9w0BAQsFAAOCAQEAkWYoNPB9
V3/Om77cdMx0jpe+uy4epfoi1KwZxZuiuOZaA6EHMlphVzRw5VqLZBnUG+QqlzIE
UgVWuQ+BaEWi4uWlA+lR28Gvu3WDwtGDS3tk9BMeZ1BJmrvxzxVTMOhxkZ8Usr5z
GUxXJ0VRcREHyjWtqiQPl2qiXLl3dmk2TXq59pEhFrtkEbMlj7jc+8GHZg3glybL
cCikm0ej5njhg278D8lit1KP6Q0n0zKt1ygRADIKlIKmrJUDO8aW4HcPZ8IO3YY8
Oenjr+twZvgc2PlgfV1Wxu13X+EiaBElEuwjlB+3qdNj9ucqHuBIsKnuvpmMWoqG
l8nfAdUPNQhiLQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 08:37:35 2025 by rpki-client