Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a623030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a623030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          3IxMvmM/qCl81hdBRS5u5Iws6Fh7Rd2FWxxuDoTOuqs=
Subject key identifier:   D0:1C:7C:64:17:F6:9E:B4:F0:44:B9:32:CD:68:6D:E6:F4:59:79:F7
Certificate issuer:       /CN=199E6A493967FE55BA0140061BC6435DD8779FD9
Certificate serial:       08310A21BC0103BDEB294AA118C07A7A4F55199C
Authority key identifier: 19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a623030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Fri 17 Oct 2025 12:00:22 +0000
ROA not before:           Fri 17 Oct 2025 11:55:22 +0000
ROA not after:            Fri 16 Oct 2026 12:00:22 +0000
asID:                     267991
IP address blocks:        2804:5654:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:31:0a:21:bc:01:03:bd:eb:29:4a:a1:18:c0:7a:7a:4f:55:19:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199E6A493967FE55BA0140061BC6435DD8779FD9
        Validity
            Not Before: Oct 17 11:55:22 2025 GMT
            Not After : Oct 16 12:00:22 2026 GMT
        Subject: CN=D01C7C6417F69EB4F044B932CD686DE6F45979F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:ec:bd:19:39:65:73:32:17:59:97:fb:cc:
                    ba:49:1e:ff:b0:1e:82:ab:d9:89:ac:95:28:ce:91:
                    d7:d8:50:b9:8f:75:81:65:d5:ec:ec:1a:6d:02:54:
                    ff:37:9d:9f:8e:3e:74:29:e4:5b:3f:b1:a1:01:ed:
                    8f:1b:ba:f5:b7:f3:26:b9:31:e8:fa:56:c6:41:ea:
                    43:fd:b0:ef:49:43:d7:87:ba:b3:14:b3:1e:48:4e:
                    33:91:74:ce:09:20:67:cc:53:b0:5e:58:61:a4:69:
                    6d:7b:c5:e8:2c:a8:30:e0:da:f7:6a:80:6d:88:aa:
                    19:96:98:e4:47:53:d5:ec:29:2f:99:9d:5c:5b:f1:
                    82:9a:d2:6f:0b:b5:80:7f:ed:61:84:76:b2:a2:1d:
                    01:66:2c:cf:f9:75:3c:b2:23:b4:73:16:ca:81:ac:
                    b2:46:44:8b:bc:33:d1:5a:a4:c0:4f:59:83:77:13:
                    bd:bf:6f:c4:88:1d:75:68:c8:e8:ad:88:fd:9c:16:
                    a7:08:e9:5b:8d:c3:1b:96:b3:b3:fc:5d:8b:be:97:
                    a3:5e:e1:00:44:d9:91:04:79:5a:c9:f8:99:93:0b:
                    07:b9:89:fc:6d:ce:75:35:8e:54:91:7e:4b:99:e0:
                    57:25:5e:53:56:f7:64:89:51:0c:89:dd:22:f2:d7:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1C:7C:64:17:F6:9E:B4:F0:44:B9:32:CD:68:6D:E6:F4:59:79:F7
            X509v3 Authority Key Identifier:
                keyid:19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a623030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         92:40:48:12:ff:66:ff:0e:41:fb:19:95:84:3c:57:5f:0c:da:
         13:f1:91:a6:8a:ee:4d:e8:9a:ae:8e:59:79:51:e9:6b:c6:91:
         fe:80:37:9e:0d:cc:cb:ec:b1:28:a8:2e:e3:0e:cb:69:68:ae:
         fb:f8:5c:f2:b3:0f:e4:84:e2:79:61:3d:44:6e:57:c8:d9:41:
         47:c3:dc:89:4f:4d:9f:57:75:f6:95:a8:fa:43:94:2c:ed:ea:
         49:48:92:5b:79:cd:f1:9b:5f:a7:c3:aa:2d:f6:b0:ea:b6:84:
         c1:8c:8f:1d:97:29:a5:e8:f0:e1:02:f5:fd:99:7d:9c:9f:24:
         64:70:54:bc:66:91:b2:aa:30:f0:83:30:81:5e:e9:6b:c6:34:
         7a:7b:a0:2e:92:38:05:e5:a3:bf:0f:e7:13:73:9a:5b:d4:8e:
         1d:3d:6a:be:22:75:d4:08:04:b9:fa:b5:5f:00:ab:38:b3:88:
         00:bf:b8:69:cb:47:dd:b3:4d:48:97:f5:49:db:78:94:96:5d:
         09:cf:e0:8b:55:9a:01:65:fe:09:d8:84:ae:44:61:b7:e1:9f:
         c7:ba:d4:74:0c:f2:14:be:e0:81:3e:07:d8:82:ee:13:96:98:
         6e:c8:55:89:99:f4:15:6f:17:bc:80:a7:bc:69:ba:20:9a:51:
         2d:e7:56:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:39:52 2025 by rpki-client