Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a653030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a653030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          J+Yk3+lyCd9SAS8q0i0/lgJgr8T9uyEqCLIVFK8iKig=
Subject key identifier:   B1:C6:55:49:EE:5B:CF:A8:47:B9:0B:76:D3:BF:C0:78:78:C2:60:CD
Certificate issuer:       /CN=199E6A493967FE55BA0140061BC6435DD8779FD9
Certificate serial:       1867F2803A249AE8A86DDFAFA6F8A843C4C60F6B
Authority key identifier: 19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a653030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Fri 17 Oct 2025 12:00:25 +0000
ROA not before:           Fri 17 Oct 2025 11:55:25 +0000
ROA not after:            Fri 16 Oct 2026 12:00:25 +0000
asID:                     267991
IP address blocks:        2804:5654:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:67:f2:80:3a:24:9a:e8:a8:6d:df:af:a6:f8:a8:43:c4:c6:0f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199E6A493967FE55BA0140061BC6435DD8779FD9
        Validity
            Not Before: Oct 17 11:55:25 2025 GMT
            Not After : Oct 16 12:00:25 2026 GMT
        Subject: CN=B1C65549EE5BCFA847B90B76D3BFC07878C260CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:79:f1:2b:51:84:70:f9:df:46:1f:69:34:
                    c5:81:b5:95:b5:d4:49:94:91:c5:3b:d0:a1:dc:57:
                    79:9b:28:dc:08:57:e3:fa:c4:8d:8d:cd:10:50:04:
                    aa:22:c0:ae:e0:08:bb:20:cb:7f:b7:44:26:d1:52:
                    fc:0d:fc:6a:7c:7f:4a:d1:ae:de:c8:2e:84:aa:ea:
                    f2:b2:64:11:8a:c1:3c:3e:1a:2a:76:a2:37:42:a8:
                    62:6f:62:03:47:1f:0a:93:64:ac:79:14:6f:2f:09:
                    2a:a3:a3:c9:51:2c:07:f6:3b:43:08:d6:df:96:ed:
                    60:f9:f6:6a:c5:ae:69:ae:76:13:0b:30:1e:ac:b6:
                    27:6c:7a:9d:b3:0c:fb:23:45:d0:42:70:13:b8:98:
                    27:a9:a6:a2:01:79:93:45:5c:24:97:6a:df:0d:60:
                    4b:e6:fa:0a:7b:8e:c8:a0:3d:31:d4:4a:b9:df:23:
                    5d:23:3a:ec:0b:50:50:09:5b:49:f0:98:c0:95:a1:
                    be:5c:b8:70:66:59:4b:3a:5d:bc:84:35:94:7a:e9:
                    0e:96:fa:8e:9a:31:e9:fa:4d:cc:cb:af:4c:57:f4:
                    e3:71:e5:b6:b6:cd:28:84:d1:53:8c:a8:70:f9:e1:
                    e7:32:66:f2:d2:57:92:12:60:44:9f:82:f9:9a:94:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C6:55:49:EE:5B:CF:A8:47:B9:0B:76:D3:BF:C0:78:78:C2:60:CD
            X509v3 Authority Key Identifier:
                keyid:19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a653030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5f:7a:fd:a9:d4:42:04:f5:94:16:8b:f4:a3:60:7a:8b:56:62:
         16:72:92:e6:3f:fe:31:a0:0e:d6:d4:fa:3f:30:e2:cd:48:df:
         1a:df:5d:22:30:ba:9b:15:6e:04:51:4a:08:ea:18:87:cb:74:
         32:f7:91:fe:c0:3c:33:56:cb:34:cb:71:46:60:da:57:2f:f2:
         3b:fd:8a:51:3b:9f:2b:f0:02:b6:26:31:5d:f8:b4:43:3d:28:
         16:5c:f0:3c:df:41:8a:a5:e4:cc:9b:83:19:c6:a6:25:87:0f:
         de:bf:44:4f:55:5b:bb:d5:b7:3b:6e:6a:e5:bc:5f:35:40:fd:
         91:b1:2a:8d:a0:40:72:76:6f:ca:04:b6:7e:03:0a:49:53:48:
         25:6b:1c:f6:82:2c:37:52:7d:0b:f1:c5:cd:c7:ab:48:b8:83:
         3c:e6:00:1a:24:df:31:fa:81:ad:2c:3b:65:c9:23:1a:e6:76:
         dc:1c:8c:9b:83:52:a1:75:6e:44:8f:50:7e:11:36:b6:dd:13:
         5f:c2:77:19:73:84:34:0b:dc:af:68:da:6f:63:7c:38:06:ad:
         ba:1d:67:69:f4:d8:36:a2:00:40:79:f7:7a:aa:41:9d:ec:f8:
         3e:b0:3d:0f:36:9a:bf:00:34:95:49:db:6b:71:79:b7:92:c5:
         3b:54:84:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:39:52 2025 by rpki-client