Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a323035383a3a2f33322d3438203d3e20323632393037.roa
File:                     323830343a323035383a3a2f33322d3438203d3e20323632393037.roa (raw, json)
Hash identifier:          o5uYbTzAgQ3pucToRpKCsvhdLdW7Z6ppYCgulthVuMg=
Subject key identifier:   1E:36:65:F2:34:0D:15:F0:A9:EF:CB:DC:8F:3A:68:E4:56:DF:64:75
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       33A26391DDE274D94D46F431A0E077B1A76513F3
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a323035383a3a2f33322d3438203d3e20323632393037.roa
Signing time:             Wed 15 Oct 2025 18:12:17 +0000
ROA not before:           Wed 15 Oct 2025 18:07:17 +0000
ROA not after:            Wed 14 Oct 2026 18:12:17 +0000
asID:                     262907
IP address blocks:        2804:2058::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a2:63:91:dd:e2:74:d9:4d:46:f4:31:a0:e0:77:b1:a7:65:13:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Oct 15 18:07:17 2025 GMT
            Not After : Oct 14 18:12:17 2026 GMT
        Subject: CN=1E3665F2340D15F0A9EFCBDC8F3A68E456DF6475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:9f:57:d3:6f:91:b8:fd:ce:f8:74:0e:c0:
                    d2:17:a0:f7:a3:90:9c:89:de:0b:4c:0c:79:a7:82:
                    88:57:59:73:93:5a:ae:ca:3c:1b:c3:df:cd:ef:c6:
                    83:e5:0e:05:65:6d:99:12:0f:3d:c4:4f:14:39:ed:
                    b5:23:f9:8f:3d:19:43:4b:49:a0:24:75:80:c4:d8:
                    e7:d4:6b:b5:0d:6c:b5:65:46:f7:0c:12:85:66:27:
                    4c:6a:ee:43:80:1f:06:01:a6:31:e1:00:94:fa:d3:
                    06:bb:78:f8:fd:5a:07:01:b7:69:cf:9b:01:e1:d5:
                    a0:1a:44:1a:5e:08:40:3d:b5:6f:60:ef:41:28:c6:
                    01:49:54:f8:b1:b1:e4:f2:27:20:05:81:a3:d3:37:
                    6f:fc:e0:2a:7e:90:1c:2e:c2:6d:32:10:d5:2a:5b:
                    cc:25:de:bf:7e:1e:cb:77:3e:ac:8f:ac:4a:8e:5c:
                    3b:46:51:96:9d:af:f3:e1:43:a7:91:25:dc:00:e8:
                    9a:27:ed:7e:5b:f7:bd:46:e4:99:be:1c:c2:62:d6:
                    e7:88:ca:32:b5:fa:58:9d:60:bf:8e:b9:0a:5c:51:
                    48:fc:ac:55:bb:44:10:7a:81:b5:34:3c:40:64:5a:
                    4d:9b:a0:38:16:8e:31:09:58:fd:5f:3a:96:26:c6:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:36:65:F2:34:0D:15:F0:A9:EF:CB:DC:8F:3A:68:E4:56:DF:64:75
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a323035383a3a2f33322d3438203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2058::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:bf:71:d4:d3:5a:ca:91:35:82:46:76:0e:82:38:a6:b2:09:
         9d:3f:e9:64:a6:09:1e:c5:f7:fa:80:84:b4:1a:42:eb:7f:d1:
         2b:c8:6e:3c:de:b0:c4:ba:eb:6c:a6:8b:eb:9b:d1:14:14:2a:
         04:4c:6d:68:35:6f:fa:e1:69:07:99:72:d9:f3:72:9a:d4:a1:
         78:98:72:34:87:cd:08:b8:e4:c0:ff:87:ba:76:eb:dd:f8:3c:
         ce:22:d2:55:70:eb:b6:96:a0:d6:12:f4:98:ae:b3:34:a7:3a:
         c6:82:94:56:ed:64:57:bf:4d:5b:da:3d:b7:4b:75:63:59:48:
         4b:02:88:4b:06:c4:e4:f1:f0:84:5d:41:c5:6e:72:be:e4:0a:
         81:3f:b7:19:fb:99:84:5b:f3:1e:4b:b3:ab:64:a3:2e:81:65:
         4a:ea:3c:44:54:b1:e9:4e:e3:a0:bb:8f:24:4c:85:ce:d3:2e:
         12:95:89:8c:e7:36:1a:e5:3d:37:45:42:d0:12:d6:af:fa:36:
         b3:d4:6e:8b:b0:4a:25:3d:85:2f:93:9f:9d:95:b6:3a:95:15:
         c4:18:5f:c3:18:8a:92:bf:19:0c:0c:45:0e:10:67:cb:ba:ba:
         b5:16:e9:83:ac:69:be:ac:23:1e:97:bb:15:8d:9e:17:c8:a2:
         62:aa:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:31:32 2025 by rpki-client