Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a3a2f33332d3333203d3e20323639333732.roa
File:                     323830343a363339633a3a2f33332d3333203d3e20323639333732.roa (raw, json)
Hash identifier:          2XXy+GOOZgA0eTuTlbgGjhU5C3m4fpzpr0GnsOjWzH0=
Subject key identifier:   22:FF:12:74:7F:CA:EE:D4:28:A9:1E:00:46:E2:AB:5B:83:1D:58:F5
Certificate issuer:       /CN=DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A
Certificate serial:       06AFB6DC1121B706F4169373C0B5CD595DAA482B
Authority key identifier: DC:ED:51:96:81:4C:98:4E:AF:EF:CD:AE:94:DB:A8:6A:0D:3C:7F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a3a2f33332d3333203d3e20323639333732.roa
Signing time:             Mon 29 Sep 2025 17:35:17 +0000
ROA not before:           Mon 29 Sep 2025 17:30:17 +0000
ROA not after:            Mon 28 Sep 2026 17:35:17 +0000
asID:                     269372
IP address blocks:        2804:639c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.crl
                          rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:af:b6:dc:11:21:b7:06:f4:16:93:73:c0:b5:cd:59:5d:aa:48:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A
        Validity
            Not Before: Sep 29 17:30:17 2025 GMT
            Not After : Sep 28 17:35:17 2026 GMT
        Subject: CN=22FF12747FCAEED428A91E0046E2AB5B831D58F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:4b:53:9e:01:c8:34:4f:05:a8:92:48:44:
                    44:42:6b:e6:90:5c:4e:37:97:9f:48:3d:d3:23:ac:
                    b3:79:fb:0a:46:b2:22:78:f5:45:84:e4:cd:83:c2:
                    f4:ed:ab:e0:b3:dd:58:e5:5c:84:00:14:a0:4d:d6:
                    3f:3b:6d:8b:f5:fc:33:24:7a:e1:ed:a5:22:9b:64:
                    e5:a4:ce:82:89:55:e4:9b:7a:b3:6e:1a:c7:ca:f6:
                    c1:87:2f:2d:da:03:3b:74:02:cd:62:71:c0:d3:1d:
                    cc:c0:36:63:fa:2a:24:38:7f:c0:99:55:3a:10:fb:
                    a1:91:15:ef:a6:48:c9:90:83:01:35:88:4e:a9:98:
                    97:eb:9b:2f:35:0a:70:b8:ef:db:35:2d:17:2f:30:
                    ae:46:98:0b:69:ce:29:c1:59:8e:69:02:0c:87:8b:
                    12:a3:35:3e:90:de:ac:80:41:19:7c:11:b2:e3:61:
                    44:50:e2:6d:eb:f3:28:69:bc:52:2c:5b:05:1d:df:
                    ef:9d:74:df:71:c0:9b:ec:af:67:02:e8:35:75:e0:
                    fb:77:7c:a6:5e:d8:82:9a:a4:31:ce:4a:cb:78:4f:
                    cd:13:54:17:45:6e:2b:b5:76:b6:db:b9:6c:59:70:
                    03:dd:62:b5:4d:bf:8c:85:fe:13:c5:89:4f:f4:46:
                    45:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FF:12:74:7F:CA:EE:D4:28:A9:1E:00:46:E2:AB:5B:83:1D:58:F5
            X509v3 Authority Key Identifier:
                keyid:DC:ED:51:96:81:4C:98:4E:AF:EF:CD:AE:94:DB:A8:6A:0D:3C:7F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a3a2f33332d3333203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:639c::/33

    Signature Algorithm: sha256WithRSAEncryption
         b6:90:fb:dd:26:d9:74:f0:28:d7:5e:66:b5:86:71:83:4b:08:
         19:79:de:7a:da:10:a3:15:f0:2a:9f:af:03:18:18:25:52:8e:
         0b:99:8b:77:b4:a1:6b:5a:75:bf:91:ca:8d:6c:c2:f7:de:54:
         dc:f4:e2:31:c1:6e:9c:d8:7b:32:22:3a:56:10:23:7c:12:18:
         65:9f:42:30:79:b3:2b:15:00:8e:b8:c2:bf:5a:23:b4:9c:0c:
         6d:70:e2:a3:fd:d9:5b:4a:5b:8c:73:08:c7:6b:ed:03:d5:fd:
         10:9a:ea:25:82:f5:01:d5:b0:48:97:7f:33:fa:38:b1:cd:6b:
         f7:ef:d8:34:1b:f5:fb:84:2d:71:f1:15:ef:29:6d:d0:f5:7e:
         9e:b4:9d:72:04:a5:aa:60:2a:08:00:54:4a:b4:a0:a0:a0:73:
         10:40:5b:d3:a1:5b:80:3d:24:a7:b0:99:4c:9c:49:b9:4d:50:
         12:2e:fe:e0:79:8f:fe:51:ba:c5:9e:c4:be:d2:ae:9e:6a:8e:
         23:8d:57:ad:30:2a:19:0e:4c:30:14:d2:98:8a:dd:51:3a:da:
         a4:14:6e:bc:a9:3a:5f:b1:74:42:ce:a7:2b:ae:08:5a:53:50:
         c2:3d:0c:0d:16:04:d2:b6:7f:23:1e:ea:21:3f:ab:82:33:e7:
         56:f4:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:47 2025 by rpki-client