Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/323830343a313661303a3a2f33322d3438203d3e203631393038.roa
File:                     323830343a313661303a3a2f33322d3438203d3e203631393038.roa (raw, json)
Hash identifier:          SJwWMVcW/R4MVm7fqAAEcDXrhO9/opvkLPKGfeP40SA=
Subject key identifier:   35:D4:80:94:7D:1D:64:BA:F7:38:30:39:0B:39:C7:F2:5C:CB:23:E9
Certificate issuer:       /CN=BB0E18F43E99502212097842E9F81169A8D29D2E
Certificate serial:       5E706839FCF757303C79DACC4D89CC8255DAA8F7
Authority key identifier: BB:0E:18:F4:3E:99:50:22:12:09:78:42:E9:F8:11:69:A8:D2:9D:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/323830343a313661303a3a2f33322d3438203d3e203631393038.roa
Signing time:             Mon 15 Sep 2025 00:32:39 +0000
ROA not before:           Mon 15 Sep 2025 00:27:39 +0000
ROA not after:            Mon 14 Sep 2026 00:32:39 +0000
asID:                     61908
IP address blocks:        2804:16a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.crl
                          rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:70:68:39:fc:f7:57:30:3c:79:da:cc:4d:89:cc:82:55:da:a8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0E18F43E99502212097842E9F81169A8D29D2E
        Validity
            Not Before: Sep 15 00:27:39 2025 GMT
            Not After : Sep 14 00:32:39 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b9:01:d9:89:cb:59:6c:02:66:33:09:19:89:
                    b8:0f:b3:10:52:d0:26:22:01:35:0b:41:9b:82:c2:
                    46:b1:87:1e:fa:2f:4a:d7:2d:4e:66:ec:e6:ad:14:
                    d6:6b:38:cc:c1:9b:74:8e:d5:96:8d:d0:a2:14:a6:
                    61:0c:db:82:40:91:03:d4:54:b2:41:66:80:4d:51:
                    36:36:76:ac:91:71:18:5d:f6:df:96:51:74:be:fa:
                    ff:5e:37:8f:e2:ae:52:6a:d7:a4:f3:46:59:db:3e:
                    45:c3:4d:bf:20:5e:c3:06:b8:4a:6c:33:2a:72:7d:
                    50:26:19:e9:c3:af:42:98:d0:93:e1:eb:99:7b:53:
                    a4:68:c7:a2:fe:df:f0:15:ce:71:e7:6e:69:35:9d:
                    2e:dc:54:ad:06:f9:4a:d7:c7:45:15:c9:06:fa:c4:
                    2e:3c:a6:da:a9:2c:55:c7:ce:c8:e9:a2:54:ae:e6:
                    64:6d:e1:b0:3d:ee:e8:f8:f8:50:69:53:76:25:13:
                    92:77:1e:72:32:58:c0:16:88:5b:15:d7:30:d9:41:
                    fc:d2:0c:26:36:d0:13:c0:8d:b9:87:59:c2:cf:e2:
                    8c:a2:c3:0b:e4:77:a4:41:81:f9:f9:b9:bb:75:16:
                    47:09:61:bf:62:1e:7e:2b:33:1c:30:52:fb:1c:5e:
                    ee:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D4:80:94:7D:1D:64:BA:F7:38:30:39:0B:39:C7:F2:5C:CB:23:E9
            X509v3 Authority Key Identifier:
                keyid:BB:0E:18:F4:3E:99:50:22:12:09:78:42:E9:F8:11:69:A8:D2:9D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/323830343a313661303a3a2f33322d3438203d3e203631393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:36:fd:b2:64:f0:72:e9:fe:13:36:44:bd:3b:11:0b:19:3f:
         6d:59:2a:28:12:0f:44:c1:58:27:e4:4e:96:04:a6:96:c5:7f:
         bd:b1:4b:5a:37:9c:98:ba:4a:68:c4:fc:9e:0e:69:c4:c0:34:
         9b:de:7f:07:39:96:68:d8:a9:33:66:6a:5e:d7:14:be:57:86:
         3d:d8:9b:05:44:cf:af:b6:a5:06:f7:cd:ba:ad:d7:9f:53:1e:
         07:92:c5:f0:61:44:47:de:ce:34:05:88:e4:38:a5:d6:d1:08:
         98:e6:1b:7e:e6:00:ee:d8:b0:e6:81:5c:f7:6e:6a:40:d3:70:
         ab:57:e5:f6:9e:1e:55:ca:61:07:c8:bb:e7:2d:89:8d:f6:b5:
         53:d7:ba:99:fa:25:57:f5:f9:ae:2b:33:6b:56:95:e6:b3:40:
         0a:87:e6:6e:4f:57:af:e2:47:6d:86:8e:bf:3a:ba:27:c2:47:
         f9:af:0d:ab:92:4d:9c:e2:97:53:6b:f4:27:80:ba:fe:cc:54:
         55:10:de:6e:b1:22:c2:a6:b2:01:57:d6:e9:25:f6:60:25:56:
         d7:84:ce:7c:cc:6d:bd:7c:ff:c5:bd:7d:ee:44:99:07:93:40:
         ae:5a:15:a2:b6:55:83:50:71:01:fb:62:31:d3:5a:09:6a:84:
         96:16:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:35:46 2025 by rpki-client