Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/323830343a3836633a3a2f33322d3438203d3e20323632333639.roa
File:                     323830343a3836633a3a2f33322d3438203d3e20323632333639.roa (raw, json)
Hash identifier:          dYygwWUZKVm38j2dSuJZZjuzcHudNcicLgugSISMyEM=
Subject key identifier:   1D:D6:D8:B5:86:7F:B5:B5:54:51:3C:11:9C:CB:47:1E:24:B9:90:BE
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       357F75994549EE51D583BCD8053535AA7B31B006
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/323830343a3836633a3a2f33322d3438203d3e20323632333639.roa
Signing time:             Tue 14 Oct 2025 19:00:00 +0000
ROA not before:           Tue 14 Oct 2025 18:55:00 +0000
ROA not after:            Tue 13 Oct 2026 19:00:00 +0000
asID:                     262369
IP address blocks:        2804:86c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 22:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7f:75:99:45:49:ee:51:d5:83:bc:d8:05:35:35:aa:7b:31:b0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Oct 14 18:55:00 2025 GMT
            Not After : Oct 13 19:00:00 2026 GMT
        Subject: CN=1DD6D8B5867FB5B554513C119CCB471E24B990BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:e2:7e:ba:f7:92:b2:00:13:4a:9e:47:8d:
                    c3:09:51:08:af:16:55:2e:0e:ad:24:32:e9:ed:04:
                    4e:b2:ce:c7:ad:9c:ca:4e:94:ae:fa:aa:46:7a:08:
                    9e:6e:2a:2f:ce:e8:29:b2:08:ac:4f:aa:8f:37:a7:
                    2f:0f:63:0a:1a:e3:9d:5b:94:ae:af:ff:a8:28:de:
                    f2:25:26:17:27:17:cf:cb:7c:68:1f:a6:f4:c1:d8:
                    ea:32:23:dd:7e:b6:fa:a1:4f:b2:60:94:ce:be:11:
                    7c:5c:ce:f1:85:c1:94:4f:2b:d6:aa:3e:7e:6a:01:
                    c5:45:3d:04:06:43:3d:d6:68:69:1c:bf:9a:bc:19:
                    2e:14:8a:d6:7b:0a:9b:f1:73:48:b7:3b:6a:cb:b9:
                    90:90:6f:b4:58:70:c6:8c:c5:95:9c:6f:d6:bb:d3:
                    4f:26:89:dc:6c:70:13:d9:7a:85:ff:04:53:35:c8:
                    29:51:5a:3d:1f:a6:b7:71:d5:6b:a6:a1:53:84:3b:
                    8b:65:b0:7e:f1:c8:5f:d6:8e:0e:c6:bd:b5:2d:df:
                    8e:2e:4f:76:6f:34:68:3f:c2:b6:2e:98:4a:8b:f4:
                    bb:2a:2e:ab:e3:86:d3:9a:f2:e1:b9:92:b7:6e:ef:
                    bc:68:7d:ee:42:f9:df:b5:5b:57:08:ab:72:66:f8:
                    21:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D6:D8:B5:86:7F:B5:B5:54:51:3C:11:9C:CB:47:1E:24:B9:90:BE
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/323830343a3836633a3a2f33322d3438203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:c3:9c:1d:f3:10:d1:60:1e:76:84:fa:93:f1:34:52:62:
         a8:42:17:62:33:27:ce:e8:7d:cc:ff:44:49:07:68:b7:c6:4b:
         64:97:d7:b2:08:d9:ea:04:81:3f:12:e0:98:29:59:fd:05:f1:
         cd:66:92:0f:c6:03:f1:67:3f:09:e4:86:0c:4d:1b:ea:85:97:
         ab:5c:3a:dd:39:d1:b4:f7:ab:f4:33:7b:eb:81:d9:51:e6:9f:
         43:f2:2a:77:80:a0:2d:d7:0a:57:21:7a:a7:7c:ed:c2:46:ea:
         3b:eb:8c:03:79:d9:25:f1:0a:10:bf:5e:e9:16:f7:f1:6c:d6:
         19:63:50:41:c4:59:7d:2c:8d:59:a8:a7:24:17:99:41:e0:76:
         7f:30:73:71:a9:fe:2a:e1:b6:c5:91:56:97:f4:93:01:ff:0c:
         36:bc:a8:e5:cf:95:f2:af:aa:0b:56:5d:24:3d:26:2a:1d:c3:
         47:4b:3a:bb:06:2f:2b:fa:84:cf:db:86:e4:11:9e:ab:02:be:
         51:b0:5f:47:c2:83:0e:38:44:22:09:34:33:70:3a:9d:94:c2:
         da:fb:ec:58:85:0d:ca:e7:7f:5c:3f:57:5c:b0:79:1b:ad:bf:
         76:46:39:6e:67:e1:04:19:ad:c6:2f:a8:48:10:39:57:79:1c:
         29:22:b7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:25:31 2025 by rpki-client