Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33332d3333203d3e20323636333735.roa
File:                     323830343a333664343a3a2f33332d3333203d3e20323636333735.roa (raw, json)
Hash identifier:          RH/Sv65Ft1ThsF/BDwpSOjpWWQuG1TyyMTutLdKqsxA=
Subject key identifier:   D2:2B:F0:26:FB:3D:DB:C6:EF:38:9B:54:1A:61:A2:A3:04:99:AC:CB
Certificate issuer:       /CN=373AA600A42BCF5792AF8D4124740F5E66B9D44A
Certificate serial:       0A7B834D7F845B93803436BB598075423A0D7460
Authority key identifier: 37:3A:A6:00:A4:2B:CF:57:92:AF:8D:41:24:74:0F:5E:66:B9:D4:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33332d3333203d3e20323636333735.roa
Signing time:             Thu 25 Sep 2025 13:20:03 +0000
ROA not before:           Thu 25 Sep 2025 13:15:03 +0000
ROA not after:            Thu 24 Sep 2026 13:20:03 +0000
asID:                     266375
IP address blocks:        2804:36d4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7b:83:4d:7f:84:5b:93:80:34:36:bb:59:80:75:42:3a:0d:74:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373AA600A42BCF5792AF8D4124740F5E66B9D44A
        Validity
            Not Before: Sep 25 13:15:03 2025 GMT
            Not After : Sep 24 13:20:03 2026 GMT
        Subject: CN=D22BF026FB3DDBC6EF389B541A61A2A30499ACCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:5e:32:35:61:fa:5e:6c:76:c1:29:1b:cb:
                    ed:a4:f0:dd:c8:af:8e:ed:29:dc:f5:71:6e:c2:de:
                    a7:db:93:7d:81:59:0f:11:e3:ee:d3:42:b5:9a:51:
                    9c:9d:9d:88:90:78:8d:08:f4:e0:72:f2:17:a8:c7:
                    4c:da:fb:21:b2:09:ce:e5:7e:7f:a8:2f:87:22:0e:
                    3e:7c:42:8e:8a:e6:55:11:c6:a5:83:75:7c:66:85:
                    3b:8d:93:b2:7c:c8:93:5d:f8:cb:82:2d:38:39:8a:
                    a5:30:90:63:06:a9:aa:b4:64:a7:75:92:e5:cf:6f:
                    18:c2:af:50:15:b1:85:ea:4a:09:b9:fb:a6:43:ca:
                    e1:de:c5:0b:48:eb:07:05:42:7a:81:2d:47:dc:28:
                    9e:be:75:c6:08:85:fb:da:fe:9c:a4:4d:cf:54:f2:
                    b6:d9:3e:a7:c5:45:cf:b8:25:ff:60:5b:d2:9d:bc:
                    13:7d:66:47:38:95:fb:ea:1f:c7:d5:ab:63:aa:7f:
                    7b:fe:08:94:24:e7:f2:e7:16:48:0b:6a:f5:29:0c:
                    39:fe:05:43:41:ba:4b:93:2f:e4:9a:bd:ad:19:7c:
                    07:17:46:6a:bd:6f:2d:88:ec:e3:d2:65:69:2f:94:
                    44:3d:08:d5:d5:8a:74:0f:c5:90:10:97:63:f3:3a:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2B:F0:26:FB:3D:DB:C6:EF:38:9B:54:1A:61:A2:A3:04:99:AC:CB
            X509v3 Authority Key Identifier:
                keyid:37:3A:A6:00:A4:2B:CF:57:92:AF:8D:41:24:74:0F:5E:66:B9:D4:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33332d3333203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         44:ea:0f:11:6c:47:44:0e:7d:a3:ce:bb:43:a5:a4:7e:57:fd:
         14:eb:42:20:55:d1:fd:f7:5d:11:28:a9:cd:05:32:e8:89:a6:
         cf:6f:dc:63:69:9b:0e:73:92:a9:ea:5d:4d:ea:3b:6a:c1:a5:
         a4:00:8c:da:f8:7a:8e:e0:f2:2a:9f:46:fb:83:21:3c:7b:da:
         27:76:e7:7a:3a:55:ea:c7:cf:35:48:68:a5:a2:20:1d:86:d0:
         b4:1a:b1:18:71:96:c6:c0:2f:8b:31:dc:88:93:82:59:f3:24:
         1a:f7:18:ce:14:9a:9b:65:45:04:39:73:1b:92:af:eb:25:64:
         44:2e:6e:eb:d1:31:39:d6:53:56:b0:e4:3e:82:74:a8:4e:87:
         73:49:31:ce:8d:be:a9:88:29:e7:5a:18:8b:51:19:2f:c2:1e:
         39:c3:fc:59:85:81:74:41:75:4d:71:fa:59:56:96:62:5c:2f:
         3f:05:b6:fc:61:08:46:5c:e5:79:56:4f:50:97:0f:0e:1f:df:
         0e:a2:3e:b2:f9:b8:3d:f2:39:1c:84:89:3c:5a:fc:15:a7:f0:
         5e:d6:39:67:6e:72:98:9b:ba:6f:ef:18:22:53:51:a2:5e:6b:
         7a:f2:19:28:6d:d9:00:95:f9:68:c1:73:e9:df:45:d5:f9:f1:
         76:51:45:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:09:08 2025 by rpki-client