Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/323830343a376438343a3a2f33322d3332203d3e20323731353636.roa
File:                     323830343a376438343a3a2f33322d3332203d3e20323731353636.roa (raw, json)
Hash identifier:          5JUADPJUAOAZ14MDLcNZMB580VALAxPbAfUL80fgbWU=
Subject key identifier:   1F:9A:42:F3:49:7A:F0:AE:7E:EB:AC:9D:0A:4C:82:43:40:86:88:EB
Certificate issuer:       /CN=E0C95465384623D51149B43BD88C02CDAF39FCCD
Certificate serial:       351F1E8F8FB4AE63056216A12ACCC1C2E6A71A89
Authority key identifier: E0:C9:54:65:38:46:23:D5:11:49:B4:3B:D8:8C:02:CD:AF:39:FC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/323830343a376438343a3a2f33322d3332203d3e20323731353636.roa
Signing time:             Tue 30 Sep 2025 19:25:16 +0000
ROA not before:           Tue 30 Sep 2025 19:20:16 +0000
ROA not after:            Tue 29 Sep 2026 19:25:16 +0000
asID:                     271566
IP address blocks:        2804:7d84::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.crl
                          rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1f:1e:8f:8f:b4:ae:63:05:62:16:a1:2a:cc:c1:c2:e6:a7:1a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0C95465384623D51149B43BD88C02CDAF39FCCD
        Validity
            Not Before: Sep 30 19:20:16 2025 GMT
            Not After : Sep 29 19:25:16 2026 GMT
        Subject: CN=1F9A42F3497AF0AE7EEBAC9D0A4C8243408688EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:23:6a:13:97:b6:97:d0:de:14:ef:87:42:
                    97:97:68:85:a2:76:42:9c:ce:a1:b4:e8:7e:fe:31:
                    0c:bf:a9:dc:99:09:9e:ed:76:96:82:4f:0b:77:4b:
                    8b:93:bb:48:08:8e:90:c4:12:54:c3:a3:0a:04:1c:
                    de:78:ac:f1:35:c5:94:f0:4c:ac:51:f1:67:ef:13:
                    fe:11:f0:1c:ab:2c:8e:3d:a0:f0:b7:7d:3a:da:e6:
                    5d:9e:c4:d5:e6:77:a0:fb:35:5e:b8:d4:38:e6:28:
                    b1:f2:27:37:e9:3e:ac:31:b4:9a:93:54:d8:87:15:
                    6b:52:87:16:53:db:23:1f:fb:fb:50:60:8c:d0:8d:
                    c7:d6:9d:d0:e8:24:c6:6e:06:2f:75:5f:87:10:da:
                    a5:8d:54:cf:7b:7a:64:28:6d:49:fa:6a:f9:58:73:
                    99:f9:b9:03:f5:4c:40:79:c0:0c:81:c4:07:9c:65:
                    7b:8f:21:58:d6:85:5c:32:d6:51:2b:0d:1f:46:9a:
                    2c:e6:28:2d:0d:36:3f:e7:f7:12:30:c4:1f:c3:d1:
                    51:97:b6:3c:f0:05:aa:75:f3:f2:ce:8a:b4:ed:ef:
                    1b:5e:ce:95:d8:05:9f:ba:b8:49:45:90:d7:fc:7c:
                    4c:ad:38:84:0f:fd:37:d3:cf:ec:b2:0f:d6:27:68:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9A:42:F3:49:7A:F0:AE:7E:EB:AC:9D:0A:4C:82:43:40:86:88:EB
            X509v3 Authority Key Identifier:
                keyid:E0:C9:54:65:38:46:23:D5:11:49:B4:3B:D8:8C:02:CD:AF:39:FC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/323830343a376438343a3a2f33322d3332203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d84::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:61:3c:b1:56:c8:a8:2d:7e:7a:f6:a8:9f:7f:ec:da:b6:e4:
         83:37:00:a6:21:97:ce:71:45:9d:b4:7e:a7:2e:91:04:ce:91:
         da:07:3a:98:25:1e:5c:d1:eb:4d:b8:90:71:81:88:7d:68:3d:
         f8:01:b1:f2:bd:27:a1:b5:85:6e:82:a6:f3:12:95:10:b6:c7:
         aa:b2:94:a1:b7:66:9f:c9:0c:06:7f:75:fa:2d:a6:75:cb:b4:
         00:07:d7:db:ea:68:94:e3:8f:f3:fc:12:c4:1d:79:df:aa:49:
         ef:d4:df:ab:74:b1:73:45:0d:38:21:72:95:3f:2a:bf:2a:dc:
         65:75:44:05:be:79:13:c4:dc:cc:bd:53:fd:6e:1a:5a:18:8d:
         20:c6:5f:50:9e:ab:a7:12:d4:bc:a7:81:0a:e8:ef:1a:28:46:
         1a:37:67:31:40:bb:6e:79:47:66:a0:5c:fb:88:c3:33:3d:67:
         db:37:05:2c:b7:18:ae:f9:0f:05:15:f4:50:d3:b5:bd:1a:f4:
         fd:75:f8:45:9b:c0:04:ee:c3:24:92:35:5f:09:98:13:85:dd:
         d9:0b:d6:b5:52:69:fd:89:b5:40:8b:c0:d9:42:a7:f2:6b:56:
         48:0b:83:cd:ea:1d:00:4e:72:20:a8:70:81:a5:60:32:97:c9:
         52:ab:a4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:04:58 2025 by rpki-client