Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/323830343a333231383a3a2f33322d3332203d3e20323635303535.roa
File:                     323830343a333231383a3a2f33322d3332203d3e20323635303535.roa (raw, json)
Hash identifier:          zCb1tobwwy6Up01aFY7ez9cCaolBaKm2oj7H2iWVCVc=
Subject key identifier:   C0:A1:49:91:7B:B3:EC:6B:29:35:00:70:1D:3D:9A:33:17:EC:9B:29
Certificate issuer:       /CN=A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3
Certificate serial:       289AAF7DB78827B6E2D621DB39692D7377E1559F
Authority key identifier: A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/323830343a333231383a3a2f33322d3332203d3e20323635303535.roa
Signing time:             Wed 08 Oct 2025 20:03:23 +0000
ROA not before:           Wed 08 Oct 2025 19:58:23 +0000
ROA not after:            Wed 07 Oct 2026 20:03:23 +0000
asID:                     265055
IP address blocks:        2804:3218::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.crl
                          rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9a:af:7d:b7:88:27:b6:e2:d6:21:db:39:69:2d:73:77:e1:55:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3
        Validity
            Not Before: Oct  8 19:58:23 2025 GMT
            Not After : Oct  7 20:03:23 2026 GMT
        Subject: CN=C0A149917BB3EC6B293500701D3D9A3317EC9B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:86:cc:46:8a:6d:1c:55:8a:7d:4a:6c:2f:
                    63:4a:d1:ec:c5:de:2d:7b:7b:b8:79:75:34:eb:84:
                    bf:5e:cc:d6:1c:1d:3c:08:e6:aa:66:49:ec:73:d2:
                    45:b9:76:db:57:3b:3f:03:87:90:a8:c7:5e:36:e1:
                    2e:19:2c:15:6e:57:6b:06:5b:f0:ca:6e:4a:ec:07:
                    be:11:f6:38:db:23:8a:5e:bd:e6:04:77:d3:2e:5d:
                    80:6b:74:61:8d:b7:28:ff:4e:e3:a5:af:a0:1f:cd:
                    5d:30:5f:fe:80:11:2f:6f:2a:03:b6:49:1e:2d:7c:
                    dd:22:99:8d:b4:ef:18:15:c0:72:17:a8:f6:bf:0e:
                    d1:33:38:9b:95:6d:ae:3d:0a:ed:80:ce:91:24:10:
                    9b:b3:82:cd:72:d7:e1:59:02:4b:56:59:bd:6b:77:
                    8a:85:b7:a6:0a:bb:18:99:12:f6:dd:72:ef:52:a2:
                    c7:f9:a2:71:ee:a9:d4:94:97:43:7b:8a:1b:9b:f2:
                    7c:16:2e:e0:73:b9:76:bd:27:6b:be:c3:7b:92:cb:
                    25:5a:37:28:7d:7e:c3:4e:57:df:c0:83:f6:97:e3:
                    d3:0e:87:0d:b6:12:9f:c4:f3:a0:69:d5:99:17:87:
                    ff:4f:11:aa:12:e1:08:15:c6:7d:22:8e:b3:36:10:
                    e8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A1:49:91:7B:B3:EC:6B:29:35:00:70:1D:3D:9A:33:17:EC:9B:29
            X509v3 Authority Key Identifier:
                keyid:A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/323830343a333231383a3a2f33322d3332203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3218::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:1c:46:bc:ee:d4:75:38:12:99:46:14:a2:32:6a:57:5e:13:
         5c:24:93:8e:91:96:5b:45:d4:86:72:80:f9:af:d1:48:0a:d8:
         31:54:27:9f:c8:df:ce:0d:f3:d6:93:4b:3a:de:27:c8:ea:27:
         18:81:95:4b:da:07:74:ea:07:c9:6a:f0:30:db:91:2e:89:20:
         d7:cf:15:f5:11:32:9c:a2:08:64:f8:51:c3:85:86:3a:df:6e:
         de:c2:93:11:22:31:2a:d9:de:f5:38:76:5d:29:e7:b3:e9:d8:
         03:21:e2:a7:46:3e:d0:3e:c9:b6:ad:37:6b:3f:87:df:61:50:
         5e:a9:c3:19:e4:0d:f1:09:00:85:f0:3d:00:0e:87:96:34:66:
         ef:33:78:89:c6:7d:7f:73:53:dc:c9:c3:34:ec:5d:3e:47:f0:
         a0:f5:3d:5f:89:00:28:81:af:1b:02:f2:3b:9e:60:75:3a:5f:
         24:18:36:dc:0a:f8:91:ae:7e:d3:10:b9:b8:df:b8:47:da:fa:
         94:a3:dd:9a:cb:89:16:d2:8a:57:05:7a:40:da:84:de:21:91:
         c4:1d:76:1e:9a:76:0a:5f:63:4a:31:3d:af:84:ff:67:17:23:
         26:8c:95:c9:72:ff:a1:d2:94:a0:72:60:4a:fa:cd:dc:d7:17:
         28:f8:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:40:45 2025 by rpki-client