Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G7dEZfvtoPVRUC8nZZfZ4LSjY21NUudBdA1EWpjmkYmF/0/323830313a38313a3136303a3a2f34382d313238203d3e20323734353430.roa
File:                     323830313a38313a3136303a3a2f34382d313238203d3e20323734353430.roa (raw, json)
Hash identifier:          ducuWk73r3Kc0pOH2Y9TXu0DxiyQON/+b8D0jCjUL50=
Subject key identifier:   37:18:54:5B:40:EC:E8:55:DE:A8:D2:78:49:09:97:8F:D4:87:50:42
Certificate issuer:       /CN=6D1887D484F5CE552C73B65E56B341086990D9A0
Certificate serial:       456A34FCDBB7853474F4E66D74DBB7285843DE2D
Authority key identifier: 6D:18:87:D4:84:F5:CE:55:2C:73:B6:5E:56:B3:41:08:69:90:D9:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D1887D484F5CE552C73B65E56B341086990D9A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G7dEZfvtoPVRUC8nZZfZ4LSjY21NUudBdA1EWpjmkYmF/0/323830313a38313a3136303a3a2f34382d313238203d3e20323734353430.roa
Signing time:             Thu 18 Sep 2025 14:35:20 +0000
ROA not before:           Thu 18 Sep 2025 14:30:20 +0000
ROA not after:            Thu 17 Sep 2026 14:35:20 +0000
asID:                     274540
IP address blocks:        2801:81:160::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G7dEZfvtoPVRUC8nZZfZ4LSjY21NUudBdA1EWpjmkYmF/0/6D1887D484F5CE552C73B65E56B341086990D9A0.crl
                          rsync://rpki-repo.registro.br/repo/G7dEZfvtoPVRUC8nZZfZ4LSjY21NUudBdA1EWpjmkYmF/0/6D1887D484F5CE552C73B65E56B341086990D9A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D1887D484F5CE552C73B65E56B341086990D9A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6a:34:fc:db:b7:85:34:74:f4:e6:6d:74:db:b7:28:58:43:de:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1887D484F5CE552C73B65E56B341086990D9A0
        Validity
            Not Before: Sep 18 14:30:20 2025 GMT
            Not After : Sep 17 14:35:20 2026 GMT
        Subject: CN=3718545B40ECE855DEA8D2784909978FD4875042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b6:11:70:52:c6:69:1e:0c:de:07:2a:98:85:
                    88:50:46:a2:f8:85:c5:66:41:b7:9e:2e:0b:83:ac:
                    dd:78:9a:d2:0a:55:c8:92:47:b4:86:2e:dd:d4:58:
                    81:94:68:df:94:ed:ab:d5:2e:ef:d7:74:89:b4:6d:
                    9b:41:c7:da:6a:9b:1c:b7:d2:55:2b:82:c5:61:91:
                    e4:96:27:1b:e9:a3:0d:1a:56:e5:4d:c8:29:7b:53:
                    af:46:84:40:fc:94:24:44:aa:ff:a9:f5:a9:e8:13:
                    d1:93:d4:04:8c:2c:84:c2:26:29:cf:62:32:c8:29:
                    76:dc:f6:ee:bf:40:95:5f:d0:17:03:79:d2:e1:8e:
                    86:b8:c0:74:54:40:21:9f:c1:07:ba:77:53:f3:78:
                    fb:43:f2:4a:b4:3c:6e:88:7e:88:1d:ac:79:f1:ff:
                    d0:c4:d3:18:52:37:ec:2b:74:7f:24:9a:ee:07:ac:
                    77:ad:30:c6:78:c0:df:42:59:4f:0e:d1:c4:f5:58:
                    e1:6a:f6:b2:ec:d2:98:bc:3b:c3:08:dd:46:a8:99:
                    fa:8c:ec:67:a5:e6:99:d0:29:de:ba:e7:1b:3b:c7:
                    99:ea:2c:bf:fe:79:37:c8:97:f1:24:8b:6f:a3:16:
                    20:8c:74:69:9b:0f:88:37:2d:cb:a4:35:90:08:10:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:18:54:5B:40:EC:E8:55:DE:A8:D2:78:49:09:97:8F:D4:87:50:42
            X509v3 Authority Key Identifier:
                keyid:6D:18:87:D4:84:F5:CE:55:2C:73:B6:5E:56:B3:41:08:69:90:D9:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G7dEZfvtoPVRUC8nZZfZ4LSjY21NUudBdA1EWpjmkYmF/0/6D1887D484F5CE552C73B65E56B341086990D9A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D1887D484F5CE552C73B65E56B341086990D9A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G7dEZfvtoPVRUC8nZZfZ4LSjY21NUudBdA1EWpjmkYmF/0/323830313a38313a3136303a3a2f34382d313238203d3e20323734353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:81:160::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:7e:1d:de:69:80:52:27:4f:ed:98:bb:a0:69:9a:ac:54:24:
         f8:54:e1:67:45:66:24:e4:30:bc:3f:ad:14:c1:8b:44:9e:ac:
         a2:80:6b:84:5c:21:16:81:e3:f4:1c:71:df:15:5a:f5:40:80:
         32:1f:f0:1e:d9:02:a5:88:9b:6f:4a:e3:a9:76:68:bd:35:53:
         92:ae:be:2f:e6:e7:23:aa:8d:5a:2b:f6:97:d0:e3:e9:36:17:
         20:50:72:90:41:4c:da:74:bf:b5:f5:f5:bc:0e:56:36:df:da:
         5f:b3:91:98:cf:52:52:9b:3c:91:f3:ea:11:88:bd:51:c9:67:
         88:bb:fc:51:4c:00:07:9a:66:47:26:b7:b0:41:1b:ea:28:ba:
         4e:31:b8:c1:c5:00:65:88:4d:08:bb:0d:bd:3a:c2:bc:01:7e:
         fa:91:02:00:32:0b:6e:91:39:0a:af:d5:7e:26:aa:2b:e0:a0:
         93:7e:fc:58:d5:b1:d1:07:49:1a:3e:54:2c:c3:47:20:32:c1:
         e0:61:79:e3:6e:8c:0b:11:b7:c8:cb:82:81:a1:15:16:40:54:
         ac:7e:71:5b:0c:16:b8:2b:de:37:15:0f:df:0e:26:e9:38:ad:
         73:0c:f9:19:36:51:44:07:33:0a:14:28:77:bc:a9:a0:f8:3f:
         97:7f:2f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:12 2025 by rpki-client