Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/323830343a316262383a3a2f33322d313238203d3e203631373435.roa
File:                     323830343a316262383a3a2f33322d313238203d3e203631373435.roa (raw, json)
Hash identifier:          D/WXd3lCfNEAQCafxVlXkbKhULtOja0SLYJuY4NeZC0=
Subject key identifier:   03:AA:C8:EF:0F:AA:B4:C0:12:2C:D5:03:C7:45:D2:FB:33:D4:98:73
Certificate issuer:       /CN=103C563F76C2FC07B4105E588114D30162C3DB49
Certificate serial:       207FB6A23ABF0E7FE225DD59793A38466401F91D
Authority key identifier: 10:3C:56:3F:76:C2:FC:07:B4:10:5E:58:81:14:D3:01:62:C3:DB:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103C563F76C2FC07B4105E588114D30162C3DB49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/323830343a316262383a3a2f33322d313238203d3e203631373435.roa
Signing time:             Thu 02 Oct 2025 18:37:28 +0000
ROA not before:           Thu 02 Oct 2025 18:32:28 +0000
ROA not after:            Thu 01 Oct 2026 18:37:28 +0000
asID:                     61745
IP address blocks:        2804:1bb8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.crl
                          rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103C563F76C2FC07B4105E588114D30162C3DB49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7f:b6:a2:3a:bf:0e:7f:e2:25:dd:59:79:3a:38:46:64:01:f9:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103C563F76C2FC07B4105E588114D30162C3DB49
        Validity
            Not Before: Oct  2 18:32:28 2025 GMT
            Not After : Oct  1 18:37:28 2026 GMT
        Subject: CN=03AAC8EF0FAAB4C0122CD503C745D2FB33D49873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:73:d4:ef:dd:2b:c0:ca:ac:db:88:4c:04:70:
                    68:35:35:fc:6e:35:a7:00:2c:86:c1:cb:58:93:b5:
                    bc:0a:82:58:28:6c:04:a6:d5:3e:ef:80:26:a6:64:
                    73:68:20:5d:6e:a1:cd:f5:fc:4a:38:61:03:2e:1c:
                    d1:36:dd:04:14:6a:ba:3f:13:b6:93:a2:fa:20:ba:
                    69:f2:8d:43:16:e4:49:aa:3c:7f:b3:93:d7:87:1f:
                    bc:93:63:78:ff:0b:b4:00:80:9d:46:c4:dd:b5:e8:
                    45:45:af:2a:d4:aa:bd:73:d2:2f:52:fa:0f:83:d7:
                    0a:11:55:c1:c1:d1:7b:5b:bc:a2:8f:9d:fe:1d:73:
                    f6:79:10:5f:fd:88:f6:50:c4:60:c8:0b:d1:d2:2c:
                    3c:d7:00:c7:58:44:3a:95:05:71:c4:6a:b0:dd:06:
                    c9:30:fd:72:fd:40:fe:f8:04:68:de:31:a7:f0:fb:
                    1e:df:f7:31:2a:36:40:64:17:61:33:c0:41:57:10:
                    f4:00:9b:d5:e9:ca:a3:ef:33:7d:1f:a5:03:db:03:
                    c0:d6:63:05:5b:40:a5:44:43:00:36:a6:aa:25:e4:
                    1f:f5:a4:57:6d:68:47:7a:4e:09:ec:48:67:87:8c:
                    a2:66:c6:08:81:28:59:cf:1c:d3:d6:1f:cd:02:51:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AA:C8:EF:0F:AA:B4:C0:12:2C:D5:03:C7:45:D2:FB:33:D4:98:73
            X509v3 Authority Key Identifier:
                keyid:10:3C:56:3F:76:C2:FC:07:B4:10:5E:58:81:14:D3:01:62:C3:DB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103C563F76C2FC07B4105E588114D30162C3DB49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/323830343a316262383a3a2f33322d313238203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:f0:fc:98:f6:18:d0:68:ae:56:df:f4:ac:15:51:9d:22:e5:
         10:69:d7:a2:40:26:7b:60:97:74:28:fa:4c:68:f9:91:e0:30:
         0b:fb:db:b0:48:82:b5:63:ee:54:ca:b6:37:e7:11:57:1d:5b:
         03:e1:4d:57:f6:03:f3:33:77:ea:e2:23:2b:1a:16:f7:c4:26:
         08:96:f2:b3:a3:55:80:fd:f3:12:21:3a:cc:6d:8c:2d:cb:4c:
         b0:17:12:ce:1d:d7:c1:b5:f2:53:5b:b8:f7:f6:17:a0:73:1c:
         2c:ea:af:68:6e:75:a6:1c:74:47:36:e9:63:e4:32:62:a8:c2:
         21:fc:cd:7a:b0:bd:fd:da:bc:40:f1:5a:c3:49:6d:af:3f:3b:
         9d:75:74:5e:19:7c:01:ef:3d:67:8e:7e:4d:c2:03:22:ec:fb:
         b0:1c:d1:31:23:21:ef:19:64:5a:04:f4:5f:15:8d:8e:bc:23:
         0d:fa:9d:33:d3:81:f3:57:1e:2a:cd:e8:c5:5d:87:23:e9:2c:
         da:29:6e:ec:d9:21:d0:4b:5d:d3:2a:9b:6f:4a:77:33:ec:72:
         ee:49:e7:ff:16:ae:cb:73:30:f2:df:d6:f4:6e:b1:54:3d:6e:
         63:15:a6:09:67:83:fc:0b:ef:dc:50:c2:c7:b4:2a:5a:65:b8:
         ae:27:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:46 2025 by rpki-client