Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/323830343a373166633a3a2f33322d313238203d3e20323730383234.roa
File:                     323830343a373166633a3a2f33322d313238203d3e20323730383234.roa (raw, json)
Hash identifier:          r0kbvnOz+jTPDX7sMBwJdffkj7T98YbClJByF8JqoYI=
Subject key identifier:   96:08:18:13:21:A3:BA:EA:33:F3:E7:A4:CA:40:A4:88:9C:51:B0:D4
Certificate issuer:       /CN=98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E
Certificate serial:       69CF9738F1BC6A342830D55B54BA2B6A3B6292DA
Authority key identifier: 98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/323830343a373166633a3a2f33322d313238203d3e20323730383234.roa
Signing time:             Fri 05 Sep 2025 18:48:24 +0000
ROA not before:           Fri 05 Sep 2025 18:43:24 +0000
ROA not after:            Fri 04 Sep 2026 18:48:24 +0000
asID:                     270824
IP address blocks:        2804:71fc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.crl
                          rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cf:97:38:f1:bc:6a:34:28:30:d5:5b:54:ba:2b:6a:3b:62:92:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E
        Validity
            Not Before: Sep  5 18:43:24 2025 GMT
            Not After : Sep  4 18:48:24 2026 GMT
        Subject: CN=9608181321A3BAEA33F3E7A4CA40A4889C51B0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:82:68:85:e3:96:f7:fd:92:2a:49:05:06:
                    a1:91:05:53:1e:1e:3a:af:06:c6:65:39:bf:a8:ba:
                    23:5a:88:ea:ca:ad:30:6b:38:5d:2f:1d:87:46:eb:
                    ce:b0:f8:de:c9:6a:96:df:ad:74:88:20:41:23:18:
                    85:b4:93:21:a8:e6:7c:e0:ff:2e:e7:b7:44:03:8a:
                    1f:07:de:c3:0c:cc:da:5b:d9:51:0c:e0:7f:27:3d:
                    f0:d8:b5:7c:fb:03:a4:c2:9a:bd:77:8f:37:c4:c7:
                    a2:d3:d6:31:16:aa:47:c2:a3:5c:fe:c5:12:a6:56:
                    2e:f9:d8:08:e2:8f:ac:b3:af:74:57:94:68:a5:25:
                    39:7b:bb:30:2a:a5:f3:9f:08:a4:bc:4d:d8:b6:0a:
                    18:5a:55:23:9d:b4:80:ff:8f:ef:26:74:11:e0:63:
                    cd:aa:13:3a:5d:1f:af:9e:bb:f3:01:93:05:76:dd:
                    ef:0c:dc:a3:31:fb:31:2a:ba:90:be:3a:d7:95:d4:
                    55:bf:60:d5:6a:98:06:82:f0:48:ec:6e:ba:63:59:
                    f3:5b:cb:54:f9:c4:36:63:cd:82:38:55:aa:4d:82:
                    98:01:1d:13:41:6c:01:5d:06:df:f7:fa:34:ed:33:
                    98:00:46:01:17:51:70:b5:c3:42:0c:09:54:04:1e:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:08:18:13:21:A3:BA:EA:33:F3:E7:A4:CA:40:A4:88:9C:51:B0:D4
            X509v3 Authority Key Identifier:
                keyid:98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/323830343a373166633a3a2f33322d313238203d3e20323730383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:9a:c8:13:8a:fb:30:e8:14:41:82:ec:17:e7:7b:d2:bd:c2:
         e1:67:ce:48:26:3f:e7:0e:9d:09:34:f3:3b:65:9a:1a:14:32:
         cf:ec:0a:8c:62:3b:f9:d8:90:ff:88:ee:70:24:36:9c:e4:57:
         41:6e:e9:56:61:79:ef:a0:f1:17:12:66:74:ed:56:ac:cd:d3:
         f0:e5:f3:ec:a9:4c:8c:ed:da:e9:ec:81:cd:85:57:51:f6:7c:
         0f:20:d6:60:07:33:bd:5b:a5:fe:5d:fc:f4:81:f3:f7:06:9c:
         44:90:38:98:45:87:ce:70:01:cb:15:b7:82:2e:cc:9b:1b:82:
         b4:74:0d:c3:90:8c:f2:4b:19:25:80:ba:86:da:bd:f7:3a:d1:
         1e:6a:59:f5:24:01:86:dd:d0:a1:ad:1e:d5:3f:63:44:40:ec:
         d0:4c:19:05:47:c3:e5:b6:84:8d:72:e9:11:45:0a:1f:fa:74:
         21:6d:c2:f6:c6:e0:a9:fe:e8:f9:1b:c0:8f:52:29:88:05:8a:
         a9:a1:c5:38:6b:14:e4:8d:15:2a:f6:80:03:3c:4e:b2:0f:a0:
         e3:5f:75:27:e6:18:1b:bf:88:65:4e:8c:dc:f4:88:99:6d:1c:
         10:c1:99:91:c9:93:53:e4:42:c7:35:f6:e7:ef:34:27:dc:3f:
         e7:15:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:54:09 2025 by rpki-client