Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/323830343a373930343a3a2f33322d313238203d3e20323731323830.roa
File:                     323830343a373930343a3a2f33322d313238203d3e20323731323830.roa (raw, json)
Hash identifier:          lYvNUFCnmy0F9mKUaBfM6n6xRFogG6MEYh7M55VBPSM=
Subject key identifier:   7A:9D:12:49:12:14:99:3D:91:50:B1:FC:EE:8E:DF:C0:58:0B:C9:05
Certificate issuer:       /CN=D0C7382C3F8DE81A2390899A3504852C3F3E2FAF
Certificate serial:       0C972216A4542FFCAF864EB263BECE8CBC8D656C
Authority key identifier: D0:C7:38:2C:3F:8D:E8:1A:23:90:89:9A:35:04:85:2C:3F:3E:2F:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/323830343a373930343a3a2f33322d313238203d3e20323731323830.roa
Signing time:             Sat 27 Sep 2025 17:35:38 +0000
ROA not before:           Sat 27 Sep 2025 17:30:38 +0000
ROA not after:            Sat 26 Sep 2026 17:35:38 +0000
asID:                     271280
IP address blocks:        2804:7904::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.crl
                          rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:97:22:16:a4:54:2f:fc:af:86:4e:b2:63:be:ce:8c:bc:8d:65:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C7382C3F8DE81A2390899A3504852C3F3E2FAF
        Validity
            Not Before: Sep 27 17:30:38 2025 GMT
            Not After : Sep 26 17:35:38 2026 GMT
        Subject: CN=7A9D12491214993D9150B1FCEE8EDFC0580BC905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:a9:9e:85:46:36:20:ea:7f:9b:42:11:d9:
                    2b:f0:1d:f7:46:b1:10:e2:08:4a:1f:13:dd:f2:fc:
                    de:d5:93:07:27:b0:57:8c:f5:b7:da:96:2b:de:76:
                    13:e6:d0:e3:cd:bf:e6:38:ce:b0:c6:44:dd:eb:22:
                    a2:42:59:7e:61:00:25:df:65:ae:0e:44:78:18:8f:
                    4e:da:80:28:5c:15:85:34:60:5b:4c:86:18:cc:c9:
                    c6:62:c1:6b:aa:7b:91:6b:e3:79:f3:54:96:45:a8:
                    97:d9:30:d6:6d:d0:9f:9f:2a:0c:9b:b2:f4:14:29:
                    b4:69:63:f2:5e:9a:48:61:52:d7:d1:32:02:98:38:
                    e9:17:b7:10:24:fc:33:a6:4e:90:ad:f9:11:95:b6:
                    3f:48:94:ff:55:ee:d5:b9:3c:1d:35:48:b8:70:52:
                    31:c6:a5:f0:d3:6d:d2:ce:b4:c6:d6:ad:46:74:bb:
                    49:2b:39:c3:7d:0e:e4:31:db:2d:3a:28:c3:33:21:
                    9e:b8:5f:4c:94:8b:4a:2d:79:35:4f:28:01:bf:61:
                    82:99:43:3f:c7:b3:66:5f:22:9f:80:02:8f:e8:39:
                    31:f1:79:85:98:d6:79:75:bf:4d:67:7c:19:5f:49:
                    1e:c9:10:61:13:09:45:05:9b:9a:5b:9b:b4:b2:90:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9D:12:49:12:14:99:3D:91:50:B1:FC:EE:8E:DF:C0:58:0B:C9:05
            X509v3 Authority Key Identifier:
                keyid:D0:C7:38:2C:3F:8D:E8:1A:23:90:89:9A:35:04:85:2C:3F:3E:2F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/323830343a373930343a3a2f33322d313238203d3e20323731323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7904::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:b6:01:c3:45:ad:21:a0:26:ff:ae:76:c6:e4:52:fc:c8:31:
         c9:df:47:d0:2f:fb:0c:d2:68:26:c6:13:69:e9:5c:cd:d2:0e:
         24:b5:50:db:0a:7c:35:b8:81:67:b3:76:79:dc:c3:f6:7e:4b:
         45:6c:b8:76:b9:1a:92:06:c5:ac:44:15:42:74:3f:bf:24:2d:
         9d:67:da:10:d8:89:1a:bf:5b:ee:88:b9:fc:16:5f:37:6a:5e:
         04:55:ae:e9:49:f6:16:dc:9b:b0:41:20:bc:a7:08:bf:77:e8:
         c1:84:6c:f5:6d:a5:a8:69:a7:a2:db:c9:fd:ed:52:67:6c:79:
         41:11:22:60:18:37:22:90:bd:ab:b3:55:c1:a4:72:34:0f:c2:
         e7:e3:c2:99:e7:13:6e:08:d5:f6:be:e2:69:2d:56:3f:99:f5:
         3f:df:4a:d7:ff:a7:b0:94:56:ba:4d:37:96:60:17:2a:78:40:
         ac:62:44:ff:8e:ad:16:ab:10:97:f0:03:f2:cf:7c:fe:a5:e5:
         5e:cc:dc:a9:98:8b:3b:68:6c:f8:e1:c0:ae:25:a0:94:d9:40:
         25:0d:5d:77:91:a0:c2:61:a5:d8:89:8f:90:f8:77:3e:e4:f6:
         a3:82:e0:4e:2c:f3:70:2f:c0:e0:19:e4:a3:13:70:f2:60:69:
         f6:46:cb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:40:07 2025 by rpki-client