Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d3438203d3e20323639343339.roa
File:                     323830343a363461303a3a2f33322d3438203d3e20323639343339.roa (raw, json)
Hash identifier:          crHQCFa0PLnoqPhgfJStoI6aU75qSJD308gsotangbA=
Subject key identifier:   87:A4:42:40:F6:D0:F4:A0:21:E5:1B:4A:74:AF:A3:32:5A:96:C8:2E
Certificate issuer:       /CN=1CA2FF0597D9BB62829A6BE9E20489EEA362BCCE
Certificate serial:       19DFADE15B4668711C6130EC07C6482A8DA881D8
Authority key identifier: 1C:A2:FF:05:97:D9:BB:62:82:9A:6B:E9:E2:04:89:EE:A3:62:BC:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CA2FF0597D9BB62829A6BE9E20489EEA362BCCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d3438203d3e20323639343339.roa
Signing time:             Tue 30 Sep 2025 14:19:41 +0000
ROA not before:           Tue 30 Sep 2025 14:14:41 +0000
ROA not after:            Tue 29 Sep 2026 14:19:41 +0000
asID:                     269439
IP address blocks:        2804:64a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/1CA2FF0597D9BB62829A6BE9E20489EEA362BCCE.crl
                          rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/1CA2FF0597D9BB62829A6BE9E20489EEA362BCCE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CA2FF0597D9BB62829A6BE9E20489EEA362BCCE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:df:ad:e1:5b:46:68:71:1c:61:30:ec:07:c6:48:2a:8d:a8:81:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CA2FF0597D9BB62829A6BE9E20489EEA362BCCE
        Validity
            Not Before: Sep 30 14:14:41 2025 GMT
            Not After : Sep 29 14:19:41 2026 GMT
        Subject: CN=87A44240F6D0F4A021E51B4A74AFA3325A96C82E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:fc:d3:5f:b7:5c:01:2d:02:d4:88:f6:d5:
                    ad:1f:25:4f:8e:aa:64:52:a8:ec:62:f6:f9:ef:92:
                    66:e4:f5:de:ae:8d:21:54:1a:34:c9:76:68:91:3f:
                    7f:07:fb:5a:41:99:21:aa:08:73:50:bc:55:88:85:
                    52:a5:38:5d:d5:6c:b3:b2:f9:2d:b3:c9:df:9a:fc:
                    3e:16:a4:90:45:67:07:13:0f:70:2b:a9:47:0a:f7:
                    18:57:dd:a8:46:1c:2f:84:39:2d:8d:89:6a:4b:ea:
                    c4:c2:0b:12:fe:f9:fd:04:6f:2e:5b:de:2d:80:fd:
                    6d:2b:e4:4d:26:df:d2:81:fb:2f:53:5d:5e:37:80:
                    14:e3:d5:86:20:c7:7c:60:5f:98:9d:6e:d1:1c:c9:
                    04:de:b7:11:b3:f6:01:86:1b:ba:a5:76:8c:05:82:
                    28:ff:2d:b0:bc:61:46:a6:e0:a1:d3:8a:eb:dd:f1:
                    bf:49:67:a7:68:ad:5b:1c:11:7f:80:05:02:0f:ee:
                    74:76:99:40:e2:d0:80:dc:67:81:48:68:2f:2a:b7:
                    d7:d9:29:70:15:a3:a6:ed:57:58:44:07:15:7b:69:
                    9a:52:f0:fb:50:31:24:54:86:b8:b3:b7:51:92:85:
                    5f:00:be:81:80:35:16:52:14:1f:b8:53:18:95:73:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A4:42:40:F6:D0:F4:A0:21:E5:1B:4A:74:AF:A3:32:5A:96:C8:2E
            X509v3 Authority Key Identifier:
                keyid:1C:A2:FF:05:97:D9:BB:62:82:9A:6B:E9:E2:04:89:EE:A3:62:BC:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/1CA2FF0597D9BB62829A6BE9E20489EEA362BCCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CA2FF0597D9BB62829A6BE9E20489EEA362BCCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d3438203d3e20323639343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:95:64:00:87:8e:1f:50:ed:99:9b:06:af:9f:62:d8:53:0b:
         bf:08:e2:ff:de:ba:0b:f1:7b:be:84:0a:fc:10:de:75:c0:b4:
         3b:8d:6c:bc:ea:36:38:12:3f:bf:0d:59:dd:f0:2e:e0:0b:b8:
         51:01:53:b9:72:90:b5:26:36:16:72:01:57:0d:b9:3c:96:c0:
         97:33:fe:14:c4:4a:7a:90:4f:31:2c:19:7a:9b:bb:db:e9:54:
         1c:e2:75:70:34:c6:70:f8:b6:ac:2b:ee:e4:cf:e2:21:d0:dd:
         0a:d3:1a:5a:ad:65:e8:cf:aa:30:e4:a1:85:fe:51:71:ca:9d:
         b8:a2:25:0c:48:a9:6f:ea:6e:74:93:d5:61:e7:22:08:45:aa:
         d2:6b:b9:d2:d9:85:9e:90:f8:e7:d4:40:07:d7:11:3f:a9:1d:
         a5:2b:62:eb:9d:86:9f:a4:4a:b0:80:69:f4:2d:76:f7:fb:a7:
         a2:ec:fb:60:d0:d6:ce:13:c1:5e:26:e4:2a:2c:46:a2:40:27:
         3d:4d:24:f8:25:4c:88:f5:f1:e5:1d:84:f5:f4:80:5a:d8:85:
         51:54:7e:fb:af:41:42:8c:08:83:92:90:65:55:0e:64:c8:b2:
         7c:4f:0f:60:43:a1:4c:46:30:47:ea:2b:09:c4:72:27:40:74:
         d0:30:e8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:00 2025 by rpki-client