Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/323830343a336534633a3a2f33322d3438203d3e20323636353836.roa
File:                     323830343a336534633a3a2f33322d3438203d3e20323636353836.roa (raw, json)
Hash identifier:          jYAm9DQS+UeBl6BAqak1+A7ltR6YPoQunyz43qywZpM=
Subject key identifier:   43:02:0D:38:73:34:59:A2:43:09:0C:8E:12:63:9F:A7:6E:AC:35:4D
Certificate issuer:       /CN=6DE821507603193E76C33E7E992F43F744C39901
Certificate serial:       072CEB4EA1299D0EF3A86935B9541BC24C198D8E
Authority key identifier: 6D:E8:21:50:76:03:19:3E:76:C3:3E:7E:99:2F:43:F7:44:C3:99:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DE821507603193E76C33E7E992F43F744C39901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/323830343a336534633a3a2f33322d3438203d3e20323636353836.roa
Signing time:             Mon 20 Oct 2025 11:52:54 +0000
ROA not before:           Mon 20 Oct 2025 11:47:54 +0000
ROA not after:            Mon 19 Oct 2026 11:52:54 +0000
asID:                     266586
IP address blocks:        2804:3e4c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/6DE821507603193E76C33E7E992F43F744C39901.crl
                          rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/6DE821507603193E76C33E7E992F43F744C39901.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DE821507603193E76C33E7E992F43F744C39901.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 05:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2c:eb:4e:a1:29:9d:0e:f3:a8:69:35:b9:54:1b:c2:4c:19:8d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DE821507603193E76C33E7E992F43F744C39901
        Validity
            Not Before: Oct 20 11:47:54 2025 GMT
            Not After : Oct 19 11:52:54 2026 GMT
        Subject: CN=43020D38733459A243090C8E12639FA76EAC354D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:bc:b9:34:ef:a2:33:a4:e8:53:7c:c2:1e:
                    5f:fd:2c:b1:6c:37:70:6b:06:02:b1:2c:ee:c2:a8:
                    93:13:dc:2b:b3:e7:30:78:91:38:dd:1f:e3:03:0b:
                    65:50:3b:56:94:81:63:ca:cf:a7:27:6c:68:71:69:
                    49:59:83:23:70:af:11:0d:e0:d2:f3:0f:8e:33:30:
                    e6:4d:ad:1f:93:fd:4c:56:70:98:ac:71:9c:b0:11:
                    38:a7:f8:78:d2:64:22:c5:c5:9a:16:cc:1e:ed:b7:
                    8a:e1:6d:2c:d2:2f:e0:b3:fb:58:55:7f:ce:55:42:
                    ef:b3:90:42:c9:64:92:ab:21:65:42:30:09:81:05:
                    93:a3:e2:cf:51:8e:08:17:e9:29:59:ed:f6:ea:b0:
                    75:6a:cc:1e:4f:b8:b6:a3:83:b3:b7:a9:30:ad:6c:
                    aa:08:41:9b:fa:9f:1b:39:7d:e6:62:57:73:b1:6a:
                    d9:92:0e:99:87:6c:4a:0b:44:08:95:a4:57:25:ea:
                    5c:f3:1a:b8:48:aa:30:65:e1:90:14:1b:bb:66:8f:
                    ca:44:1c:00:0e:ce:5e:94:e4:66:40:0a:8d:3e:b3:
                    28:3b:cf:54:32:b0:28:60:de:6a:29:d1:9a:30:ac:
                    ec:6e:7e:b2:3e:33:94:06:5d:97:ca:f1:3d:21:e8:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:02:0D:38:73:34:59:A2:43:09:0C:8E:12:63:9F:A7:6E:AC:35:4D
            X509v3 Authority Key Identifier:
                keyid:6D:E8:21:50:76:03:19:3E:76:C3:3E:7E:99:2F:43:F7:44:C3:99:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/6DE821507603193E76C33E7E992F43F744C39901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DE821507603193E76C33E7E992F43F744C39901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/323830343a336534633a3a2f33322d3438203d3e20323636353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:60:53:53:e0:06:b9:69:33:10:55:9c:db:f1:4f:8e:38:4f:
         dd:57:ef:41:87:f4:e5:9f:d7:c9:91:c7:f7:c8:99:cb:4b:f0:
         77:6c:00:26:c8:be:44:58:1e:36:71:16:4b:51:63:83:6c:0a:
         2b:6b:11:c5:29:58:57:0a:14:48:be:cb:94:48:9f:3e:33:1f:
         1f:73:69:1a:ce:92:26:17:f1:8c:42:2c:67:f7:b9:88:ce:db:
         06:01:02:a3:4e:cf:01:a4:11:92:99:1d:7a:7a:53:68:a0:41:
         7c:83:4c:fa:6b:94:8f:0c:e4:87:73:6d:8a:57:68:c7:4f:bf:
         bc:0f:3b:99:60:ce:b0:6f:c1:a4:97:2d:20:17:06:cd:03:d4:
         5a:6b:a5:b5:6a:6d:5a:fa:db:34:f9:4e:5c:13:d5:fa:15:e9:
         5d:c3:45:f3:cd:1a:c8:66:bc:fb:33:a2:82:f1:63:c7:98:37:
         0c:83:b5:35:30:f0:b2:09:5c:d7:a5:71:2e:04:55:13:93:c8:
         6c:02:74:6b:1f:60:7b:06:58:df:61:39:99:08:65:36:74:1d:
         15:6d:26:2c:72:d4:55:5e:d7:2f:8c:d1:58:65:b2:76:54:22:
         8a:08:e5:b4:be:ee:2c:58:80:66:b6:1a:f1:94:a6:3a:b2:38:
         1f:02:2d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:16:35 2025 by rpki-client