Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/323830343a376631303a3a2f33322d313238203d3e20323731363634.roa
File:                     323830343a376631303a3a2f33322d313238203d3e20323731363634.roa (raw, json)
Hash identifier:          rCg+1x7rvT5gEZ5o+LsNuO2V3UaS52kjVNkqIZewH5Y=
Subject key identifier:   C2:80:BC:48:28:EB:17:4A:AB:D1:71:7B:E9:27:31:B8:46:A9:F4:4E
Certificate issuer:       /CN=29C5DA244743877B068DCECE28A41814C0136412
Certificate serial:       081BDD04C0FD7E02C0BA5C13B463E75188F63ED8
Authority key identifier: 29:C5:DA:24:47:43:87:7B:06:8D:CE:CE:28:A4:18:14:C0:13:64:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C5DA244743877B068DCECE28A41814C0136412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/323830343a376631303a3a2f33322d313238203d3e20323731363634.roa
Signing time:             Tue 23 Sep 2025 16:36:27 +0000
ROA not before:           Tue 23 Sep 2025 16:31:27 +0000
ROA not after:            Tue 22 Sep 2026 16:36:27 +0000
asID:                     271664
IP address blocks:        2804:7f10::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/29C5DA244743877B068DCECE28A41814C0136412.crl
                          rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/29C5DA244743877B068DCECE28A41814C0136412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C5DA244743877B068DCECE28A41814C0136412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1b:dd:04:c0:fd:7e:02:c0:ba:5c:13:b4:63:e7:51:88:f6:3e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29C5DA244743877B068DCECE28A41814C0136412
        Validity
            Not Before: Sep 23 16:31:27 2025 GMT
            Not After : Sep 22 16:36:27 2026 GMT
        Subject: CN=C280BC4828EB174AABD1717BE92731B846A9F44E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:65:26:27:35:7c:ac:46:79:61:7b:2f:26:1f:
                    a6:07:fc:14:29:af:d2:66:3b:f5:a0:bd:81:6b:d3:
                    6a:90:56:67:64:99:3a:df:9e:e7:b1:28:8b:3d:7e:
                    04:f0:13:3a:2f:10:11:9b:ac:cf:54:68:c6:b4:ab:
                    fb:23:18:0f:2f:f9:72:11:f5:17:22:80:d8:3e:bc:
                    09:16:0d:8e:1b:2f:d2:a7:95:fd:ff:af:07:ee:86:
                    7f:0a:6d:05:81:4b:a7:f2:cc:09:d0:9b:fc:ce:1e:
                    d4:61:9a:37:81:76:51:e3:9e:1f:b9:72:0f:bb:5e:
                    2d:1e:86:05:0a:33:65:40:99:10:72:81:46:a5:29:
                    c4:eb:49:e5:0c:98:a4:03:19:28:a4:04:ac:5b:fb:
                    6d:6d:bc:ba:4f:49:8d:2e:ae:7d:6a:58:9f:c2:a1:
                    0a:4b:42:82:4c:73:cd:7b:31:52:42:03:4c:6c:16:
                    70:b5:7d:0c:5f:3c:7e:f6:a7:6f:34:b6:93:aa:3c:
                    54:94:83:47:b9:b3:d5:a5:cd:57:0c:2d:62:01:d3:
                    ee:cb:3d:35:45:39:74:f7:c1:f0:f2:21:cb:13:54:
                    28:6f:bb:d1:7d:85:94:69:72:07:be:d9:84:55:95:
                    2d:98:e7:cf:86:e9:3c:db:f4:41:15:74:c8:05:96:
                    73:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:80:BC:48:28:EB:17:4A:AB:D1:71:7B:E9:27:31:B8:46:A9:F4:4E
            X509v3 Authority Key Identifier:
                keyid:29:C5:DA:24:47:43:87:7B:06:8D:CE:CE:28:A4:18:14:C0:13:64:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/29C5DA244743877B068DCECE28A41814C0136412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C5DA244743877B068DCECE28A41814C0136412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/323830343a376631303a3a2f33322d313238203d3e20323731363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:fa:71:6a:d2:f5:15:57:4a:07:f0:1a:24:77:ff:e8:e0:a4:
         db:75:12:60:d8:f7:7b:61:73:8c:9c:29:f1:17:54:29:3c:68:
         87:86:fa:53:31:45:f2:e2:5f:29:ae:de:2e:11:cf:81:ef:57:
         9d:32:56:d2:d3:6b:d0:a5:70:c0:6b:16:fe:7e:1e:fc:9c:d0:
         e1:fd:0b:fc:a5:21:e3:e8:e4:e1:79:e5:59:30:a0:93:60:48:
         8b:a6:53:c1:ba:18:fc:0f:98:5e:23:f5:1b:7c:98:32:75:31:
         87:96:7f:b9:f2:fa:83:b4:5e:e0:8e:bf:99:e2:6c:a2:7a:48:
         3b:a2:23:fb:f6:f5:eb:2f:99:db:e0:26:1b:88:78:e6:44:35:
         18:57:15:ed:71:14:f3:26:45:76:8f:85:bb:35:50:ee:5f:aa:
         34:2e:e1:3c:41:85:c2:bb:4a:87:c0:d9:e4:e2:df:10:b2:63:
         6d:87:39:7a:2d:d0:6c:8f:fd:72:01:3b:fd:54:a3:c6:e4:11:
         52:09:42:72:5e:ee:04:4c:e8:14:ee:f8:dd:df:49:d8:a1:aa:
         72:ea:45:1b:8c:91:55:27:5a:ff:71:b4:8e:09:fe:51:bc:36:
         7c:ee:f5:97:e1:aa:f0:9f:0e:75:92:f6:86:9b:78:73:69:fb:
         06:05:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:42 2025 by rpki-client