Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/323830343a346163633a3a2f33322d313238203d3e20323637323634.roa
File:                     323830343a346163633a3a2f33322d313238203d3e20323637323634.roa (raw, json)
Hash identifier:          7GhLPKMu7mU6NneEwl4pGnTt1KkdSiuIFVdBxqB34Xc=
Subject key identifier:   8A:27:1F:E8:47:1B:D7:8C:2A:93:A1:35:C0:3A:9F:B4:DD:1C:B5:6D
Certificate issuer:       /CN=BB43456C350FB93F6AD33FFB59494CAB9C90FFFD
Certificate serial:       42512EE2D4F232B46F0B9D38A37621EF72DA49CB
Authority key identifier: BB:43:45:6C:35:0F:B9:3F:6A:D3:3F:FB:59:49:4C:AB:9C:90:FF:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/323830343a346163633a3a2f33322d313238203d3e20323637323634.roa
Signing time:             Tue 23 Sep 2025 15:12:10 +0000
ROA not before:           Tue 23 Sep 2025 15:07:10 +0000
ROA not after:            Tue 22 Sep 2026 15:12:10 +0000
asID:                     267264
IP address blocks:        2804:4acc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.crl
                          rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 23:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:51:2e:e2:d4:f2:32:b4:6f:0b:9d:38:a3:76:21:ef:72:da:49:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB43456C350FB93F6AD33FFB59494CAB9C90FFFD
        Validity
            Not Before: Sep 23 15:07:10 2025 GMT
            Not After : Sep 22 15:12:10 2026 GMT
        Subject: CN=8A271FE8471BD78C2A93A135C03A9FB4DD1CB56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:71:7c:9e:36:b6:33:5b:a5:7b:18:54:14:17:
                    74:11:e7:66:a6:00:86:25:70:88:d2:46:ef:34:83:
                    3e:ac:4c:5a:dc:ed:7d:91:a7:8b:ef:0b:dd:d0:86:
                    c3:f2:23:89:11:fd:4f:42:2b:b8:c5:16:26:3c:24:
                    29:44:05:fc:85:23:7f:43:e2:b7:b1:a8:b7:ee:64:
                    cb:9a:8e:c8:11:7e:ca:42:83:6a:a4:60:85:9b:26:
                    60:96:9d:72:0c:37:f4:24:b3:3d:f3:d4:df:b9:60:
                    d1:46:3d:a8:f5:88:f5:2b:06:29:71:da:e7:a3:4f:
                    f7:1b:d1:65:83:96:72:21:f7:c3:10:7c:47:e4:f9:
                    0a:6e:28:3e:8e:21:03:05:ba:a2:86:f7:86:55:4d:
                    72:35:e1:28:03:45:7c:01:2b:ae:ed:10:ce:94:a1:
                    b6:4a:c2:d2:3b:05:d1:fa:32:67:e8:b6:67:76:3c:
                    0d:23:c8:35:db:c0:82:64:37:7b:ac:5c:22:23:24:
                    46:74:55:74:53:7f:46:b3:f6:4a:91:d0:6e:2d:80:
                    cc:4b:01:e8:b5:94:41:0f:c8:4e:0f:4d:4d:09:0e:
                    7a:57:72:60:30:65:ee:f5:f6:69:4f:ef:bf:4a:69:
                    24:68:39:df:66:b4:f8:f6:17:1a:f7:72:fa:84:21:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:27:1F:E8:47:1B:D7:8C:2A:93:A1:35:C0:3A:9F:B4:DD:1C:B5:6D
            X509v3 Authority Key Identifier:
                keyid:BB:43:45:6C:35:0F:B9:3F:6A:D3:3F:FB:59:49:4C:AB:9C:90:FF:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/323830343a346163633a3a2f33322d313238203d3e20323637323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4acc::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:b6:2c:a0:cf:15:b5:14:d8:c9:50:95:7a:d5:47:39:30:70:
         e2:76:dc:f1:3d:3a:78:a4:67:80:ac:ba:7e:a3:d1:b9:16:b2:
         6b:77:15:31:57:b0:b6:e8:2b:d2:f9:bc:82:0a:a7:b2:02:17:
         d4:c2:ae:f6:32:dc:3e:87:23:31:47:01:1b:a8:bf:63:5d:6a:
         ae:ab:f4:6f:e9:7f:01:50:c4:cd:24:39:00:bf:37:79:dc:c6:
         cf:2e:fb:40:0e:a7:14:a3:1c:85:cb:5d:6f:d4:6b:f1:8a:52:
         39:49:46:95:e6:1c:08:ed:cb:ff:29:32:fe:bf:03:df:2d:c8:
         53:39:ff:dd:d3:39:9a:07:d5:b8:2a:d8:7d:13:45:3d:ca:31:
         10:6e:6a:c9:72:e7:94:3e:fb:44:af:1b:4c:a2:21:34:b3:71:
         09:f9:6b:3f:27:87:e4:d1:eb:3f:f8:15:d4:14:b8:c0:24:ed:
         86:fa:74:8f:58:e9:87:c3:8e:95:16:93:cc:78:59:c4:6e:bb:
         3d:20:26:dc:0d:94:ac:34:2c:0a:e1:23:23:7c:6f:a8:37:e7:
         54:c5:84:fb:89:2f:2e:65:44:55:86:6e:40:92:4a:5e:18:5d:
         60:b3:29:ad:df:40:ca:90:0d:23:94:d0:a3:92:2b:75:5a:87:
         8f:57:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:46:22 2025 by rpki-client