Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33332d3333203d3e20323637303739.roa
File:                     323830343a343764343a3a2f33332d3333203d3e20323637303739.roa (raw, json)
Hash identifier:          /K7GpndfA3wa0D3wc/yqfqCixbxeRzG5puVeqQiNQ+s=
Subject key identifier:   78:A8:95:93:CE:97:D0:11:D8:76:B6:5A:B3:DE:92:CB:1B:27:9D:F1
Certificate issuer:       /CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398
Certificate serial:       6F9557265F43971059D40CC81D7E3D3880000D36
Authority key identifier: A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33332d3333203d3e20323637303739.roa
Signing time:             Tue 04 Nov 2025 18:57:30 +0000
ROA not before:           Tue 04 Nov 2025 18:52:30 +0000
ROA not after:            Tue 03 Nov 2026 18:57:30 +0000
asID:                     267079
IP address blocks:        2804:47d4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl
                          rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 14:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:95:57:26:5f:43:97:10:59:d4:0c:c8:1d:7e:3d:38:80:00:0d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398
        Validity
            Not Before: Nov  4 18:52:30 2025 GMT
            Not After : Nov  3 18:57:30 2026 GMT
        Subject: CN=78A89593CE97D011D876B65AB3DE92CB1B279DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:15:72:e4:ba:fe:d6:dc:6d:15:e7:07:3f:a8:
                    1d:eb:1c:67:d3:7c:2c:26:6f:ed:0a:81:1b:82:e3:
                    26:24:12:ba:c3:4e:15:a8:00:4f:12:1d:f4:d8:40:
                    76:a4:ab:e9:1b:8c:86:b6:4b:e9:8f:4f:c8:65:cc:
                    c5:2c:82:60:81:f7:8f:35:25:72:87:5a:da:54:db:
                    39:e3:d4:3f:13:69:e0:2b:5f:fc:30:7e:8d:ab:22:
                    60:68:d6:48:34:c0:d3:31:b1:89:c0:e5:b4:82:e0:
                    09:c1:da:d0:c6:73:5a:34:bc:f6:74:47:1f:9c:fc:
                    fb:2f:b5:cf:1c:ae:b9:a4:f3:83:b6:30:a3:9a:36:
                    58:15:69:ca:a2:95:d0:9e:58:f8:40:3c:8f:8c:bb:
                    35:b6:41:22:a1:7d:86:15:1f:fa:3b:9b:62:59:1c:
                    97:23:d7:70:a5:e7:39:72:67:4c:74:9a:c0:e5:44:
                    bb:92:ac:ee:a6:7e:66:bb:d8:34:f9:50:0c:82:85:
                    29:20:02:c2:d2:60:84:70:39:dd:e8:62:45:29:34:
                    d0:76:6f:92:5a:ad:6f:58:1a:b2:e0:a1:8f:45:8a:
                    0e:28:0f:37:b6:a6:b7:f5:d3:a5:52:f0:ac:dd:7e:
                    34:c6:a9:8e:cb:6d:6b:e9:5a:f7:02:53:72:97:ea:
                    32:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A8:95:93:CE:97:D0:11:D8:76:B6:5A:B3:DE:92:CB:1B:27:9D:F1
            X509v3 Authority Key Identifier:
                keyid:A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33332d3333203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         65:f9:db:93:3a:39:05:e1:7b:16:ca:b8:c7:ce:26:84:db:ef:
         4f:00:51:63:c9:f0:09:82:44:14:eb:b3:24:7a:c5:33:cc:b7:
         3f:13:15:fe:9e:05:c2:4d:60:b7:a3:64:69:60:69:cb:76:74:
         9e:25:1d:11:e5:e2:38:40:99:4e:d4:26:21:0d:a0:cb:4a:12:
         ad:c6:0c:a0:76:17:54:ee:fb:8b:e5:e4:0b:80:97:d7:11:8b:
         af:eb:b1:7a:75:92:90:9d:c1:e0:6c:4e:4d:72:b7:ec:b4:32:
         00:60:30:5c:0d:89:9a:17:02:99:3e:55:59:17:31:02:54:04:
         74:b9:55:84:29:88:6f:20:55:e6:f0:d4:6d:51:13:70:fe:c0:
         ee:00:28:b9:8d:aa:b2:60:9c:9f:5d:91:31:9f:21:49:c3:5f:
         bb:72:04:42:b9:35:5e:97:8a:15:e7:fe:57:fb:1d:a0:a1:ea:
         54:65:fb:da:19:66:3c:79:45:96:85:3b:17:c9:55:87:08:39:
         5e:57:30:23:56:f4:6f:f9:6e:ea:ab:60:ad:bc:bd:dd:a9:98:
         11:81:f0:a6:76:19:9e:d2:5a:ae:70:81:db:ce:a3:1b:ed:ee:
         39:5e:6b:e1:b5:c0:bd:88:ff:f1:f3:4b:cc:b1:91:e1:d8:e6:
         a6:2c:29:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:52:23 2025 by rpki-client