Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/323830343a333066343a3a2f33322d313238203d3e20323634393833.roa
File:                     323830343a333066343a3a2f33322d313238203d3e20323634393833.roa (raw, json)
Hash identifier:          hF92K5P+m8X4ZBbuJYZ8NFRne7HuD35W3jgvKd1hkec=
Subject key identifier:   88:F1:68:70:F8:9C:E7:78:73:54:52:1F:7E:C4:B7:A5:B1:3A:B1:24
Certificate issuer:       /CN=FE97E687DEB4F14379B040E1A9F5E0B417A9A3C9
Certificate serial:       0C91326C6572A3F5A566B4914481479F11C95E1F
Authority key identifier: FE:97:E6:87:DE:B4:F1:43:79:B0:40:E1:A9:F5:E0:B4:17:A9:A3:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE97E687DEB4F14379B040E1A9F5E0B417A9A3C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/323830343a333066343a3a2f33322d313238203d3e20323634393833.roa
Signing time:             Tue 04 Nov 2025 14:36:00 +0000
ROA not before:           Tue 04 Nov 2025 14:31:00 +0000
ROA not after:            Tue 03 Nov 2026 14:36:00 +0000
asID:                     264983
IP address blocks:        2804:30f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/FE97E687DEB4F14379B040E1A9F5E0B417A9A3C9.crl
                          rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/FE97E687DEB4F14379B040E1A9F5E0B417A9A3C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE97E687DEB4F14379B040E1A9F5E0B417A9A3C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 13:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:91:32:6c:65:72:a3:f5:a5:66:b4:91:44:81:47:9f:11:c9:5e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE97E687DEB4F14379B040E1A9F5E0B417A9A3C9
        Validity
            Not Before: Nov  4 14:31:00 2025 GMT
            Not After : Nov  3 14:36:00 2026 GMT
        Subject: CN=88F16870F89CE7787354521F7EC4B7A5B13AB124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a3:c9:54:c0:9a:24:4d:aa:3c:69:c1:45:93:
                    2b:07:8c:17:f0:ff:9e:07:f4:31:69:f4:9c:bb:a4:
                    59:7e:cb:4c:b3:fe:60:84:86:64:af:2d:ce:48:ec:
                    46:29:fb:b8:c2:24:06:13:31:20:3c:21:22:2b:f1:
                    90:ce:e7:55:a9:62:b1:f7:c0:4e:df:d3:23:c2:60:
                    97:f6:44:70:7b:40:d9:19:b6:1f:2d:20:75:28:fa:
                    66:e0:03:1a:06:45:ec:2f:8c:29:6e:de:50:14:34:
                    49:be:86:bd:db:0a:75:2c:8b:c0:be:cd:ed:36:44:
                    5a:2c:cb:af:0f:df:f1:54:ee:ed:08:8d:12:d2:45:
                    2a:0b:50:73:eb:68:b1:0c:c0:d1:7b:0f:fa:58:8d:
                    50:91:7f:71:d2:6a:f8:c5:64:99:26:85:b7:24:f1:
                    fe:1e:63:e7:46:c6:11:9a:94:f8:24:0a:44:89:99:
                    ee:55:d2:5f:53:ca:db:00:88:d7:95:ea:42:1f:15:
                    ed:63:5b:9e:92:c2:fa:32:01:2b:36:95:16:32:78:
                    70:a5:c1:03:db:11:c0:6c:e0:5c:a0:2f:34:b4:4a:
                    a4:23:f8:53:1b:7e:7b:65:b1:15:d9:06:97:75:77:
                    0a:13:25:ca:a4:47:f2:c1:a4:96:b4:be:e1:a4:6e:
                    00:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F1:68:70:F8:9C:E7:78:73:54:52:1F:7E:C4:B7:A5:B1:3A:B1:24
            X509v3 Authority Key Identifier:
                keyid:FE:97:E6:87:DE:B4:F1:43:79:B0:40:E1:A9:F5:E0:B4:17:A9:A3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/FE97E687DEB4F14379B040E1A9F5E0B417A9A3C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE97E687DEB4F14379B040E1A9F5E0B417A9A3C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/323830343a333066343a3a2f33322d313238203d3e20323634393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:0b:da:ad:ff:f8:5e:51:ca:15:d7:13:1b:ab:39:69:a9:e7:
         55:58:ac:13:0e:c4:ee:c4:4a:b9:f0:2f:b1:6d:8c:52:bd:4c:
         e1:ec:df:31:ae:23:8a:55:5f:35:51:3f:ee:03:ef:e2:22:18:
         bd:50:56:70:81:b5:9d:60:8d:34:2f:27:76:48:fd:c5:07:63:
         8e:cb:81:7c:85:25:e8:64:05:34:f5:b3:5f:32:74:aa:46:6c:
         71:43:2e:cc:3a:c0:61:c7:8a:20:b0:56:1c:e8:a9:e4:86:82:
         5e:5a:26:f0:e5:13:b0:5d:c7:43:54:8c:7a:3b:f0:0d:89:48:
         01:81:e4:5c:57:d1:85:bc:5a:7c:75:c8:73:f7:13:9a:88:8b:
         6c:58:d0:87:96:64:71:31:e7:ce:96:38:38:19:ca:60:1b:f8:
         5c:0c:8e:1c:11:ea:a3:ad:4f:5b:b2:a4:b6:ae:45:ad:b6:5e:
         84:a4:4e:4f:38:f9:a0:71:05:3e:1a:44:70:09:6b:f2:dd:ab:
         fe:25:ff:91:02:7b:16:7f:c7:cf:7f:91:30:51:97:b2:a5:0f:
         a6:29:ae:ea:80:6e:ce:1f:40:de:1e:fb:e7:ba:fc:db:13:99:
         42:10:c6:27:83:c8:ec:03:de:b0:e9:61:92:aa:48:6e:98:0a:
         bd:1b:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:39:02 2025 by rpki-client