Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a353030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a353030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          YX681CjisUVi9PSDHnpgnvXGCpNOoK7KnV4PQGdw1j0=
Subject key identifier:   C0:65:74:8B:F9:F7:B0:E5:B3:B7:81:11:5C:9B:FC:AD:A3:EB:12:8B
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       0F547E42549998A6DC8E841266196941BFFFC5A5
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a353030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Mon 06 Oct 2025 15:08:07 +0000
ROA not before:           Mon 06 Oct 2025 15:03:07 +0000
ROA not after:            Mon 05 Oct 2026 15:08:07 +0000
asID:                     268009
IP address blocks:        2804:5690:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 04:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:54:7e:42:54:99:98:a6:dc:8e:84:12:66:19:69:41:bf:ff:c5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Oct  6 15:03:07 2025 GMT
            Not After : Oct  5 15:08:07 2026 GMT
        Subject: CN=C065748BF9F7B0E5B3B781115C9BFCADA3EB128B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9c:df:8d:a1:f1:a9:df:ba:56:1f:cc:23:c7:
                    a0:8e:42:1f:f2:8c:99:b3:ec:dc:55:1e:1f:b9:79:
                    fa:33:8c:31:7d:19:3d:0b:f6:2a:fc:51:5f:bb:4f:
                    ca:af:74:e7:dc:55:0a:34:f8:1a:cd:7c:c2:76:0b:
                    76:aa:b9:de:63:fe:e5:e5:b2:f2:e3:1d:12:c6:e1:
                    05:fb:88:52:37:b1:dd:ad:53:39:cb:c0:35:8d:1f:
                    18:04:74:93:cd:05:b1:62:e0:b5:a1:0b:db:d1:71:
                    40:55:93:1d:5f:bb:fc:5f:5a:bd:7f:a4:28:e9:eb:
                    11:f3:0b:ba:6b:c0:b6:cf:c1:c0:ee:a3:65:61:a1:
                    3a:b0:4f:03:ab:90:6c:06:14:58:ba:54:67:e0:ff:
                    41:ce:d4:38:32:0e:97:57:03:ec:db:af:dd:40:2f:
                    b0:7b:3f:12:a3:62:61:45:34:7c:b1:16:b2:87:e9:
                    0b:2f:21:8e:65:58:1a:41:21:9d:5e:7d:bd:20:d1:
                    39:4a:fb:df:61:c9:c2:42:79:64:5d:27:7c:50:b5:
                    a4:7c:2a:ec:31:16:30:91:8f:89:5d:97:18:ab:da:
                    6b:29:2d:49:87:da:b2:d4:6a:1b:88:01:e4:4b:0d:
                    8e:7c:d2:8f:bf:26:1b:64:4b:84:7d:fb:52:f3:f2:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:65:74:8B:F9:F7:B0:E5:B3:B7:81:11:5C:9B:FC:AD:A3:EB:12:8B
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a353030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9b:a4:dc:b6:4b:82:9f:e7:38:7c:40:4f:98:6d:24:56:c7:24:
         4f:85:42:67:c4:59:0f:d0:a4:b6:ec:b1:38:f6:b9:93:b8:db:
         5a:cf:7b:65:c2:bf:ba:d1:9b:b1:82:db:d8:65:38:2c:78:88:
         15:b6:cb:72:5a:4a:c0:bd:eb:30:5b:53:0a:11:1a:79:a1:7e:
         1b:10:27:3a:a6:45:a6:01:93:06:2a:d0:92:f6:7a:7c:06:29:
         b9:1f:f2:e1:bd:ed:36:c7:a1:73:22:8e:f8:8b:62:3d:b0:6e:
         1e:3d:5d:a3:e3:89:20:e2:54:6a:18:74:75:f4:42:fc:6b:42:
         38:6e:4c:4c:4b:1e:36:cd:d7:28:06:c0:23:b3:a9:21:49:a2:
         32:0d:3a:21:d8:89:8f:cd:bb:5e:78:63:9f:cc:5a:c3:1c:b9:
         ea:07:81:34:d9:84:7c:4f:11:55:d4:1d:6c:a8:4b:11:e2:d2:
         83:b0:ba:b0:77:77:e2:0d:d4:e0:05:fd:0d:56:9b:d1:31:93:
         f2:cc:b2:a2:46:d8:fb:bc:79:e1:a4:dd:7b:ba:a5:4a:78:88:
         37:bd:32:de:8c:57:1c:5b:a3:94:1e:80:64:fb:a5:66:68:66:
         07:38:8a:dd:d3:9d:48:bb:40:45:cd:03:31:52:72:66:bd:43:
         57:f6:fc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:39 2025 by rpki-client