Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a653030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a653030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          nBAFW5aXC1799JynDic8u0q3GQFRGxv+btbOUleuyIY=
Subject key identifier:   3A:BA:CA:67:48:B8:72:BE:A0:1B:4F:AE:30:CE:2F:9C:88:BE:50:2B
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       562F4BDEA95457814C3132B3F556663B2E37D95E
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a653030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Mon 06 Oct 2025 15:08:05 +0000
ROA not before:           Mon 06 Oct 2025 15:03:05 +0000
ROA not after:            Mon 05 Oct 2026 15:08:05 +0000
asID:                     268009
IP address blocks:        2804:5690:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 04:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2f:4b:de:a9:54:57:81:4c:31:32:b3:f5:56:66:3b:2e:37:d9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Oct  6 15:03:05 2025 GMT
            Not After : Oct  5 15:08:05 2026 GMT
        Subject: CN=3ABACA6748B872BEA01B4FAE30CE2F9C88BE502B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e6:68:da:3c:71:b3:2e:8d:b2:d9:0b:0c:7f:
                    2d:53:11:ce:bf:c5:9d:c5:02:42:06:a5:fe:6e:8f:
                    9a:25:59:e3:a3:e2:c1:a7:cb:a0:6b:9c:6e:7c:a3:
                    00:3a:49:63:33:91:76:71:3f:d4:1a:7c:fd:01:de:
                    8d:bb:06:e5:7d:02:e0:52:04:03:ec:83:79:fd:81:
                    7f:d6:f7:a8:a0:71:9f:a4:62:b5:07:cc:97:df:72:
                    31:18:0d:01:1a:3f:a5:f6:6b:f2:33:4a:11:6f:01:
                    9a:65:ec:43:66:52:36:7f:61:d3:a1:f2:b8:d7:66:
                    35:2e:74:4d:e1:98:d6:26:e6:a1:a8:5e:56:41:68:
                    dd:22:14:51:c8:c0:32:c1:a7:72:5e:b8:5a:4e:fb:
                    ce:1d:1d:98:1d:60:d0:00:69:d7:f2:64:36:c6:8e:
                    b7:43:30:06:dd:b8:6e:51:41:06:37:76:1b:9e:de:
                    cb:3b:5e:f6:2c:2c:fb:fb:39:8e:52:d7:34:6e:d6:
                    42:48:51:ce:77:06:8b:aa:c7:71:1c:0c:3d:95:0f:
                    46:70:5e:c3:72:3e:b0:4d:9e:c9:44:28:af:55:ef:
                    a3:58:2a:26:83:bc:49:c2:91:41:f2:a3:16:18:16:
                    75:f5:75:55:91:74:49:95:9b:ee:c6:f8:55:78:a8:
                    4d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BA:CA:67:48:B8:72:BE:A0:1B:4F:AE:30:CE:2F:9C:88:BE:50:2B
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a653030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:96:fb:9a:d8:ed:cb:aa:f9:28:7f:c0:ea:9d:6a:8c:f5:f5:
         a6:09:ce:e3:65:b5:59:ae:97:8b:05:e3:65:b8:aa:b4:13:4f:
         01:5c:61:77:a2:9e:52:22:ce:9e:f9:d6:29:c4:e6:7a:17:f9:
         f5:dd:81:51:57:6b:6f:b8:6f:c5:85:83:44:ad:da:4d:a8:78:
         a8:e0:d4:35:f3:31:8a:2e:40:df:0a:5b:27:22:c5:4a:bb:65:
         98:27:77:47:54:0b:5c:e8:a0:b3:db:4f:1d:a4:ca:8c:90:95:
         a3:15:fb:bf:cb:c8:cd:88:f6:c1:60:9f:7f:17:f0:ee:4b:76:
         ea:b3:09:a1:ab:d4:1f:e2:36:93:ca:31:4c:50:f8:e5:fa:40:
         84:d4:c1:8a:9b:68:77:da:25:d5:39:97:1b:16:5f:b4:11:13:
         54:e2:c2:ad:89:06:f2:9e:f5:de:dc:5b:c5:23:2d:d2:c7:b9:
         fe:d5:f2:ff:1f:46:17:53:a9:95:00:5e:84:c2:b9:09:f3:5d:
         aa:bb:a5:53:02:4b:9f:3d:7a:86:49:e2:32:29:6f:d4:eb:e5:
         96:92:62:d5:48:2d:19:56:cb:bc:aa:6e:04:f5:67:18:e3:cb:
         67:0b:b1:cb:ba:47:ef:ba:2b:3a:3d:5b:65:6f:30:18:bb:bb:
         35:97:b2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:28 2025 by rpki-client