Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa
File:                     323830343a323839633a3a2f33322d3332203d3e20323633393730.roa (raw, json)
Hash identifier:          hanX1n7pZBfYj0MtzUDESDsAiHLpUk0WL8EIKdSOJRg=
Subject key identifier:   D7:C4:E8:BE:CB:AC:CD:BD:F4:96:CF:20:A2:ED:E1:A5:89:1B:58:4F
Certificate issuer:       /CN=4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D
Certificate serial:       3FF3F1999DB5B3DD5E8B216999104EB15E4D3AEA
Authority key identifier: 4B:A0:BB:3B:0B:41:C1:99:EC:E0:C0:52:5E:C5:45:C2:9A:7E:72:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa
Signing time:             Tue 04 Nov 2025 12:19:14 +0000
ROA not before:           Tue 04 Nov 2025 12:14:14 +0000
ROA not after:            Tue 03 Nov 2026 12:19:14 +0000
asID:                     263970
IP address blocks:        2804:289c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl
                          rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 07:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f3:f1:99:9d:b5:b3:dd:5e:8b:21:69:99:10:4e:b1:5e:4d:3a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D
        Validity
            Not Before: Nov  4 12:14:14 2025 GMT
            Not After : Nov  3 12:19:14 2026 GMT
        Subject: CN=D7C4E8BECBACCDBDF496CF20A2EDE1A5891B584F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e9:90:c6:7b:18:11:85:02:a5:79:91:67:e3:
                    6c:05:b1:03:03:6d:cb:17:38:04:47:9b:29:b3:2b:
                    d5:5e:43:53:c7:84:dd:c1:aa:18:e6:94:b4:92:9d:
                    4b:ae:18:2e:af:be:88:68:da:73:66:73:9c:cd:ce:
                    59:0a:53:5c:4f:66:3e:b5:73:d0:d5:0e:31:92:00:
                    f8:27:50:f0:7e:6e:d4:f2:64:c5:71:69:36:d4:4f:
                    c4:86:6c:bd:93:3d:1d:31:53:3f:6e:c7:f7:7b:6a:
                    53:47:17:3a:66:59:06:00:e7:4e:53:07:44:cc:2a:
                    82:9a:1a:14:10:1f:ab:af:a5:7c:d7:6a:45:9c:f6:
                    e6:3a:99:54:47:42:a1:42:b5:43:b2:91:ae:a2:af:
                    58:96:13:71:e0:ff:5c:3c:20:2c:bd:19:37:1e:5b:
                    ea:77:6c:72:b5:1f:f8:6b:17:f4:94:91:c9:6d:a3:
                    c0:22:77:f7:d1:ac:6f:d8:0f:b3:87:8f:bf:d3:dd:
                    46:75:ab:3a:13:bf:56:df:ad:64:f9:6d:53:f1:f8:
                    d5:64:d3:48:3c:bd:b1:67:68:cc:b1:48:f2:dc:42:
                    bb:31:98:19:47:9a:f4:c2:b7:af:8e:85:c3:29:8d:
                    9d:65:9a:e3:c3:e8:68:21:56:14:74:41:9a:e3:23:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C4:E8:BE:CB:AC:CD:BD:F4:96:CF:20:A2:ED:E1:A5:89:1B:58:4F
            X509v3 Authority Key Identifier:
                keyid:4B:A0:BB:3B:0B:41:C1:99:EC:E0:C0:52:5E:C5:45:C2:9A:7E:72:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:289c::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:2f:3a:2f:46:df:4f:73:e1:c5:13:2f:79:b0:71:f3:1c:42:
         24:ad:1c:fb:0d:ef:3b:f5:d1:22:26:01:74:bf:89:0c:4e:01:
         3d:53:f9:2d:55:4c:d6:ac:6a:98:b9:93:37:26:c4:7b:09:6c:
         28:96:85:d1:59:50:73:fa:c5:61:92:58:2e:5f:18:6a:63:b5:
         c8:3d:be:36:af:e4:a1:f2:4b:6e:f6:4d:0e:e8:f8:9a:c9:1c:
         1b:a4:4b:42:fa:0e:00:81:c4:17:d4:da:cd:8d:c6:43:70:6a:
         ce:64:a0:bb:3a:07:cd:b9:37:5a:52:f2:5b:0a:ea:f4:b1:35:
         3d:98:d0:1c:c5:3b:ee:71:af:c3:d3:1b:92:0d:2c:62:58:8e:
         21:11:9a:51:aa:4c:ef:b0:e9:5c:11:86:fd:a3:27:e7:e1:31:
         39:7b:a2:4e:f7:8b:36:c1:66:04:1f:6e:79:9d:fe:d4:a8:f2:
         98:0c:83:3f:44:f6:b2:ea:2d:27:bb:64:6f:95:03:b6:e4:0b:
         1b:b4:33:40:37:bd:3d:15:96:13:ba:39:56:2e:d0:8c:04:9c:
         c7:ea:62:da:15:6c:b9:b2:10:4b:11:b7:56:f3:7d:59:8f:d0:
         87:48:58:53:76:2a:42:62:69:b1:1d:ce:1e:34:27:2c:72:29:
         53:90:dd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:34:54 2025 by rpki-client