Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/323830343a353338303a3a2f33322d3332203d3e20323638353838.roa
File:                     323830343a353338303a3a2f33322d3332203d3e20323638353838.roa (raw, json)
Hash identifier:          8sEIpHgLX8RtYdwQe6RmxRKOLeZ/NA+qXvuy0z8ip00=
Subject key identifier:   69:5D:8A:F5:2E:7F:FA:4B:CE:E4:39:84:00:6E:CD:39:AC:72:3C:39
Certificate issuer:       /CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
Certificate serial:       3B6E098B2ABF5ACFE7EBCBC357E08A3B1B1E70D0
Authority key identifier: BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/323830343a353338303a3a2f33322d3332203d3e20323638353838.roa
Signing time:             Sun 27 Jul 2025 01:32:35 +0000
ROA not before:           Sun 27 Jul 2025 01:27:35 +0000
ROA not after:            Sun 26 Jul 2026 01:32:35 +0000
asID:                     268588
IP address blocks:        2804:5380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.crl
                          rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 20:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6e:09:8b:2a:bf:5a:cf:e7:eb:cb:c3:57:e0:8a:3b:1b:1e:70:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
        Validity
            Not Before: Jul 27 01:27:35 2025 GMT
            Not After : Jul 26 01:32:35 2026 GMT
        Subject: CN=695D8AF52E7FFA4BCEE43984006ECD39AC723C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b1:af:e6:60:e2:27:e3:7b:03:3e:29:16:fd:
                    a7:5b:3c:46:6b:8a:36:54:37:25:2d:4f:12:2a:cc:
                    48:5e:e8:bd:dc:f1:95:b9:a9:da:78:ff:c0:05:24:
                    dd:d4:71:fe:a5:00:17:2f:68:51:59:3c:ac:4b:9a:
                    5c:1e:dc:f3:47:58:4e:2e:97:10:cd:dc:a0:df:31:
                    bc:66:ff:a5:ac:16:8c:71:ef:0d:e2:d6:0f:d5:db:
                    52:52:57:a3:08:7b:7c:ae:00:bd:70:b8:eb:56:08:
                    f4:b8:7b:90:fd:2d:65:3b:3c:83:d2:7b:d3:5c:71:
                    d9:99:d7:30:d3:e9:54:6d:b9:02:3c:80:0d:62:41:
                    e9:b7:24:fc:b5:25:b8:b3:82:96:49:60:6e:93:31:
                    b9:4a:7e:a5:40:0c:82:0d:9c:d2:22:2e:6a:b7:86:
                    18:2e:5c:6b:a9:b4:2b:1d:0a:19:04:15:3b:82:47:
                    e0:31:2a:a5:7e:9b:91:79:75:05:9c:4b:0a:d3:08:
                    4d:b9:c3:49:3a:1d:ab:1d:5a:3a:26:8d:4e:6c:bf:
                    28:81:49:cd:bc:aa:16:9e:6f:03:f0:15:16:33:cc:
                    86:b3:41:b5:40:f4:4e:42:f6:f1:06:4a:62:cb:1e:
                    6c:34:02:6e:59:99:d0:b7:0a:b2:5b:75:a3:5d:2f:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5D:8A:F5:2E:7F:FA:4B:CE:E4:39:84:00:6E:CD:39:AC:72:3C:39
            X509v3 Authority Key Identifier:
                keyid:BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/323830343a353338303a3a2f33322d3332203d3e20323638353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5380::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:47:e5:c9:66:ed:9f:2e:3d:9a:b9:2e:d2:db:50:51:88:0b:
         24:e3:9a:e0:8d:f0:67:28:6a:f6:a5:1b:cf:a9:66:cf:54:91:
         53:19:94:18:13:6d:63:35:67:b4:0e:0f:b3:a4:bb:88:47:32:
         66:e2:fc:4e:8d:89:57:32:15:77:74:98:d1:13:6d:62:85:89:
         cf:8f:85:fb:32:22:f5:41:85:ab:6b:82:bb:bf:47:c1:ff:f2:
         fd:f0:96:9f:43:d7:78:07:03:95:f3:f0:2c:d0:86:76:65:8a:
         ce:16:e3:27:02:6d:4f:b2:79:66:56:cb:5d:61:e2:3c:0e:06:
         d5:c4:e8:e9:5a:84:ad:cb:54:b1:9a:c5:c4:74:3a:73:f3:f4:
         f1:cf:2e:f7:6e:19:77:73:3c:ca:89:36:18:ba:82:6d:fa:d0:
         0b:2f:4d:2a:11:f4:44:67:e2:a8:dc:90:bf:a7:02:1f:94:9a:
         91:1d:a0:ae:2c:8e:c7:c8:78:1d:b3:a9:f1:cb:09:c5:d1:82:
         9b:bb:eb:44:da:57:1b:bc:37:e2:44:13:94:52:46:ce:c9:2c:
         07:1f:fa:8a:62:ee:30:f1:d6:0c:ea:60:ed:0b:2f:c0:da:c8:
         b6:83:f8:c7:32:88:94:5d:4c:f2:77:c3:70:5a:1a:2d:32:74:
         fc:5f:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:44:23 2025 by rpki-client