Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a323030303a3a2f34302d3430203d3e20323635343638.roa
File:                     323830343a333439633a323030303a3a2f34302d3430203d3e20323635343638.roa (raw, json)
Hash identifier:          1a7ZVj4+8StRU4GlBo6jaC0o9uo6zbyyyO6ju02yP4s=
Subject key identifier:   49:E8:B0:FF:9F:C1:1C:72:3B:26:5D:B6:03:FE:9F:26:BB:90:A2:92
Certificate issuer:       /CN=14115659F5BEF5DE4FB458DCB8485788EF7B5306
Certificate serial:       0ABE261F40E0007892F6E08175A07FE81FA95C1E
Authority key identifier: 14:11:56:59:F5:BE:F5:DE:4F:B4:58:DC:B8:48:57:88:EF:7B:53:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a323030303a3a2f34302d3430203d3e20323635343638.roa
Signing time:             Thu 30 Oct 2025 17:56:22 +0000
ROA not before:           Thu 30 Oct 2025 17:51:22 +0000
ROA not after:            Thu 29 Oct 2026 17:56:22 +0000
asID:                     265468
IP address blocks:        2804:349c:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 19:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:be:26:1f:40:e0:00:78:92:f6:e0:81:75:a0:7f:e8:1f:a9:5c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14115659F5BEF5DE4FB458DCB8485788EF7B5306
        Validity
            Not Before: Oct 30 17:51:22 2025 GMT
            Not After : Oct 29 17:56:22 2026 GMT
        Subject: CN=49E8B0FF9FC11C723B265DB603FE9F26BB90A292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:d2:e6:9b:80:78:ac:82:4f:97:b9:56:01:
                    8b:82:4a:d6:3b:52:f2:31:2c:12:7d:3c:64:96:e3:
                    ae:c9:9b:4b:c8:84:b0:82:5b:21:ee:65:8b:2c:5a:
                    3d:ef:04:6c:b0:50:ef:e2:a8:9e:b6:21:80:10:69:
                    19:7f:3c:f6:53:5f:7e:22:cc:b9:52:df:1d:1e:20:
                    e7:ad:e3:7c:2d:c7:44:03:ee:35:77:9c:56:1e:21:
                    d6:87:57:81:76:b7:a1:ac:d1:ab:58:46:a4:ee:6a:
                    68:7a:a0:9d:f5:da:92:8c:14:99:9a:a1:95:8f:83:
                    5e:69:b6:e2:b2:a7:ce:74:c9:42:a7:ee:b4:64:e1:
                    cf:db:00:dc:0d:b3:7e:b6:3b:39:2e:a2:ce:17:6c:
                    e1:d7:b6:ea:22:ac:21:79:0f:0f:5e:a6:96:b4:19:
                    72:21:a5:4d:f2:32:bc:e6:d3:ad:05:8e:4c:82:11:
                    bb:2c:d0:61:1b:1f:87:ed:02:12:cd:3a:da:90:ef:
                    e0:68:96:68:b9:2a:74:24:58:73:47:3b:81:d1:96:
                    69:06:fe:c0:72:ed:76:34:1b:18:83:3a:4c:9a:c5:
                    f2:5f:b7:0d:f4:87:5b:da:38:99:fe:a4:27:de:29:
                    6e:46:75:24:e1:1e:dc:08:8b:2e:9e:1c:29:5f:c2:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E8:B0:FF:9F:C1:1C:72:3B:26:5D:B6:03:FE:9F:26:BB:90:A2:92
            X509v3 Authority Key Identifier:
                keyid:14:11:56:59:F5:BE:F5:DE:4F:B4:58:DC:B8:48:57:88:EF:7B:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a323030303a3a2f34302d3430203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:349c:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:db:82:7a:e3:6a:d6:f8:63:f4:00:71:e1:0d:86:7d:ca:eb:
         06:3d:7e:be:42:d9:6f:b9:89:cb:e2:16:4a:24:bf:a8:52:08:
         55:5f:f4:b8:bd:17:59:aa:da:cf:fb:23:9a:57:78:d8:bf:80:
         f6:b1:e1:31:bc:0c:ff:98:73:9f:b7:e6:c2:83:3b:d9:69:21:
         f6:be:16:01:ab:38:ba:3c:04:6d:4c:66:e4:f5:fa:de:0e:11:
         f9:d5:b7:e6:16:67:5d:ef:9e:bf:b0:7f:00:36:c9:a2:af:5e:
         9d:0a:34:e1:85:9f:08:a4:78:bb:80:e9:a9:69:aa:6c:6e:1e:
         6a:18:0c:6d:13:aa:ce:67:6e:a4:ff:44:33:7f:74:de:4e:be:
         7d:33:7a:49:97:f0:f5:f8:ec:16:af:bd:0b:99:47:82:c4:f7:
         2f:5f:19:2b:b7:23:1d:c8:2d:4b:c7:46:3d:57:05:a5:59:16:
         e3:64:ee:4a:f4:14:fe:a6:40:80:5e:f4:b2:31:a7:ba:59:73:
         8a:5b:16:df:f7:31:7d:ae:4d:c5:bb:c2:5f:c8:9a:2a:59:b4:
         6d:3e:80:0e:aa:54:71:91:08:6e:20:f0:60:c9:fd:aa:01:51:
         e3:60:88:25:c1:1e:86:56:6e:e4:1b:10:65:04:a1:51:2c:cb:
         03:77:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:23:38 2025 by rpki-client