Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/323830343a336230303a3a2f33322d313238203d3e203532393733.roa
File:                     323830343a336230303a3a2f33322d313238203d3e203532393733.roa (raw, json)
Hash identifier:          dDHszRKB3orIGKWta6QqeEG12LX9LMgbteP60Rj4848=
Subject key identifier:   AF:0F:33:06:CB:EF:17:5F:CF:9E:BE:58:38:57:CD:9E:FA:06:DB:20
Certificate issuer:       /CN=960B59E054F187A995D7F6038A0BA2336525F190
Certificate serial:       4819BCC72FB2BDA93C6A6AA33309C170BE567B9F
Authority key identifier: 96:0B:59:E0:54:F1:87:A9:95:D7:F6:03:8A:0B:A2:33:65:25:F1:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/323830343a336230303a3a2f33322d313238203d3e203532393733.roa
Signing time:             Wed 05 Nov 2025 03:00:22 +0000
ROA not before:           Wed 05 Nov 2025 02:55:22 +0000
ROA not after:            Wed 04 Nov 2026 03:00:22 +0000
asID:                     52973
IP address blocks:        2804:3b00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:19:bc:c7:2f:b2:bd:a9:3c:6a:6a:a3:33:09:c1:70:be:56:7b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960B59E054F187A995D7F6038A0BA2336525F190
        Validity
            Not Before: Nov  5 02:55:22 2025 GMT
            Not After : Nov  4 03:00:22 2026 GMT
        Subject: CN=AF0F3306CBEF175FCF9EBE583857CD9EFA06DB20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:fc:50:60:2e:44:9e:66:63:85:79:46:f9:
                    39:dd:56:d6:58:aa:1d:d8:0b:3d:b1:72:8a:2a:fa:
                    83:4b:32:10:ce:b8:0b:3f:f3:a6:21:67:51:77:eb:
                    7b:54:2f:41:0e:4c:a9:5e:2f:c3:2e:96:26:f0:f8:
                    b7:dd:3c:5b:34:01:e4:b3:ff:83:e5:dc:f1:7a:e1:
                    df:b9:10:a0:51:ba:09:84:c0:3c:1d:dd:5a:ad:57:
                    37:f2:d6:d5:38:84:d7:fd:cd:f7:b1:e3:68:78:b7:
                    1b:84:c2:28:3a:a0:85:73:a7:78:93:fd:60:a2:6f:
                    b6:ce:b2:73:6d:56:ce:ab:6b:f6:e5:4f:fe:9a:89:
                    eb:07:44:53:57:64:ec:60:92:4b:2d:32:ec:01:a6:
                    6c:79:42:c1:7a:36:22:8a:2f:9c:f0:36:76:84:80:
                    52:7f:71:06:75:f8:3e:91:9c:84:40:e3:89:96:ab:
                    df:83:86:e2:f3:9f:95:7d:23:ae:ff:0a:0d:68:b1:
                    6e:bc:40:73:00:18:63:c5:fc:91:8e:39:51:db:d5:
                    62:2b:b0:25:73:2d:38:dc:0b:3d:74:e2:8e:51:9f:
                    8d:8b:12:3a:a0:37:0e:24:5d:a6:a5:73:fc:13:ce:
                    9f:d7:a8:71:83:fc:84:cc:87:49:9e:71:db:96:ee:
                    2f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0F:33:06:CB:EF:17:5F:CF:9E:BE:58:38:57:CD:9E:FA:06:DB:20
            X509v3 Authority Key Identifier:
                keyid:96:0B:59:E0:54:F1:87:A9:95:D7:F6:03:8A:0B:A2:33:65:25:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/323830343a336230303a3a2f33322d313238203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:72:a4:4a:89:d9:47:95:6a:1a:8c:db:16:b5:6b:35:fe:
         3e:3e:81:66:57:99:4d:3f:ad:76:4f:25:5d:33:d1:d3:60:8c:
         72:0c:87:b0:9f:0f:b1:6b:46:43:38:56:7d:62:e3:44:db:cd:
         0d:43:80:b4:17:68:71:28:32:ed:a9:01:9e:18:25:ee:ee:82:
         47:03:b4:fd:38:3a:1a:62:92:30:69:a5:2f:ff:2a:2f:96:ea:
         4a:8a:06:4f:7a:19:37:63:0a:bf:77:92:03:a5:6c:81:0c:fa:
         72:b3:ac:6f:88:a6:a5:31:81:24:a9:32:25:2e:f7:94:f2:1d:
         8f:74:87:b9:4b:51:7d:fe:e7:07:04:d4:79:bc:85:dd:33:c7:
         b6:14:bb:27:54:38:57:64:20:90:16:6c:12:82:87:c2:40:17:
         f9:24:a6:8a:f9:f3:ad:08:91:dc:8b:c2:2c:9b:e0:97:2e:a8:
         4b:e5:86:6e:1d:c0:46:82:01:0f:77:11:55:5b:74:5d:6b:9c:
         9f:4d:79:b1:2f:74:97:c3:d4:5c:f9:9e:2f:b8:89:07:0f:02:
         4b:40:f7:fa:ef:8b:75:ea:b9:e1:25:9f:8b:19:e9:65:19:df:
         69:4f:0a:c0:be:37:57:58:21:66:86:96:90:89:25:b0:59:cd:
         c5:4d:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:15:12 2025 by rpki-client