Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/323830343a333532383a3a2f33322d313238203d3e20323636323732.roa
File:                     323830343a333532383a3a2f33322d313238203d3e20323636323732.roa (raw, json)
Hash identifier:          4aVsFRn1l4nvFUvFHQ/e137PplNuAvprtjd/BW8Ocx0=
Subject key identifier:   FC:69:33:3B:CA:D5:25:48:34:68:D1:66:68:A1:EF:A1:54:8F:FA:C8
Certificate issuer:       /CN=8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427
Certificate serial:       636A6F1732994D25BC346B011B48A8E7A5BC18E6
Authority key identifier: 85:47:CD:EB:A3:25:B0:3E:5B:5D:CA:9F:B7:B6:B1:D6:1F:D7:84:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/323830343a333532383a3a2f33322d313238203d3e20323636323732.roa
Signing time:             Tue 04 Nov 2025 03:05:00 +0000
ROA not before:           Tue 04 Nov 2025 03:00:00 +0000
ROA not after:            Tue 03 Nov 2026 03:05:00 +0000
asID:                     266272
IP address blocks:        2804:3528::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.crl
                          rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 23:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6a:6f:17:32:99:4d:25:bc:34:6b:01:1b:48:a8:e7:a5:bc:18:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427
        Validity
            Not Before: Nov  4 03:00:00 2025 GMT
            Not After : Nov  3 03:05:00 2026 GMT
        Subject: CN=FC69333BCAD525483468D16668A1EFA1548FFAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:43:7e:23:e7:38:09:2d:76:a6:08:88:9e:48:
                    0c:42:88:50:ed:b4:a4:fa:56:6b:e8:80:e6:69:8f:
                    e2:6e:8c:cc:8d:17:9b:76:52:6c:f9:c8:2f:f8:cd:
                    48:c9:d5:c9:d6:63:4a:e7:18:d4:26:eb:bc:1c:29:
                    4e:4d:79:26:b2:bd:6c:a5:1a:7d:30:e6:fd:fe:40:
                    8e:f8:f0:94:46:ae:90:fa:86:52:a8:28:47:3b:9a:
                    4f:9c:6b:a8:8e:60:7b:74:54:da:2b:51:df:1e:8a:
                    a1:dd:45:80:fa:45:d3:d2:ea:27:8c:d1:4e:67:f2:
                    81:8d:dd:09:12:5d:a1:4a:13:15:b1:02:d4:ce:24:
                    f5:f5:2f:6a:31:63:e1:1f:75:ea:04:83:be:57:e0:
                    4c:2f:60:30:3e:9e:b6:aa:06:1f:73:fe:ba:8e:5c:
                    f8:ca:7a:22:b4:72:01:82:2c:60:0d:ed:c8:30:37:
                    7f:06:c0:14:e5:e8:c8:25:e6:04:1f:eb:5a:4d:43:
                    47:4d:a0:71:3c:5c:d0:06:21:03:8c:5b:99:56:40:
                    64:3e:0d:6f:64:79:38:9b:ff:24:2c:2d:24:5d:a6:
                    92:ba:67:0d:68:07:38:ec:84:1a:90:c5:65:ee:4e:
                    fe:01:cc:71:11:d2:84:36:56:de:55:54:9b:ed:6e:
                    54:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:69:33:3B:CA:D5:25:48:34:68:D1:66:68:A1:EF:A1:54:8F:FA:C8
            X509v3 Authority Key Identifier:
                keyid:85:47:CD:EB:A3:25:B0:3E:5B:5D:CA:9F:B7:B6:B1:D6:1F:D7:84:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/323830343a333532383a3a2f33322d313238203d3e20323636323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3528::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:2d:fa:9a:72:c8:55:d6:0a:06:56:2f:37:0f:79:98:3d:ac:
         09:52:ea:8f:e2:a5:b6:c6:61:81:f5:8a:c3:c1:ed:ed:8d:19:
         e4:b0:c4:56:ab:f5:82:97:b0:78:bc:d3:3a:f9:7d:6c:dd:0d:
         d3:57:3f:07:62:3e:26:ab:fa:10:76:94:0c:3c:1f:8a:d3:48:
         e6:97:3b:ae:6b:51:8c:7c:85:a2:37:1f:2b:bd:e3:08:52:cf:
         a3:2e:97:cf:42:74:62:3a:ea:90:fc:b9:7a:27:8d:4a:3f:04:
         5d:ee:6f:a4:28:17:51:c2:ba:dd:53:01:29:ae:93:5d:56:42:
         ed:03:fd:48:7c:1c:fb:06:9a:f2:4d:79:ae:ff:ec:da:25:ca:
         99:cf:37:78:fc:a1:a6:cf:15:05:1a:0a:06:73:90:ac:fd:6c:
         1f:ea:53:73:fa:d3:01:dd:a9:3f:5d:87:6c:c8:5c:89:04:e1:
         db:32:f5:eb:8a:4f:4a:b4:f7:ea:34:b1:62:bd:18:ea:ca:6a:
         f7:73:ca:e9:41:6e:7d:94:e7:c2:1b:bd:a9:1e:fc:39:f5:3d:
         69:a7:fc:67:82:4b:13:04:7d:3d:d8:17:7b:63:14:e2:6e:94:
         93:39:79:5b:fb:90:3e:49:f0:97:90:bf:5b:cd:f4:32:d6:fa:
         71:41:11:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:48 2025 by rpki-client