Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a373164343a3a2f33322d3438203d3e20323730383134.roa
File:                     323830343a373164343a3a2f33322d3438203d3e20323730383134.roa (raw, json)
Hash identifier:          ayzKMvLWJgYD+kPoK17ibRwzJdPcR4DG4aMdOd3a4U4=
Subject key identifier:   E1:23:79:EB:AD:CE:CB:5F:BD:4A:46:09:3B:8D:49:1E:FA:2D:CE:0B
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       071BE32FA0AFDC3F8CB6266397EAF21197F0D431
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a373164343a3a2f33322d3438203d3e20323730383134.roa
Signing time:             Mon 27 Oct 2025 17:06:43 +0000
ROA not before:           Mon 27 Oct 2025 17:01:43 +0000
ROA not after:            Mon 26 Oct 2026 17:06:43 +0000
asID:                     270814
IP address blocks:        2804:71d4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1b:e3:2f:a0:af:dc:3f:8c:b6:26:63:97:ea:f2:11:97:f0:d4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Oct 27 17:01:43 2025 GMT
            Not After : Oct 26 17:06:43 2026 GMT
        Subject: CN=E12379EBADCECB5FBD4A46093B8D491EFA2DCE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:a2:d1:9d:6d:c4:8d:6a:d2:11:94:af:36:
                    07:61:a5:1b:58:7d:92:2a:ed:22:3b:8b:34:21:fe:
                    d1:66:1d:46:4c:c1:dd:63:34:da:f3:44:c2:1a:cc:
                    c2:d2:45:7e:5a:3c:94:45:f5:f9:1b:e2:70:29:64:
                    1f:8e:fe:a0:a2:97:78:30:5e:03:63:f8:c7:2c:21:
                    0e:38:98:48:21:13:7f:4d:96:7c:b8:d1:1f:24:fd:
                    ca:cf:c9:49:4e:59:2f:e5:c4:b9:7d:84:4e:cf:96:
                    01:3d:b0:47:fb:12:68:cd:35:1f:17:7a:c7:98:e6:
                    ea:0c:e5:e7:01:38:b4:c8:cb:2c:c8:8d:65:8c:d3:
                    ca:a1:32:25:8b:56:d5:52:fb:3f:87:12:7a:17:40:
                    94:79:ca:ab:96:28:8b:e1:c1:8a:4c:70:f0:90:6f:
                    c5:a2:7d:0c:5d:22:4d:77:17:cd:24:6e:b1:c8:a6:
                    99:48:7d:54:ec:f0:2f:b6:65:13:ea:3c:3a:84:44:
                    aa:fb:0d:57:d3:08:bc:0d:08:29:1f:ba:9d:a9:2a:
                    0d:74:b6:15:6b:2a:f6:83:34:98:ea:c5:91:31:30:
                    fa:93:d3:95:5e:ff:ce:77:d9:b6:06:dd:a4:eb:78:
                    96:54:e6:5c:3d:3e:65:06:49:ad:5b:a6:08:b6:6f:
                    eb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:23:79:EB:AD:CE:CB:5F:BD:4A:46:09:3B:8D:49:1E:FA:2D:CE:0B
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a373164343a3a2f33322d3438203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:6e:09:7e:b9:11:51:da:4d:55:58:bc:72:e9:54:6f:e9:df:
         37:08:ab:55:f2:39:ec:5e:e0:f9:f3:8a:21:0c:90:65:23:9e:
         c1:16:0d:d4:c3:07:9b:f0:45:c1:de:e8:0b:5d:17:67:35:4d:
         fe:9b:b8:1b:95:e3:26:69:6f:61:85:e3:8e:67:4a:bf:5b:12:
         51:38:49:49:fa:3c:18:15:b5:9c:d2:08:af:96:4e:f6:da:1f:
         ad:30:08:0d:d1:2f:1c:d5:6c:e8:dd:cb:a6:0a:af:e6:60:13:
         52:95:84:7b:10:03:6c:df:b2:4b:a1:16:57:5d:b8:e3:c2:42:
         3f:16:05:b9:8f:fa:fb:bf:38:35:33:29:00:05:a0:5b:5b:32:
         79:0a:29:25:3c:6d:7d:c4:f7:a8:36:73:d7:01:c7:f0:79:5b:
         a6:d8:7b:af:2e:0b:ce:b1:a7:3b:be:6b:75:8c:78:1b:44:5c:
         9a:91:2f:1f:db:c3:be:3d:9a:28:ec:3b:64:5e:f4:29:a8:d3:
         b8:27:02:58:3d:1a:77:10:0e:3e:73:07:50:5c:03:eb:ae:8f:
         6f:7d:94:00:68:94:bc:ec:20:0c:54:9d:b2:1a:08:8f:7c:8b:
         a8:ae:10:d1:0d:22:44:8d:b0:81:b3:fd:f0:7f:c3:66:db:b3:
         d6:cf:7d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:31:42 2025 by rpki-client