Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33322d3438203d3e20323731343536.roa
File:                     323830343a376264303a3a2f33322d3438203d3e20323731343536.roa (raw, json)
Hash identifier:          WprU1QleJFMKsdl2kjBkCkm2DMM/h2D5HHWFsPPhvfE=
Subject key identifier:   A9:7E:B6:BD:CB:68:8F:0C:07:A2:0C:BB:75:21:9D:48:97:57:A6:F3
Certificate issuer:       /CN=2B701A0900880E50F13E6749C2889988811EC8C1
Certificate serial:       0793286F24D98B1702462B82DD2B3164860E9949
Authority key identifier: 2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33322d3438203d3e20323731343536.roa
Signing time:             Tue 04 Nov 2025 19:39:49 +0000
ROA not before:           Tue 04 Nov 2025 19:34:49 +0000
ROA not after:            Tue 03 Nov 2026 19:39:49 +0000
asID:                     271456
IP address blocks:        2804:7bd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl
                          rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 20:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:93:28:6f:24:d9:8b:17:02:46:2b:82:dd:2b:31:64:86:0e:99:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B701A0900880E50F13E6749C2889988811EC8C1
        Validity
            Not Before: Nov  4 19:34:49 2025 GMT
            Not After : Nov  3 19:39:49 2026 GMT
        Subject: CN=A97EB6BDCB688F0C07A20CBB75219D489757A6F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:f6:18:f2:c3:00:41:b1:5f:10:3f:5e:ed:
                    e3:fe:cf:5a:6f:0f:87:7a:8c:7f:e2:1b:b7:6a:ba:
                    22:9c:0d:6f:4b:85:05:f5:96:a7:60:89:fe:da:ff:
                    e0:fe:d7:12:cc:f5:2c:71:9d:68:99:20:41:9a:46:
                    60:f3:2a:5e:58:01:38:60:97:0f:1b:bd:73:8f:e5:
                    ce:3a:d0:c7:09:bf:ce:b3:ce:44:b0:80:00:d3:b6:
                    64:3b:10:58:13:eb:6b:44:66:91:65:73:cb:95:dc:
                    4b:34:c9:55:3c:22:82:95:3f:13:2a:f8:f5:69:fe:
                    e7:a5:98:a7:83:69:0b:37:bd:a7:3c:c5:6f:5f:1d:
                    2e:be:6d:4e:3e:34:6a:82:b4:fe:bb:85:c3:89:36:
                    78:3b:93:83:73:20:cc:c8:0b:22:62:ee:de:cc:3c:
                    d7:ac:0f:e5:66:b2:e4:e1:b6:26:a1:6c:5e:7f:ac:
                    b3:69:1d:4c:51:db:5b:40:8f:75:78:13:41:99:23:
                    66:97:f9:94:6e:93:7a:29:82:ca:27:ce:55:02:2b:
                    00:72:c2:b2:19:ad:82:f9:cf:6f:bb:9c:26:dc:fb:
                    7f:8a:f4:5e:32:f3:f2:90:cb:0a:be:3e:30:c2:fd:
                    3c:68:2a:27:f3:59:1f:9a:ae:52:a9:fd:f5:6d:3c:
                    d5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7E:B6:BD:CB:68:8F:0C:07:A2:0C:BB:75:21:9D:48:97:57:A6:F3
            X509v3 Authority Key Identifier:
                keyid:2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33322d3438203d3e20323731343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:2a:a9:35:21:e7:6f:48:4e:66:72:95:d9:29:05:46:a3:1e:
         b6:55:52:ac:2b:87:9f:d6:6f:cc:d1:37:20:89:5c:a4:7e:b7:
         d4:84:87:58:04:96:f7:5c:23:dd:8a:0f:f5:6e:35:68:88:25:
         1d:f8:7c:c5:2a:4a:c0:78:84:3d:d9:5b:a8:25:79:95:a4:06:
         58:0f:01:ef:c3:89:39:7e:f3:c0:5e:51:23:df:98:36:67:1c:
         38:5a:bc:93:bf:d9:8d:2f:3e:29:11:6a:9f:2b:5b:1c:11:6f:
         8d:7d:02:dc:02:24:e4:6c:4b:4a:5e:1b:08:04:42:cb:09:05:
         c8:7d:07:3f:9c:52:15:b4:0a:3f:c1:4e:37:5f:e8:3a:e7:be:
         63:a2:b3:5d:15:4e:8b:91:62:ae:36:e7:5f:da:0b:5a:ad:cc:
         63:f3:c0:4b:8f:85:7d:22:c9:bc:cb:69:62:03:ce:47:7d:c4:
         af:14:f7:c8:bb:23:31:67:08:1f:d4:10:11:c8:6d:02:62:b8:
         f1:ea:b6:d9:cb:fd:0c:fa:8b:e6:e4:a5:63:e2:b4:49:11:56:
         6e:49:b9:71:39:a5:55:6a:e2:c7:fb:70:92:b7:ea:d9:b5:cc:
         fe:20:a2:0b:b6:c8:43:a5:1b:5e:95:f2:f6:b1:63:d0:e4:a8:
         c4:87:b6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:13:40 2025 by rpki-client