Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/323830343a326263303a3a2f33352d3335203d3e20323635313733.roa
File:                     323830343a326263303a3a2f33352d3335203d3e20323635313733.roa (raw, json)
Hash identifier:          81quRLXzAQrAUJA5767+FF09C1sCrDcipfqqA05ufxE=
Subject key identifier:   35:20:01:6C:69:98:13:B6:16:C5:41:97:99:F5:10:83:09:0D:30:F2
Certificate issuer:       /CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
Certificate serial:       6863BB1345D19C316E4727239F2A5771DA706163
Authority key identifier: F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/323830343a326263303a3a2f33352d3335203d3e20323635313733.roa
Signing time:             Thu 23 Oct 2025 18:27:06 +0000
ROA not before:           Thu 23 Oct 2025 18:22:06 +0000
ROA not after:            Thu 22 Oct 2026 18:27:06 +0000
asID:                     265173
IP address blocks:        2804:2bc0::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl
                          rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:63:bb:13:45:d1:9c:31:6e:47:27:23:9f:2a:57:71:da:70:61:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
        Validity
            Not Before: Oct 23 18:22:06 2025 GMT
            Not After : Oct 22 18:27:06 2026 GMT
        Subject: CN=3520016C699813B616C5419799F51083090D30F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:48:cc:0f:7e:e4:42:90:9d:4c:e3:5c:8d:a6:
                    2a:d6:14:66:86:ba:1b:69:d6:f9:70:ef:19:3b:fe:
                    56:1f:65:ab:f3:2b:32:4e:8b:06:af:72:2c:83:2c:
                    18:a2:8e:0c:c0:4a:aa:16:10:ee:1d:6a:22:9d:d6:
                    94:c0:2c:60:e6:0a:7b:a1:34:37:da:93:1e:ce:21:
                    33:0d:09:f8:9b:4b:ff:1f:07:da:9d:e4:66:8e:67:
                    18:86:3d:7e:64:a4:4e:b9:4e:23:6c:89:d3:d6:23:
                    a9:76:c0:3c:1f:74:f4:d4:46:0d:8c:73:ac:f3:60:
                    d3:ca:75:a4:33:98:85:80:2d:ab:eb:70:f6:f6:26:
                    1e:00:88:de:ce:cf:8f:91:e8:8d:68:2d:53:f5:db:
                    04:31:38:c8:2f:8e:2d:31:1b:fd:fc:a4:0a:36:f6:
                    e2:9c:35:88:72:39:e0:d1:d0:b9:89:e8:28:0f:52:
                    ba:42:c7:5a:d1:63:8c:09:79:c5:1a:3b:41:a1:d9:
                    67:0e:6b:fb:7e:63:bc:6e:6d:d4:bb:02:03:f8:2a:
                    e7:2e:5b:a4:c7:e0:ba:2b:85:50:f8:e9:1a:bb:e4:
                    e1:bd:1d:f7:15:81:89:bb:7a:74:8d:4a:bc:43:84:
                    d4:74:69:3c:65:b6:1a:44:a4:15:f5:3d:79:40:07:
                    c5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:20:01:6C:69:98:13:B6:16:C5:41:97:99:F5:10:83:09:0D:30:F2
            X509v3 Authority Key Identifier:
                keyid:F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/323830343a326263303a3a2f33352d3335203d3e20323635313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc0::/35

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:eb:91:be:ce:12:63:9c:27:d3:ae:08:5f:f2:3a:c5:90:
         83:9b:e4:b6:fa:28:3c:91:08:74:67:07:dc:3c:da:46:be:b6:
         ba:9b:e7:2c:12:ee:b9:0b:24:92:f9:e5:98:f7:f0:2f:a4:2d:
         0a:86:73:df:5b:7b:f0:84:49:0e:bf:47:92:3e:a1:7b:7b:99:
         fe:43:35:7e:6c:a1:8e:33:65:98:94:88:90:1e:5d:ca:e4:b2:
         c6:ed:7f:e9:53:b2:f2:8b:6b:92:c4:ca:9e:ac:18:ed:57:ec:
         3c:cb:dd:01:9a:3e:20:f1:20:97:cc:79:4c:54:5e:36:5c:c7:
         79:fc:93:09:7b:da:41:d9:7a:a8:c6:bf:bf:01:e7:6e:68:e1:
         49:00:98:41:08:35:f5:a9:56:eb:fa:b3:ad:de:41:ca:5b:63:
         e5:93:78:96:96:45:80:c3:7d:06:09:cc:ac:b8:4b:5f:f1:97:
         13:fe:dd:6e:8b:6a:a2:75:3f:05:65:d1:ba:70:0c:70:a1:47:
         9a:53:9f:c0:ac:e6:cd:64:a8:93:1a:cb:0f:47:7f:99:05:69:
         b5:db:7f:62:5c:89:0a:b8:0d:90:c9:68:21:1b:e1:ee:a7:8e:
         e4:76:4f:2f:83:89:8b:dc:34:83:c4:ca:11:fe:6e:33:3e:95:
         38:35:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:33 2025 by rpki-client