Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/323830343a353737303a3a2f33322d313238203d3e20323638303635.roa
File:                     323830343a353737303a3a2f33322d313238203d3e20323638303635.roa (raw, json)
Hash identifier:          JTFtrUqz5SaqsYk8hWCLDtBo3YqVHzjJjL9H256uvqQ=
Subject key identifier:   25:A2:52:4D:5C:51:B6:35:EE:47:7A:EA:39:70:7B:5A:A1:0B:84:5C
Certificate issuer:       /CN=A22611466C3B8A8017A764F82626629474F96253
Certificate serial:       2395ADBC7BEC967BAAEA93B368E038551D1FFC6B
Authority key identifier: A2:26:11:46:6C:3B:8A:80:17:A7:64:F8:26:26:62:94:74:F9:62:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A22611466C3B8A8017A764F82626629474F96253.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/323830343a353737303a3a2f33322d313238203d3e20323638303635.roa
Signing time:             Sat 23 Aug 2025 00:12:49 +0000
ROA not before:           Sat 23 Aug 2025 00:07:49 +0000
ROA not after:            Sat 22 Aug 2026 00:12:49 +0000
asID:                     268065
IP address blocks:        2804:5770::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/A22611466C3B8A8017A764F82626629474F96253.crl
                          rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/A22611466C3B8A8017A764F82626629474F96253.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A22611466C3B8A8017A764F82626629474F96253.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 20:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:95:ad:bc:7b:ec:96:7b:aa:ea:93:b3:68:e0:38:55:1d:1f:fc:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A22611466C3B8A8017A764F82626629474F96253
        Validity
            Not Before: Aug 23 00:07:49 2025 GMT
            Not After : Aug 22 00:12:49 2026 GMT
        Subject: CN=25A2524D5C51B635EE477AEA39707B5AA10B845C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:97:f3:69:52:20:15:2c:82:76:86:4c:db:
                    b8:42:df:b5:e5:dd:68:fd:84:bf:aa:43:4f:c0:cc:
                    e1:26:1f:d6:48:3f:ae:7f:a5:cb:ce:df:c5:30:1c:
                    51:65:38:f6:3e:db:59:29:4f:f3:99:ff:fe:d5:86:
                    b2:a6:25:44:cb:7d:05:ed:7f:44:dc:bf:1b:d9:a3:
                    8f:5b:fe:8d:a2:e4:ff:d2:66:19:a4:44:da:14:29:
                    9e:e4:d5:f3:7a:ad:de:c7:08:ee:e8:e0:4e:5a:b5:
                    d5:3a:d0:83:b2:c3:63:c0:16:b3:d6:16:02:f8:ac:
                    16:ef:f2:1a:5b:30:5e:17:6f:55:2a:fe:2b:79:a3:
                    aa:d2:59:c3:32:f2:d2:fb:10:80:fd:a0:cc:8d:7b:
                    b0:f1:26:e2:28:00:46:7f:d1:80:81:be:0e:a4:83:
                    1e:c3:4d:4c:92:57:1f:85:4e:aa:3a:2e:c7:7a:47:
                    4f:c6:ab:e7:c8:64:e6:07:e2:d4:29:25:94:08:14:
                    97:82:8e:fa:b8:bb:5b:82:ee:ee:8f:ad:ee:15:03:
                    b6:13:70:3f:ea:92:9d:80:4c:0e:1b:ff:d0:5e:a0:
                    09:ac:cd:61:c2:91:20:a4:28:49:19:07:5f:a1:90:
                    59:15:e3:d4:1c:3a:2f:1a:57:96:60:58:90:22:32:
                    33:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A2:52:4D:5C:51:B6:35:EE:47:7A:EA:39:70:7B:5A:A1:0B:84:5C
            X509v3 Authority Key Identifier:
                keyid:A2:26:11:46:6C:3B:8A:80:17:A7:64:F8:26:26:62:94:74:F9:62:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/A22611466C3B8A8017A764F82626629474F96253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A22611466C3B8A8017A764F82626629474F96253.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/323830343a353737303a3a2f33322d313238203d3e20323638303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5770::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:0b:00:34:0f:e5:e8:ee:72:c7:8c:8e:5f:c8:59:e9:db:51:
         e1:7f:28:8f:f8:db:d7:b8:8a:78:b0:4c:02:e0:f7:ae:20:e7:
         49:15:53:7e:31:c5:44:33:36:bb:8f:f5:f2:22:83:0a:70:85:
         30:86:f2:ac:d9:e7:38:17:42:3b:48:83:99:f2:ac:9d:6d:f2:
         a4:0c:39:61:cd:ae:b6:09:8c:30:02:50:9c:e9:d6:84:bd:a5:
         f1:2c:c9:e2:e0:06:8e:55:0d:6c:e9:09:b5:80:f3:5f:2d:50:
         a8:11:93:76:38:77:2c:29:0d:f0:22:ec:e7:56:d0:eb:c4:4c:
         b8:a9:79:4b:7f:87:bf:7b:21:ef:0b:61:ba:f3:46:f8:c5:ea:
         d8:73:87:f6:fc:24:03:b1:c2:ff:a0:e7:20:a2:09:f6:6c:33:
         6e:ea:34:a8:15:6c:f8:a7:7b:5b:dc:3a:8c:e3:8e:6f:ee:9f:
         eb:a2:1a:da:36:db:28:ac:40:c6:69:5f:ed:b3:d1:f0:31:0e:
         9f:97:00:02:0f:2d:f9:3a:e6:c9:0e:f2:1e:5b:a8:90:bb:fa:
         23:23:44:1c:c6:d6:3e:4b:8b:5f:73:a6:37:c4:b6:58:cf:40:
         99:2a:5b:d8:11:2e:d2:8e:ae:61:4b:b4:be:43:df:b7:43:f2:
         9a:f0:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:07:48 2025 by rpki-client