Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/323830343a346536303a3a2f33322d3332203d3e20323638323537.roa
File:                     323830343a346536303a3a2f33322d3332203d3e20323638323537.roa (raw, json)
Hash identifier:          S5JEoNGKoAQKiYxG1HPtaQAEzt6DO9P6eokPWF3ER8g=
Subject key identifier:   76:E3:CA:0F:02:1D:22:6A:8C:63:1E:5A:9A:BE:C3:84:DC:CA:88:53
Certificate issuer:       /CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0
Certificate serial:       21AA52521B684F7F4AC61E11013059FCF67C4AF2
Authority key identifier: 95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/323830343a346536303a3a2f33322d3332203d3e20323638323537.roa
Signing time:             Wed 15 Oct 2025 22:44:22 +0000
ROA not before:           Wed 15 Oct 2025 22:39:22 +0000
ROA not after:            Wed 14 Oct 2026 22:44:22 +0000
asID:                     268257
IP address blocks:        2804:4e60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl
                          rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:aa:52:52:1b:68:4f:7f:4a:c6:1e:11:01:30:59:fc:f6:7c:4a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0
        Validity
            Not Before: Oct 15 22:39:22 2025 GMT
            Not After : Oct 14 22:44:22 2026 GMT
        Subject: CN=76E3CA0F021D226A8C631E5A9ABEC384DCCA8853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:00:d8:ec:22:e3:b4:35:44:6b:fb:43:81:ea:
                    70:7d:4c:27:95:02:43:fe:6d:36:06:66:2a:85:e9:
                    42:0a:5f:51:d2:d2:4f:8a:2d:4d:36:be:aa:5e:47:
                    ec:da:cd:55:09:28:ad:90:c7:83:91:de:b2:5f:54:
                    39:f7:3d:ba:1f:9b:b0:e7:ee:c6:0d:d4:91:a3:d3:
                    c4:80:95:89:91:50:8d:bb:9c:38:26:92:31:c5:08:
                    9b:88:ea:73:d0:88:fe:5d:78:ac:35:bd:79:ea:1b:
                    54:81:4d:18:71:8a:ce:f3:2a:2b:73:0e:7c:07:67:
                    c5:19:ac:b9:c3:73:04:37:84:11:36:29:45:05:3f:
                    2d:65:e5:95:42:4b:1b:f3:81:a6:19:3c:b8:ea:35:
                    3e:4d:6c:d1:86:1e:90:fd:d9:a1:24:c9:d4:1e:bd:
                    fd:e0:b2:90:8c:db:a3:c5:5d:79:45:91:7a:2b:49:
                    2c:4c:19:d4:f4:d7:fa:e9:e8:65:dd:d6:e7:6c:27:
                    69:b7:78:d4:dd:79:ce:65:19:0f:b4:80:7c:f9:0e:
                    7c:10:93:62:15:d6:9c:63:97:3b:10:fd:8b:98:54:
                    44:1f:7d:79:c0:03:b8:65:1e:c2:5d:f5:2c:aa:a4:
                    c9:6c:bc:e2:23:d5:8e:3c:f7:c7:41:74:e3:15:23:
                    43:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E3:CA:0F:02:1D:22:6A:8C:63:1E:5A:9A:BE:C3:84:DC:CA:88:53
            X509v3 Authority Key Identifier:
                keyid:95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/323830343a346536303a3a2f33322d3332203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:00:70:8f:e3:be:36:7f:cf:62:17:6f:de:78:f9:d0:b1:53:
         5c:94:81:2e:49:8f:cf:38:fb:b6:14:89:bc:da:8d:bc:8d:f2:
         e8:24:73:a6:d1:25:12:aa:9c:29:0f:4c:20:e2:66:e2:3b:05:
         54:6a:c4:a0:c8:1b:52:4e:e2:18:1a:c1:25:ea:68:b1:af:a3:
         de:62:49:c1:96:a7:3b:04:b2:e3:6f:a2:4f:bb:e1:0c:13:46:
         9e:e8:24:6a:c7:2f:cc:50:73:08:16:c7:a2:8b:0e:5e:39:d5:
         dd:83:be:2f:48:92:7f:bc:8c:46:3b:87:99:39:5e:f0:37:8b:
         dc:93:0d:1a:2d:d1:75:4e:76:b4:72:67:08:92:7d:61:35:3d:
         24:8b:55:fc:1d:d8:56:6c:3b:7b:1b:b3:4a:a9:96:e2:55:f1:
         8d:ce:3d:52:41:48:4c:cd:9b:77:27:19:28:5a:5b:39:06:25:
         2b:6b:0e:8c:6f:4b:78:a0:58:9e:2e:14:d0:9b:81:e0:be:bd:
         81:3e:33:7e:eb:ba:c2:6b:cf:9f:db:5d:b6:8a:6d:c5:63:3c:
         6a:db:d9:47:e8:42:04:ab:08:19:4f:22:33:32:df:0c:75:0f:
         99:36:56:af:36:e0:07:2a:a0:0c:b5:15:89:4b:fb:81:f9:c4:
         88:c2:c0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:32:44 2025 by rpki-client