Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a383030303a3a2f33332d3333203d3e20323637323134.roa
File:                     323830343a346130383a383030303a3a2f33332d3333203d3e20323637323134.roa (raw, json)
Hash identifier:          ggyYcM2WvWkPhpdkzQdbSnCUmLR5qaexvNbbxanQyYM=
Subject key identifier:   C5:27:83:1D:C1:21:85:34:D4:11:75:9D:B3:C3:D1:88:95:FF:04:3B
Certificate issuer:       /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial:       51CA3631EFA1146549DC34EA48BD15D066F38667
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a383030303a3a2f33332d3333203d3e20323637323134.roa
Signing time:             Wed 01 Oct 2025 15:01:42 +0000
ROA not before:           Wed 01 Oct 2025 14:56:42 +0000
ROA not after:            Wed 30 Sep 2026 15:01:42 +0000
asID:                     267214
IP address blocks:        2804:4a08:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl
                          rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ca:36:31:ef:a1:14:65:49:dc:34:ea:48:bd:15:d0:66:f3:86:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
        Validity
            Not Before: Oct  1 14:56:42 2025 GMT
            Not After : Sep 30 15:01:42 2026 GMT
        Subject: CN=C527831DC1218534D411759DB3C3D18895FF043B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:53:88:4d:fc:ed:2f:63:4b:ff:35:b4:4d:
                    bf:67:78:ed:ae:f1:88:80:16:2c:46:ca:ec:41:88:
                    48:b6:6a:38:ba:26:29:ca:2f:4b:64:3b:e6:39:37:
                    fa:8e:ac:de:4d:4f:30:0f:d2:2d:79:a5:4c:5d:d0:
                    f1:f6:e4:6e:40:bd:f7:eb:82:b6:94:8d:92:d2:62:
                    d8:e2:11:82:e5:d1:b8:12:c4:a3:2b:fc:58:9a:f8:
                    c2:2e:f2:ca:34:d7:c0:fb:c2:ad:e8:ff:34:49:6d:
                    c5:f0:c1:4a:68:00:38:32:32:26:53:e2:f3:89:15:
                    ec:41:1f:29:9f:3c:d0:15:7f:47:2c:05:2e:52:e6:
                    99:7a:15:72:78:38:91:54:55:c3:4a:cc:8d:05:d9:
                    59:bf:ed:54:28:1a:4e:a3:e6:89:a2:4c:2c:4d:d9:
                    ea:f1:63:a0:44:ca:e8:ea:42:af:17:c4:de:c3:47:
                    a3:58:17:4d:56:85:d5:6e:3c:aa:69:9e:b3:3b:01:
                    31:8c:11:53:74:ce:21:52:84:74:d7:d9:ea:f8:13:
                    04:36:ab:a2:3d:01:aa:52:9c:8e:23:ca:e9:8a:03:
                    1c:2c:43:70:11:7c:7a:25:6d:af:16:7c:03:c6:4f:
                    ca:c7:9e:b2:f6:f0:a6:78:7c:4a:dd:7d:a5:18:cc:
                    b0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:27:83:1D:C1:21:85:34:D4:11:75:9D:B3:C3:D1:88:95:FF:04:3B
            X509v3 Authority Key Identifier:
                keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a383030303a3a2f33332d3333203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a08:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:fd:9f:f7:d2:a4:fc:17:75:2f:ff:3a:77:41:a9:a6:51:5f:
         4f:cb:0b:e0:35:75:45:a3:f9:14:22:46:72:ef:b2:c7:ad:44:
         97:0b:56:c6:52:cc:a9:79:81:22:5b:75:e0:31:47:b8:d0:11:
         9e:77:40:8f:d4:bd:40:e0:91:4f:44:77:14:25:b2:6b:c5:31:
         02:c3:ad:d5:4a:50:3a:c0:a0:8c:ac:41:96:fd:e8:c5:6f:57:
         0a:be:2b:e9:83:4f:c2:96:cc:22:15:48:c0:b9:b1:bc:72:98:
         74:a1:1f:3b:a5:a7:ea:01:33:e2:11:06:6f:ce:b5:7f:3d:53:
         1e:8a:e7:ce:f7:a4:23:69:e6:a9:0c:84:68:77:7a:5f:69:61:
         2e:fd:4c:8e:e3:2b:e9:53:f7:98:97:b5:ad:7b:9c:de:5b:51:
         a7:f4:29:4e:19:71:26:59:c3:d3:b1:6a:33:18:41:b1:79:b8:
         7e:57:01:7b:d6:58:1a:36:d7:5f:56:a7:62:0d:a6:91:f9:61:
         82:be:9d:c2:2d:a7:fa:69:64:bd:84:17:11:01:aa:b5:3c:f8:
         40:f6:bb:df:6d:ae:3c:5e:74:8a:43:8d:f2:8d:5a:04:a0:39:
         14:b5:fe:c0:85:0d:bb:5d:5c:2f:22:ac:27:12:ed:e1:39:0f:
         e8:7b:e1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:03:49 2025 by rpki-client