Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/323830343a326338343a3a2f33322d3333203d3e20323635323234.roa
File:                     323830343a326338343a3a2f33322d3333203d3e20323635323234.roa (raw, json)
Hash identifier:          WSAUKF4qisHkUOrI1UHjZAcL2Xd1PhPdHdZewJCdBSE=
Subject key identifier:   52:77:D1:02:5A:32:13:8A:B9:4E:50:F3:63:49:57:34:CA:C1:ED:79
Certificate issuer:       /CN=ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6
Certificate serial:       1F00189C9B973E20401DE9A317248F94914AB6EC
Authority key identifier: EC:EE:35:93:AC:23:48:2C:BF:6C:5C:A1:02:58:F7:8F:3F:5A:BF:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/323830343a326338343a3a2f33322d3333203d3e20323635323234.roa
Signing time:             Sat 27 Sep 2025 13:01:08 +0000
ROA not before:           Sat 27 Sep 2025 12:56:08 +0000
ROA not after:            Sat 26 Sep 2026 13:01:08 +0000
asID:                     265224
IP address blocks:        2804:2c84::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.crl
                          rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:00:18:9c:9b:97:3e:20:40:1d:e9:a3:17:24:8f:94:91:4a:b6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6
        Validity
            Not Before: Sep 27 12:56:08 2025 GMT
            Not After : Sep 26 13:01:08 2026 GMT
        Subject: CN=5277D1025A32138AB94E50F363495734CAC1ED79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:5f:e8:57:63:c0:be:c9:48:59:e2:16:81:
                    a1:6b:79:5e:ad:2e:c7:23:00:bb:fd:64:14:22:fa:
                    9b:cf:49:e8:e7:08:60:00:69:39:84:5d:3e:59:4c:
                    6b:86:65:52:09:6a:4c:12:70:98:e5:15:77:20:87:
                    59:8a:0a:c2:b7:c6:e8:05:d6:8d:37:13:e5:9f:7c:
                    9f:82:db:20:82:bb:63:be:1a:e5:69:a6:39:c7:38:
                    97:98:3a:6e:d6:f4:f5:8c:22:0a:97:2a:0a:03:b1:
                    36:1c:84:90:20:0b:e1:08:7e:99:cb:4f:47:5c:aa:
                    65:47:42:3e:c3:2a:44:47:f3:76:4e:a8:46:05:44:
                    00:ba:28:84:e4:6c:81:25:e7:63:42:06:1b:0c:53:
                    2e:bd:b4:d5:22:28:38:d4:67:81:58:19:f5:65:37:
                    a0:5f:59:99:1c:79:f6:f0:c7:c8:30:c2:fe:e5:c1:
                    9f:0f:d2:1c:1e:3e:e6:0d:82:db:77:9f:a2:1b:7e:
                    29:36:f0:26:d8:3c:af:6c:95:24:61:4d:37:8c:43:
                    75:09:be:15:fd:56:25:0f:d2:2a:5b:96:3a:14:85:
                    42:60:e5:d8:80:e6:13:8b:48:74:88:a6:78:ca:f1:
                    13:6a:ca:89:01:08:f0:1e:d4:96:ca:51:2f:3a:b5:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:77:D1:02:5A:32:13:8A:B9:4E:50:F3:63:49:57:34:CA:C1:ED:79
            X509v3 Authority Key Identifier:
                keyid:EC:EE:35:93:AC:23:48:2C:BF:6C:5C:A1:02:58:F7:8F:3F:5A:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/323830343a326338343a3a2f33322d3333203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c84::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:03:e7:6f:73:e2:f1:d2:19:10:23:15:6d:2c:96:11:b5:2d:
         f8:75:e3:85:f0:77:fa:41:b7:10:b5:f2:33:a3:fc:42:2e:b0:
         d5:2f:ea:9c:95:02:71:97:99:23:05:11:27:9e:42:30:a0:b8:
         07:89:70:09:07:78:b4:97:0a:1a:fa:e3:fd:32:4d:a4:9e:9a:
         f0:3c:84:9a:1b:9d:9f:2f:af:cb:76:41:7d:0f:7e:94:98:23:
         2d:5a:79:f3:b2:32:db:cf:95:49:3a:f2:6f:fa:30:e9:5c:dd:
         d5:38:23:d8:b8:ff:e9:9a:f2:5e:3a:33:be:fa:16:8e:79:eb:
         c9:79:ab:d5:c2:da:9a:61:6b:51:cc:d7:7d:4b:b2:d0:51:74:
         11:cd:0c:fd:a5:28:2d:5f:15:1e:d1:a0:ac:dd:fc:27:44:d8:
         8f:41:4a:ca:4c:43:63:f2:b5:7a:31:db:5f:24:2e:88:37:01:
         9f:bb:0b:4e:e8:fe:cf:e5:83:7f:35:03:1e:c2:d3:3f:66:18:
         e8:42:c5:4c:c0:32:1a:f3:07:ed:f2:e0:c7:1b:d2:db:28:f7:
         c6:e7:81:4e:37:2e:48:84:93:b2:53:0d:36:5f:5e:50:f7:e2:
         ff:fe:9a:91:19:91:7c:9c:36:36:90:11:75:e8:73:3d:13:ad:
         af:d2:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:35:20 2025 by rpki-client