Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a633030303a3a2f33342d3334203d3e20323730383835.roa
File:                     323830343a373266303a633030303a3a2f33342d3334203d3e20323730383835.roa (raw, json)
Hash identifier:          pbTSvt6j5OJiEeff/LNk1pIZb4DcpF/tt0xJL3ZAzTU=
Subject key identifier:   60:ED:C4:30:3F:13:BC:C8:07:69:14:D3:A6:68:8E:AF:8E:93:4C:64
Certificate issuer:       /CN=E283C40EE803134A57D75DCB34D29EA4396601DB
Certificate serial:       2DD0800B06AA9ADB2B158C0024042BF927186A4C
Authority key identifier: E2:83:C4:0E:E8:03:13:4A:57:D7:5D:CB:34:D2:9E:A4:39:66:01:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E283C40EE803134A57D75DCB34D29EA4396601DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a633030303a3a2f33342d3334203d3e20323730383835.roa
Signing time:             Thu 02 Oct 2025 13:31:25 +0000
ROA not before:           Thu 02 Oct 2025 13:26:25 +0000
ROA not after:            Thu 01 Oct 2026 13:31:25 +0000
asID:                     270885
IP address blocks:        2804:72f0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/E283C40EE803134A57D75DCB34D29EA4396601DB.crl
                          rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/E283C40EE803134A57D75DCB34D29EA4396601DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E283C40EE803134A57D75DCB34D29EA4396601DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d0:80:0b:06:aa:9a:db:2b:15:8c:00:24:04:2b:f9:27:18:6a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E283C40EE803134A57D75DCB34D29EA4396601DB
        Validity
            Not Before: Oct  2 13:26:25 2025 GMT
            Not After : Oct  1 13:31:25 2026 GMT
        Subject: CN=60EDC4303F13BCC8076914D3A6688EAF8E934C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f3:18:8f:aa:04:3a:36:dd:9d:93:fe:62:14:
                    e0:5b:1f:5e:dd:d1:2a:ee:ba:bd:7a:a4:a8:a1:3c:
                    4b:d8:ac:65:8d:6a:1d:ff:43:f8:07:ce:bc:db:34:
                    21:a6:1b:2e:32:bf:e5:8e:8a:bc:ee:49:f4:5c:4c:
                    af:47:fa:df:df:4d:a2:81:38:4c:c7:64:72:71:db:
                    c8:3b:17:7d:f7:bf:91:4b:7a:54:d5:42:a2:69:cf:
                    5a:ff:43:f5:9f:64:1c:df:1d:e7:2c:b1:33:a4:77:
                    3e:8e:15:7f:ea:05:e5:d8:65:eb:06:b8:bf:5c:8f:
                    24:be:ca:97:57:13:a4:72:19:cc:b6:ef:90:54:81:
                    c0:49:51:c2:10:fe:2e:e4:f5:41:cb:21:e4:fa:59:
                    a1:4f:2d:a3:d9:8f:a1:91:81:00:1c:f7:d2:b9:aa:
                    11:70:35:68:ae:f5:c8:78:b7:23:bd:59:de:2b:0a:
                    96:9d:07:82:c9:d6:cc:b5:4c:99:4d:6c:cf:d2:58:
                    54:0f:9a:a9:97:f3:ca:ac:c8:87:1b:a9:8f:0c:3f:
                    ff:5c:79:d8:dd:ca:f3:04:a1:06:a8:b7:37:94:cb:
                    31:2f:15:29:01:d2:4f:63:05:db:46:ce:f5:42:54:
                    43:4f:23:3c:8d:22:31:62:12:ce:ea:a7:45:08:42:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:ED:C4:30:3F:13:BC:C8:07:69:14:D3:A6:68:8E:AF:8E:93:4C:64
            X509v3 Authority Key Identifier:
                keyid:E2:83:C4:0E:E8:03:13:4A:57:D7:5D:CB:34:D2:9E:A4:39:66:01:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/E283C40EE803134A57D75DCB34D29EA4396601DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E283C40EE803134A57D75DCB34D29EA4396601DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a633030303a3a2f33342d3334203d3e20323730383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72f0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:e9:c0:39:eb:85:56:75:ca:3e:c9:5c:b4:22:42:b0:42:cf:
         2f:e9:af:42:14:bb:f0:2b:bb:1c:0e:9d:ba:4e:92:29:7e:4b:
         1b:db:15:55:ae:da:87:ff:8f:0e:37:e2:74:17:50:db:f1:6a:
         79:08:c1:63:60:29:b3:e6:fd:d9:46:68:2e:3b:63:04:5f:30:
         38:9e:1a:53:35:68:95:2d:b7:9a:29:1e:59:c7:26:68:e9:4b:
         04:7d:c7:4b:db:36:da:c5:bf:75:b4:17:79:41:7f:07:41:3e:
         69:c5:54:fa:a4:cf:cc:d2:60:e2:32:56:aa:18:e9:6a:14:fe:
         2d:82:f4:a8:d2:62:78:e1:73:66:61:6c:09:f1:ce:bb:f1:1e:
         57:74:6d:2c:1b:a9:67:09:44:ba:d7:64:7a:c1:9d:38:7d:19:
         8f:63:51:1f:76:2f:3c:df:98:e8:fc:07:d2:e8:18:98:1f:b6:
         2b:d8:bf:e7:6c:66:ae:87:4c:23:78:dd:76:d7:07:61:2d:bf:
         de:67:85:f7:4f:09:3b:84:6a:0f:c2:b6:d8:ba:a3:41:50:05:
         83:19:4a:5d:4d:ce:35:0b:c9:be:f2:ac:22:be:18:22:6f:54:
         35:72:f6:c1:f8:0c:5b:52:e0:6c:41:d1:7c:ae:c2:c7:9a:64:
         6e:14:6a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:20:04 2025 by rpki-client