Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/323830343a3263303a3a2f33322d313238203d3e20323632383334.roa
File:                     323830343a3263303a3a2f33322d313238203d3e20323632383334.roa (raw, json)
Hash identifier:          fKQIDHkLGSf57vkAV8EJp/qAuCCDKYsk2hRo+3WO9PQ=
Subject key identifier:   44:19:4D:27:5A:39:3D:4C:BF:2F:9D:AE:CB:88:D9:40:CC:85:CB:3C
Certificate issuer:       /CN=5002EE56B40431CA262F59717A16E5A8812286A5
Certificate serial:       7D908B048DDBD3813AA50D952BD51A75CE0EFC2D
Authority key identifier: 50:02:EE:56:B4:04:31:CA:26:2F:59:71:7A:16:E5:A8:81:22:86:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/323830343a3263303a3a2f33322d313238203d3e20323632383334.roa
Signing time:             Thu 07 Aug 2025 13:53:24 +0000
ROA not before:           Thu 07 Aug 2025 13:48:24 +0000
ROA not after:            Thu 06 Aug 2026 13:53:24 +0000
asID:                     262834
IP address blocks:        2804:2c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.crl
                          rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 00:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:90:8b:04:8d:db:d3:81:3a:a5:0d:95:2b:d5:1a:75:ce:0e:fc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5002EE56B40431CA262F59717A16E5A8812286A5
        Validity
            Not Before: Aug  7 13:48:24 2025 GMT
            Not After : Aug  6 13:53:24 2026 GMT
        Subject: CN=44194D275A393D4CBF2F9DAECB88D940CC85CB3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:56:8c:fe:67:cf:32:0e:c6:08:b5:61:c6:
                    46:13:1d:8e:9b:12:c5:5f:36:c6:f7:cc:d8:56:1e:
                    cb:a5:00:f7:66:5d:0b:c6:e5:bc:13:6f:e3:c4:e6:
                    f0:6f:d9:4a:1f:5b:85:16:25:fc:bb:35:bd:a4:76:
                    57:2f:20:08:be:14:41:c6:a8:3c:30:7f:1a:b7:9b:
                    04:30:06:f8:a3:1d:36:5b:5c:35:0d:9c:9d:fc:15:
                    ca:68:81:cc:e3:c9:93:f4:bd:3f:f6:dd:da:86:2f:
                    eb:8a:f0:73:df:94:69:63:f7:da:96:a6:c4:cc:32:
                    bf:ea:6e:73:e3:29:98:34:b6:6e:e9:b8:33:da:0f:
                    7a:85:f6:b7:3d:b1:5e:6d:d0:ac:6d:2c:dd:79:f6:
                    04:63:a0:2c:27:7e:48:a4:54:47:f8:97:88:e5:16:
                    93:d6:70:01:2d:6e:a5:9d:75:cc:1f:93:2a:dc:a0:
                    3e:8a:f6:37:fa:b8:e3:94:13:68:1a:31:02:14:11:
                    51:c2:45:4e:3b:7b:d1:d7:b9:e0:73:90:fc:c4:f3:
                    b4:bf:d1:65:35:d6:ad:67:85:7e:df:fd:14:96:54:
                    b3:64:83:41:c1:8f:04:1e:d0:5e:51:5b:bd:7e:65:
                    4d:76:00:e0:dc:ff:bf:07:a2:ec:f5:17:fd:3c:96:
                    9e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:19:4D:27:5A:39:3D:4C:BF:2F:9D:AE:CB:88:D9:40:CC:85:CB:3C
            X509v3 Authority Key Identifier:
                keyid:50:02:EE:56:B4:04:31:CA:26:2F:59:71:7A:16:E5:A8:81:22:86:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/323830343a3263303a3a2f33322d313238203d3e20323632383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:bd:d5:4e:30:61:de:27:70:8a:4b:ff:a5:fe:d8:b0:0a:7a:
         c3:4f:64:84:a1:cc:19:a4:73:58:db:a7:54:a7:6f:96:d5:74:
         92:ae:ec:57:72:e1:e3:a5:3a:55:f5:0e:c0:f8:2e:15:55:99:
         88:78:b6:25:40:a5:68:1f:a8:f6:04:01:9b:4f:97:4b:be:52:
         95:78:ad:53:24:e9:17:c8:9a:7e:56:18:65:27:ed:32:58:e3:
         1c:95:a3:59:c7:ce:95:68:a4:22:6b:0e:a1:56:43:21:d5:13:
         03:d5:57:b3:cc:e5:8d:83:0a:be:8e:e6:7c:f6:8e:5d:26:b2:
         b9:8d:b7:ff:f6:a2:c7:80:6e:6f:ee:5e:be:4a:2b:8b:83:f8:
         c2:7c:47:a0:4d:bb:0d:c2:0a:4a:bf:b3:03:67:5a:91:c0:8d:
         60:31:5f:88:7b:13:e8:6e:2e:6f:bd:1f:24:13:1a:78:e1:81:
         39:e6:8d:c1:ee:ff:0a:e4:73:f6:76:df:0c:29:fa:eb:4f:7d:
         55:9e:a8:0c:09:ad:90:79:be:33:3e:77:7e:56:71:76:0a:1f:
         ab:96:66:13:27:1b:74:b2:83:9f:ac:62:c4:09:54:c7:fe:d9:
         e0:79:b2:95:4a:25:f8:a4:02:14:07:55:09:a4:fc:04:b0:15:
         37:34:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:15:50 2025 by rpki-client