Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33332d3333203d3e20323639303234.roa
File:                     323830343a356534633a383030303a3a2f33332d3333203d3e20323639303234.roa (raw, json)
Hash identifier:          I8YbnxzIz8NlOqnGO3XxX3vbzMtqAyn8dD+j1bdr+Us=
Subject key identifier:   67:FF:15:C2:82:96:9A:30:85:93:11:BD:8E:65:8B:45:EE:64:5D:F5
Certificate issuer:       /CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
Certificate serial:       31A2681E404BF93BEDD9448E1CA36B39DA1A769D
Authority key identifier: FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33332d3333203d3e20323639303234.roa
Signing time:             Thu 25 Sep 2025 12:48:30 +0000
ROA not before:           Thu 25 Sep 2025 12:43:30 +0000
ROA not after:            Thu 24 Sep 2026 12:48:30 +0000
asID:                     269024
IP address blocks:        2804:5e4c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl
                          rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a2:68:1e:40:4b:f9:3b:ed:d9:44:8e:1c:a3:6b:39:da:1a:76:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
        Validity
            Not Before: Sep 25 12:43:30 2025 GMT
            Not After : Sep 24 12:48:30 2026 GMT
        Subject: CN=67FF15C282969A30859311BD8E658B45EE645DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:ae:f4:8d:35:b7:06:ad:6e:e5:6f:3d:ca:
                    ed:95:3f:e4:04:b7:5a:2d:c9:64:9a:3e:24:84:a7:
                    fb:11:ba:7b:d4:3e:21:d1:8f:39:44:15:4a:48:2f:
                    72:6a:00:b0:ad:25:b0:f0:dc:be:ae:0b:b2:c5:92:
                    cd:d9:b8:0d:5d:a0:67:ce:2e:bd:82:ba:66:a7:15:
                    ff:d9:bb:3c:bb:df:68:20:49:c4:ec:92:37:b9:a3:
                    3e:9d:16:ee:e0:2b:89:ca:1f:49:56:54:0d:e5:d1:
                    0c:7a:25:c3:b8:74:ae:f0:e6:0d:a1:6d:3d:9a:64:
                    dc:94:48:a8:6a:5a:63:e0:83:f9:34:30:aa:56:14:
                    6d:47:d2:ea:e5:ff:5e:9f:33:9b:1b:50:60:56:d5:
                    aa:03:73:07:b9:b5:f9:cb:c7:29:a7:29:8f:e0:fd:
                    4b:7a:fe:95:c7:08:52:c6:51:64:58:8b:69:c9:d1:
                    3e:a7:8d:c7:25:d8:ca:ea:b8:f6:2a:73:2f:0a:58:
                    83:90:8b:ff:52:b2:c7:a1:c2:8a:03:43:5b:a3:96:
                    2a:90:55:d3:51:6b:ed:61:3d:c4:12:ff:3d:de:85:
                    5a:63:c0:72:58:b2:e7:0e:1b:d5:72:42:50:09:35:
                    96:76:a1:de:43:61:71:76:e0:74:b5:ea:9e:e7:08:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FF:15:C2:82:96:9A:30:85:93:11:BD:8E:65:8B:45:EE:64:5D:F5
            X509v3 Authority Key Identifier:
                keyid:FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33332d3333203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b5:5d:98:80:88:21:b4:13:9c:cb:6b:1e:2a:fa:5d:f0:cb:16:
         e3:00:06:fa:e3:f9:cb:2b:29:38:1a:1e:43:2e:ed:46:7d:f0:
         b5:47:dc:3a:27:c3:1d:ca:80:7f:e3:93:0d:2d:1a:53:c8:94:
         91:e6:3e:4c:8e:33:30:f6:c0:65:ad:e6:96:08:ba:7f:18:01:
         2d:a2:09:2e:e1:c7:8f:eb:9a:1a:9c:8f:73:16:bd:e0:90:34:
         1c:da:95:56:02:f8:d6:f2:4e:04:be:8b:67:20:f4:7f:dd:9b:
         b5:ba:fa:35:88:ca:01:46:8f:f7:2a:da:ad:d1:4e:12:92:e5:
         d5:8e:5d:c6:57:14:6b:6a:18:57:88:3c:6c:9b:b9:4e:1f:6b:
         2e:b3:46:68:d5:60:b9:49:64:7f:4d:3b:5d:97:5f:91:7e:23:
         dc:d8:7d:81:93:ed:fe:ff:cc:0c:4b:5c:e6:b0:9e:a8:19:6d:
         16:a6:19:a0:e1:31:f3:53:d8:1d:cf:6a:73:17:43:14:eb:01:
         a9:13:5d:cd:96:22:b4:32:59:9a:6b:31:32:5e:f8:66:f2:02:
         67:5c:7e:72:78:8e:af:9d:90:fa:4c:0f:43:d6:88:20:c0:aa:
         40:56:44:83:65:61:ea:5c:11:0f:f3:2c:94:42:3d:1e:1d:d1:
         63:ef:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:56:53 2025 by rpki-client