Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a633030303a3a2f33342d3334203d3e20323639303234.roa
File:                     323830343a356534633a633030303a3a2f33342d3334203d3e20323639303234.roa (raw, json)
Hash identifier:          jeAlZBfY/k0LO0j3FaGIu3lqGwOf6LqTkrHkAZROvxA=
Subject key identifier:   EE:15:A4:E1:34:10:41:8B:60:B6:65:AA:81:D9:6C:79:57:CC:07:21
Certificate issuer:       /CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
Certificate serial:       2CBDC089CCA526A5ACB6BB85D9326A85C33736BE
Authority key identifier: FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a633030303a3a2f33342d3334203d3e20323639303234.roa
Signing time:             Thu 25 Sep 2025 12:48:31 +0000
ROA not before:           Thu 25 Sep 2025 12:43:31 +0000
ROA not after:            Thu 24 Sep 2026 12:48:31 +0000
asID:                     269024
IP address blocks:        2804:5e4c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl
                          rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bd:c0:89:cc:a5:26:a5:ac:b6:bb:85:d9:32:6a:85:c3:37:36:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
        Validity
            Not Before: Sep 25 12:43:31 2025 GMT
            Not After : Sep 24 12:48:31 2026 GMT
        Subject: CN=EE15A4E13410418B60B665AA81D96C7957CC0721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e2:34:03:86:26:11:85:f0:ff:fe:00:95:3c:
                    4f:d2:3e:ca:7c:63:7e:8a:dc:f9:61:b1:6a:c3:84:
                    a5:23:70:73:3a:9c:82:e5:b0:5b:62:5d:ad:81:0c:
                    00:af:0b:6c:20:98:8c:eb:63:c1:3b:61:84:16:c2:
                    2b:61:15:71:e8:d6:42:bb:be:c9:b5:be:ec:ff:c5:
                    c4:ce:d7:13:79:cf:48:09:37:a4:61:04:d3:37:68:
                    b8:b5:e2:7b:55:7e:1f:92:ab:f8:6b:d5:0f:2a:71:
                    dc:77:f0:dc:13:97:06:58:50:33:b1:74:06:d7:24:
                    71:a7:29:0b:4e:7b:3c:5a:23:ce:d4:89:b1:1e:7e:
                    bd:93:3a:7c:4d:ed:58:3b:ad:9a:ea:3f:15:9e:49:
                    a2:cf:23:1a:97:b4:e4:c3:f2:6e:90:33:28:26:00:
                    ac:ba:55:22:27:b6:22:45:76:69:95:37:93:cc:d8:
                    d8:df:70:31:5e:6b:f5:d3:38:3f:37:31:42:17:3b:
                    60:7b:e6:dd:cf:01:9a:9a:21:0f:f6:41:28:0f:56:
                    e1:97:85:eb:5a:96:da:e3:98:a0:86:ab:81:31:46:
                    75:04:06:63:66:9e:e8:2e:c1:f3:bf:c2:82:ec:45:
                    8d:2f:15:56:f5:84:ba:5f:bd:27:1c:dd:3f:e4:54:
                    4e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:15:A4:E1:34:10:41:8B:60:B6:65:AA:81:D9:6C:79:57:CC:07:21
            X509v3 Authority Key Identifier:
                keyid:FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a633030303a3a2f33342d3334203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b5:53:58:24:80:1a:b0:8f:ac:1a:ea:8d:18:9c:08:ba:a3:19:
         5a:68:7e:ad:4e:6a:fa:0d:34:45:92:fc:f2:06:3a:a9:b3:af:
         7f:8d:f9:a0:05:29:e9:a6:85:4e:a2:27:7b:43:e9:ae:8c:09:
         84:f1:95:a0:6b:69:83:28:c0:a3:56:e4:46:ee:52:5e:5b:5f:
         c2:01:03:35:c2:13:d9:93:f8:27:57:a8:e6:21:e1:eb:42:f8:
         c9:3a:69:4e:92:11:f2:8d:1d:5f:ac:1e:5b:93:7d:0e:7e:6e:
         3d:e6:64:8f:74:a1:98:34:fa:a2:56:d9:12:03:76:ae:b4:ab:
         40:f5:f7:0c:77:ff:15:ca:9d:31:b4:01:03:e7:c4:1a:51:2e:
         77:46:74:3b:a0:ab:1b:35:4d:11:3a:eb:ef:70:91:1e:6e:db:
         13:b4:3f:6c:ca:22:76:a6:7e:14:a2:35:c5:1e:e1:ce:6a:28:
         5e:d5:88:28:5c:25:e3:d1:7e:d3:62:94:ab:22:1a:97:b3:3f:
         84:7c:e9:06:d9:3d:aa:8e:bb:cb:0b:d3:51:48:f1:03:00:d3:
         0e:50:d6:91:88:6b:85:99:5b:95:fb:9d:1b:cc:14:14:95:6f:
         1f:7c:7a:2e:64:6c:98:bb:d3:46:4a:56:de:df:dc:e0:d1:cd:
         3a:87:f6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:53 2025 by rpki-client