Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/323830343a353864303a3a2f33322d313238203d3e20323638313531.roa
File:                     323830343a353864303a3a2f33322d313238203d3e20323638313531.roa (raw, json)
Hash identifier:          d4ufKVTirwt1mHePqI6ZZP2UY1/xgQVxkY1+H8QLQhk=
Subject key identifier:   23:0F:BC:A1:A9:A6:9A:41:3F:C2:E6:4C:CC:7E:A6:29:20:78:4A:90
Certificate issuer:       /CN=E11E6683597C8BDD4CA32F5407D91168F5C3A87C
Certificate serial:       56B36D3DF69EBE79EDDD427B7C71639B3C6ACE71
Authority key identifier: E1:1E:66:83:59:7C:8B:DD:4C:A3:2F:54:07:D9:11:68:F5:C3:A8:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/323830343a353864303a3a2f33322d313238203d3e20323638313531.roa
Signing time:             Tue 12 Aug 2025 20:24:45 +0000
ROA not before:           Tue 12 Aug 2025 20:19:45 +0000
ROA not after:            Tue 11 Aug 2026 20:24:45 +0000
asID:                     268151
IP address blocks:        2804:58d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.crl
                          rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 20:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b3:6d:3d:f6:9e:be:79:ed:dd:42:7b:7c:71:63:9b:3c:6a:ce:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E11E6683597C8BDD4CA32F5407D91168F5C3A87C
        Validity
            Not Before: Aug 12 20:19:45 2025 GMT
            Not After : Aug 11 20:24:45 2026 GMT
        Subject: CN=230FBCA1A9A69A413FC2E64CCC7EA62920784A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:7b:5e:79:c8:03:c0:99:fa:83:ac:5f:52:
                    1f:08:ca:c2:78:80:70:ab:4f:30:a5:12:f0:ce:73:
                    2f:b1:2a:0b:ce:6d:a8:4b:aa:90:1d:f3:c6:50:73:
                    77:2b:44:1a:4d:5f:92:6b:36:fe:48:46:9d:eb:36:
                    62:7b:1c:c3:7c:b2:71:26:2e:96:6a:dd:36:d4:1c:
                    30:57:27:a0:34:61:81:48:f7:09:b7:c0:d8:ca:0f:
                    e5:91:78:4e:97:16:a6:a5:70:57:34:ce:da:1e:71:
                    32:04:ac:17:3d:6a:41:65:3f:d6:c9:59:fe:c8:83:
                    a2:f3:c9:b9:6b:c7:2b:38:56:32:5e:1b:cd:fa:55:
                    aa:81:c5:96:84:60:8d:ad:d1:13:ec:e0:89:2e:9f:
                    fd:8f:2b:ca:de:9a:d9:2b:1f:bb:b9:ef:b9:c2:5f:
                    e7:b9:f7:bd:f1:fc:43:9a:fe:f4:5d:d8:40:59:39:
                    65:14:71:22:f0:05:d5:0d:06:70:08:e4:96:dd:e2:
                    34:0b:9f:6d:89:27:f3:ce:c8:42:57:e0:c9:d8:18:
                    20:d7:a1:5d:14:2b:da:bd:ae:dc:b2:1e:20:50:38:
                    fb:25:95:95:dd:ae:17:33:17:85:a9:93:1d:d1:45:
                    c0:24:86:a9:7e:3d:7f:3f:76:de:1a:12:25:27:8f:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0F:BC:A1:A9:A6:9A:41:3F:C2:E6:4C:CC:7E:A6:29:20:78:4A:90
            X509v3 Authority Key Identifier:
                keyid:E1:1E:66:83:59:7C:8B:DD:4C:A3:2F:54:07:D9:11:68:F5:C3:A8:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/323830343a353864303a3a2f33322d313238203d3e20323638313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:4c:1e:b3:e3:fb:c2:e4:79:b8:70:de:f1:b1:08:2d:ee:29:
         67:fc:f5:d2:6d:ff:a3:ac:ee:7a:33:b9:f4:58:5f:30:ff:af:
         9e:1c:be:ba:6f:2a:72:0e:b3:d2:6e:c7:ce:16:ac:e5:cc:6d:
         8e:9a:61:63:3a:ea:48:ca:b0:a0:f6:4e:89:71:05:ea:72:05:
         08:10:ae:5f:d2:76:34:fb:cc:fa:0e:07:c0:24:dc:52:0f:7e:
         5a:0b:7a:17:46:ea:ed:f5:9c:01:ef:87:4e:71:97:c1:dd:ae:
         52:68:e1:e5:9b:0b:1f:d7:cc:10:5a:5d:96:73:2c:85:a0:49:
         d0:cd:7e:69:f4:f1:03:6d:ae:34:ec:6e:98:97:83:92:77:9d:
         1b:ea:fc:13:3f:36:d3:20:0f:44:80:7d:b8:c0:12:39:d6:95:
         80:9e:0e:b1:03:52:17:90:af:7f:c1:2e:47:02:cc:ea:1a:5f:
         c2:38:c8:18:c1:14:f8:f5:07:93:4e:be:f7:da:04:e2:16:20:
         6d:9d:15:d9:a0:c9:59:23:80:3a:e1:59:45:95:98:9c:fc:e2:
         03:33:d8:03:da:10:f1:1f:2c:cf:53:ae:92:1a:1f:8d:7b:45:
         d9:c5:7e:51:47:4e:be:e9:d3:1d:f9:1a:5a:96:e2:06:9f:6d:
         57:46:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:40:31 2025 by rpki-client