Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/323830343a346335343a3a2f33322d3332203d3e20323637333634.roa
File:                     323830343a346335343a3a2f33322d3332203d3e20323637333634.roa (raw, json)
Hash identifier:          GxRFV31qAKVBKOnxO6QRpSwXixA0jTxBByYXjaxJC1c=
Subject key identifier:   B2:4E:5C:57:B1:90:74:5D:57:46:23:00:30:81:5D:8D:27:65:D0:84
Certificate issuer:       /CN=EE908CF6B5C6DE896D19822212A8E9D12A806EA3
Certificate serial:       734FFEEF16F6BC7F09FB767DC93EE916E03264EF
Authority key identifier: EE:90:8C:F6:B5:C6:DE:89:6D:19:82:22:12:A8:E9:D1:2A:80:6E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/323830343a346335343a3a2f33322d3332203d3e20323637333634.roa
Signing time:             Sat 12 Jul 2025 16:43:54 +0000
ROA not before:           Sat 12 Jul 2025 16:38:54 +0000
ROA not after:            Sat 11 Jul 2026 16:43:54 +0000
asID:                     267364
IP address blocks:        2804:4c54::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.crl
                          rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4f:fe:ef:16:f6:bc:7f:09:fb:76:7d:c9:3e:e9:16:e0:32:64:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE908CF6B5C6DE896D19822212A8E9D12A806EA3
        Validity
            Not Before: Jul 12 16:38:54 2025 GMT
            Not After : Jul 11 16:43:54 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fc:12:30:60:9a:9e:a7:83:66:23:57:e9:87:
                    fd:b9:09:99:b7:2f:80:2a:fd:42:2a:ed:ef:05:e9:
                    87:c2:a5:90:6d:e1:28:f6:c3:d3:50:e8:22:a7:2f:
                    93:21:62:2a:33:c4:f7:3b:c0:b5:b6:dd:f6:4a:de:
                    f4:1c:82:3e:6c:99:61:17:61:24:5e:55:62:26:4c:
                    70:3d:45:46:a0:ff:e8:63:17:eb:e6:02:ec:69:7d:
                    bf:2e:3e:32:85:63:fb:8e:05:47:f3:3d:1d:d8:34:
                    28:f9:78:6c:fc:46:d8:a2:69:a4:1e:f3:70:89:b8:
                    14:14:74:58:a6:8d:81:c5:80:d4:02:03:1a:40:56:
                    1f:9a:96:5b:ec:2c:20:c2:a9:dc:13:1e:14:54:ce:
                    9a:9a:bb:f9:cf:5c:f1:5c:f8:f5:d0:bd:6b:de:7e:
                    e8:01:a7:80:56:00:bf:b6:3e:a5:01:65:f6:4d:49:
                    c4:14:8b:f9:1f:e9:59:37:c1:d8:ae:ef:e5:04:80:
                    7a:26:f1:7e:70:80:58:c7:57:87:82:ae:b7:ba:28:
                    39:ad:69:bd:59:4b:e6:ab:3e:31:43:13:1b:99:2e:
                    2c:49:fa:96:f5:11:a3:8b:5d:a3:9c:09:18:89:c3:
                    d7:d5:34:d9:1f:e4:77:f5:75:a2:2c:33:87:5d:31:
                    fb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4E:5C:57:B1:90:74:5D:57:46:23:00:30:81:5D:8D:27:65:D0:84
            X509v3 Authority Key Identifier:
                keyid:EE:90:8C:F6:B5:C6:DE:89:6D:19:82:22:12:A8:E9:D1:2A:80:6E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/323830343a346335343a3a2f33322d3332203d3e20323637333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c54::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:70:5d:d1:69:f7:26:b6:51:50:f0:e0:64:6f:f4:e6:47:9b:
         54:b3:bd:e2:4c:2c:62:d1:19:c8:cd:97:41:2d:ae:f4:12:4d:
         4c:cc:fd:56:14:83:d6:7a:0a:3e:b0:aa:20:f2:25:d8:69:a9:
         d2:56:57:52:4e:1a:18:38:8d:be:88:d2:6e:4d:14:7c:bf:52:
         53:36:79:4d:ec:40:44:1a:5d:9c:37:c5:ee:5e:b9:48:83:05:
         4f:90:dc:38:17:7b:8b:d3:40:b3:06:37:34:df:78:f1:fa:d7:
         30:44:8d:91:05:c5:79:64:0c:38:02:46:c7:4b:09:f3:e9:9d:
         eb:3a:7a:d0:5f:ce:90:d1:74:06:96:ff:7b:64:e8:4d:5f:87:
         74:49:d6:46:57:b9:25:d8:bc:76:41:05:97:1f:77:99:92:fc:
         82:5f:84:b4:78:3e:e2:9f:fd:48:1c:73:a7:e3:93:fb:b6:9b:
         75:d5:46:06:84:89:0e:91:90:66:a2:fd:37:46:6c:c8:15:71:
         9a:11:55:21:52:b0:d6:2a:2a:8d:53:b7:df:a8:61:cf:fe:5a:
         57:81:d9:3a:d0:67:da:46:2d:a9:cd:ab:6b:7e:c4:4a:3f:2b:
         47:d9:e2:2a:87:b4:85:0e:b5:14:b7:db:69:45:08:e5:85:28:
         ca:a8:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:50:10 2025 by rpki-client