Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/323830343a313562633a3a2f33322d3332203d3e203238313834.roa
File:                     323830343a313562633a3a2f33322d3332203d3e203238313834.roa (raw, json)
Hash identifier:          yct6p+9xbBoWkvLQp6v3IkExzEAcql+xu5MBslNrkd8=
Subject key identifier:   5E:17:A7:6B:F8:11:5D:98:4B:C8:7E:37:41:4A:AF:7A:C3:B2:7D:F9
Certificate issuer:       /CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7
Certificate serial:       75355E11BDDB505B99507B48EED7C29D37463C83
Authority key identifier: E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/323830343a313562633a3a2f33322d3332203d3e203238313834.roa
Signing time:             Wed 24 Sep 2025 18:26:51 +0000
ROA not before:           Wed 24 Sep 2025 18:21:51 +0000
ROA not after:            Wed 23 Sep 2026 18:26:51 +0000
asID:                     28184
IP address blocks:        2804:15bc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:35:5e:11:bd:db:50:5b:99:50:7b:48:ee:d7:c2:9d:37:46:3c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7
        Validity
            Not Before: Sep 24 18:21:51 2025 GMT
            Not After : Sep 23 18:26:51 2026 GMT
        Subject: CN=5E17A76BF8115D984BC87E37414AAF7AC3B27DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:25:7e:3b:b0:68:55:74:a9:ff:e6:82:be:
                    ef:c7:6a:24:36:c3:a3:17:86:73:ae:d8:9d:93:c0:
                    80:f9:20:42:fc:ee:e0:bb:fc:47:03:47:49:4f:68:
                    b8:86:69:4d:6a:12:a0:52:18:e9:7d:b5:b2:6d:62:
                    ce:3a:18:95:c6:f1:1f:4a:bd:a1:b0:4c:4a:91:a6:
                    a3:f3:ae:1d:f7:5b:a4:c4:bb:e6:99:44:60:ac:9b:
                    c8:19:45:73:85:e0:c2:05:b9:47:b0:91:70:75:25:
                    a7:c9:32:6d:8f:69:b6:24:1d:10:76:96:3f:e9:c9:
                    84:97:ca:84:4a:80:9d:56:14:c2:28:7f:88:3c:0c:
                    00:e2:2e:10:46:a3:ad:5b:46:c5:e5:e7:b6:26:38:
                    b1:f6:2f:c9:aa:1e:c3:d4:8c:47:1b:37:83:8a:f4:
                    2a:bc:99:80:e1:dd:ea:70:a9:f0:5a:be:70:13:5b:
                    ac:c2:63:5d:48:ea:58:d9:d3:3d:02:9e:84:5e:86:
                    2a:42:b0:1f:8b:74:d1:1d:41:76:8d:7b:8d:18:4e:
                    b3:a5:7f:4b:3b:5e:29:9f:9e:15:25:51:67:a3:56:
                    0c:13:59:35:c9:21:8f:b2:ae:33:82:7c:c3:c4:ea:
                    0f:c5:e4:7a:9f:1f:2e:e8:28:8a:0e:61:69:8d:bc:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:17:A7:6B:F8:11:5D:98:4B:C8:7E:37:41:4A:AF:7A:C3:B2:7D:F9
            X509v3 Authority Key Identifier:
                keyid:E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/323830343a313562633a3a2f33322d3332203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:02:24:3f:a8:65:41:03:60:bb:8c:a5:d1:6d:63:61:97:14:
         86:7a:7b:38:66:bd:17:e8:74:e8:cb:24:6a:47:58:e6:9d:6f:
         9d:ae:8a:fd:21:cb:a3:db:81:aa:9b:41:30:a8:1b:a0:25:85:
         8f:3f:34:a3:ef:6e:e6:e4:49:7a:e7:07:4a:37:33:d9:a3:42:
         95:46:24:8f:24:4d:d1:39:f8:db:9f:da:2a:0f:52:b6:c9:06:
         78:37:e3:ae:f7:45:c5:1e:3e:bb:02:e3:fb:d8:59:bf:a5:d3:
         c7:ee:ba:4e:a1:ad:67:3f:68:b7:f2:2d:2f:fc:d6:ec:29:bf:
         e1:97:24:1a:04:25:b3:8b:07:40:21:bc:44:33:a6:53:7d:d2:
         9e:ca:ce:99:ee:0e:34:e5:9f:0a:44:f2:06:d7:c7:13:b4:f9:
         b4:a8:d0:de:e8:10:19:a3:69:cc:b9:29:70:b3:ef:22:9f:d0:
         57:d4:68:f3:85:d9:4f:cf:0a:e4:85:8b:a2:d0:34:82:19:1a:
         33:fc:40:2e:af:6f:30:ba:47:53:31:5a:cd:b8:db:bc:45:e4:
         7f:a3:be:2f:12:b3:ca:63:96:1f:ee:fe:d8:ce:82:fb:9d:70:
         b7:86:fd:67:d7:50:b9:4c:94:42:cc:60:a0:fd:f9:88:a5:00:
         95:92:08:67
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUdTVeEb3bUFuZUHtI7tfCnTdGPIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTEwNkYwODNCMDExNEQzRDEwNEREMUVCRUE4MjU3RkI2
RkE1OUNGNzAeFw0yNTA5MjQxODIxNTFaFw0yNjA5MjMxODI2NTFaMDMxMTAvBgNV
BAMTKDVFMTdBNzZCRjgxMTVEOTg0QkM4N0UzNzQxNEFBRjdBQzNCMjdERjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrTSV+O7BoVXSp/+aCvu/HaiQ2
w6MXhnOu2J2TwID5IEL87uC7/EcDR0lPaLiGaU1qEqBSGOl9tbJtYs46GJXG8R9K
vaGwTEqRpqPzrh33W6TEu+aZRGCsm8gZRXOF4MIFuUewkXB1JafJMm2PabYkHRB2
lj/pyYSXyoRKgJ1WFMIof4g8DADiLhBGo61bRsXl57YmOLH2L8mqHsPUjEcbN4OK
9Cq8mYDh3epwqfBavnATW6zCY11I6ljZ0z0CnoRehipCsB+LdNEdQXaNe40YTrOl
f0s7XimfnhUlUWejVgwTWTXJIY+yrjOCfMPE6g/F5HqfHy7oKIoOYWmNvCoHAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUXhena/gRXZhLyH43QUqvesOyffkwHwYDVR0j
BBgwFoAU4Qbwg7ARTT0QTdHr6oJX+2+lnPcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9FMTA2RjA4M0IwMTE0RDNEMTA0REQxRUJFQTgyNTdGQjZGQTU5Q0Y3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxMDZGMDgzQjAxMTREM0Qx
MDRERDFFQkVBODI1N0ZCNkZBNTlDRjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzIzODMwMzQzYTMxMzU2MjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEFbwwDQYJKoZIhvcNAQELBQADggEBAB0CJD+oZUED
YLuMpdFtY2GXFIZ6ezhmvRfodOjLJGpHWOadb52uiv0hy6PbgaqbQTCoG6AlhY8/
NKPvbubkSXrnB0o3M9mjQpVGJI8kTdE5+Nuf2ioPUrbJBng34673RcUePrsC4/vY
Wb+l08fuuk6hrWc/aLfyLS/81uwpv+GXJBoEJbOLB0AhvEQzplN90p7KzpnuDjTl
nwpE8gbXxxO0+bSo0N7oEBmjacy5KXCz7yKf0FfUaPOF2U/PCuSFi6LQNIIZGjP8
QC6vbzC6R1MxWs2427xF5H+jvi8Ss8pjlh/u/tjOgvudcLeG/WfXULlMlELMYKD9
+YilAJWSCGc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:53 2025 by rpki-client