Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/323830343a343661383a3a2f33322d313238203d3e20323637303033.roa
File:                     323830343a343661383a3a2f33322d313238203d3e20323637303033.roa (raw, json)
Hash identifier:          o5a7RA1yY3vqJgpTqI6f/c1/6/ajxZ9bIZF62aHJWAU=
Subject key identifier:   58:80:4B:C9:E5:E4:AC:E7:57:5A:92:4C:67:6F:D6:D9:3E:7D:5D:E1
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       308772F09CF140B0F5AC69BDEA34810497E47064
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/323830343a343661383a3a2f33322d313238203d3e20323637303033.roa
Signing time:             Fri 03 Oct 2025 18:16:52 +0000
ROA not before:           Fri 03 Oct 2025 18:11:52 +0000
ROA not after:            Fri 02 Oct 2026 18:16:52 +0000
asID:                     267003
IP address blocks:        2804:46a8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
                          rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:87:72:f0:9c:f1:40:b0:f5:ac:69:bd:ea:34:81:04:97:e4:70:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Oct  3 18:11:52 2025 GMT
            Not After : Oct  2 18:16:52 2026 GMT
        Subject: CN=58804BC9E5E4ACE7575A924C676FD6D93E7D5DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bf:bc:0f:e4:2e:94:cd:0e:fb:4c:6a:f5:21:
                    59:f8:7c:6a:0f:c1:b2:31:3c:3a:18:12:6e:e6:86:
                    e7:2f:da:00:ff:cf:a8:1e:a4:87:2d:f9:ef:9c:db:
                    cd:f6:54:91:40:7d:c5:e5:23:57:80:7e:39:ff:33:
                    07:1c:8e:f9:e1:89:bd:d7:ab:af:6e:26:06:21:66:
                    11:b1:36:e6:87:3d:bb:ab:3c:4e:b4:7a:37:f3:07:
                    82:46:bb:03:ad:a6:59:1b:b7:67:15:f1:d5:b0:1b:
                    ce:ff:df:1e:62:01:da:c1:a4:4c:cd:09:7b:c9:1c:
                    bb:9f:70:1e:e5:23:df:12:48:e2:25:a4:bf:bf:98:
                    5b:c4:61:9b:05:b7:77:98:82:7c:68:9b:2d:e1:23:
                    cc:c1:dd:15:d8:82:29:69:96:e8:cd:9b:f6:43:0b:
                    44:9f:84:bf:0a:08:cb:40:c7:ee:50:fd:94:34:8e:
                    03:6a:04:1d:75:b4:0c:f2:5e:b4:89:2d:e2:e2:f3:
                    9b:c0:93:04:0e:5e:6e:0f:4a:c9:a9:8b:03:17:d6:
                    22:e5:53:d5:e4:e8:41:7a:c9:9d:b1:a5:84:a4:07:
                    c8:05:32:69:f2:06:8e:b6:6a:67:87:21:a0:77:a4:
                    c9:69:97:ba:f2:c6:35:92:92:6d:4c:ee:b1:4d:76:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:80:4B:C9:E5:E4:AC:E7:57:5A:92:4C:67:6F:D6:D9:3E:7D:5D:E1
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/323830343a343661383a3a2f33322d313238203d3e20323637303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:56:7e:bb:e3:b8:ea:d4:ff:6f:a2:8d:f4:91:b3:d4:0f:63:
         a0:39:cb:74:cb:9c:51:fc:cf:2d:6c:c3:c1:95:09:7f:1c:c2:
         3d:ed:cf:ad:da:f6:6b:18:32:65:5d:07:5a:59:4a:d7:a1:21:
         e1:2f:3e:fe:04:2a:cb:95:42:c8:e9:38:52:1a:39:ef:f5:ed:
         38:0b:f0:ac:c5:f0:06:f9:18:a0:90:9c:18:ed:0a:f3:89:f8:
         94:58:6b:e2:b6:48:d4:63:cf:24:9d:07:55:cc:f3:e0:5e:62:
         76:c1:ef:fc:5c:3e:4d:fe:23:18:88:c3:48:eb:70:3c:2e:5f:
         19:b6:ee:c4:70:22:5f:84:d8:5c:70:54:e3:8b:27:44:90:04:
         74:68:9d:7e:69:ca:75:a0:34:46:ea:d8:13:44:72:8c:f6:69:
         5a:5e:ba:3a:23:3b:a4:37:ff:82:ea:d6:d2:6d:f1:a4:ec:02:
         71:03:91:5e:28:96:b0:23:43:5f:3c:29:ab:7d:37:68:82:35:
         97:41:7f:38:1e:a5:d7:15:50:69:53:5f:1d:4f:8d:3c:3a:50:
         ca:d0:5e:cd:4b:4a:4f:eb:f6:45:47:1f:a0:90:5c:d5:fe:49:
         9a:fc:5f:d9:03:b8:1f:50:4e:25:cd:4a:eb:45:18:6d:ca:80:
         75:3c:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:29:42 2025 by rpki-client