Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/323830343a343837383a3a2f33322d3438203d3e20323637313233.roa
File:                     323830343a343837383a3a2f33322d3438203d3e20323637313233.roa (raw, json)
Hash identifier:          oMvEM5HdlBE/2P1OWBPGBn5Q5f+CYXEGkA5YRY0DoGw=
Subject key identifier:   86:6D:2E:7D:B3:84:DC:89:97:51:D0:0E:3B:9A:9A:BD:17:28:F8:BC
Certificate issuer:       /CN=DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7
Certificate serial:       75A2CAD29AB195B6678B66069263CA5EB4B491B7
Authority key identifier: DF:9D:1F:F1:4B:D6:D4:20:9A:F1:97:A1:E8:76:8E:8A:7A:93:C5:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/323830343a343837383a3a2f33322d3438203d3e20323637313233.roa
Signing time:             Wed 01 Oct 2025 20:01:23 +0000
ROA not before:           Wed 01 Oct 2025 19:56:23 +0000
ROA not after:            Wed 30 Sep 2026 20:01:23 +0000
asID:                     267123
IP address blocks:        2804:4878::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl
                          rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a2:ca:d2:9a:b1:95:b6:67:8b:66:06:92:63:ca:5e:b4:b4:91:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7
        Validity
            Not Before: Oct  1 19:56:23 2025 GMT
            Not After : Sep 30 20:01:23 2026 GMT
        Subject: CN=866D2E7DB384DC899751D00E3B9A9ABD1728F8BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:e1:b9:27:28:0b:05:1c:9c:8e:af:83:e0:
                    43:e0:2d:bc:c6:d2:34:de:86:ae:9b:a9:f6:44:ba:
                    8b:6d:6d:fb:d1:6b:28:5b:60:73:9a:94:f2:50:22:
                    37:59:56:de:dc:98:2c:8e:a0:a0:fb:be:6d:fd:2d:
                    5f:4e:e9:bc:89:e9:41:2a:8c:62:5d:e0:45:46:8b:
                    22:66:34:3f:ce:b4:5d:d3:80:eb:2e:a0:48:a9:ce:
                    0d:27:aa:52:a4:7c:79:b8:11:cb:81:a5:78:44:c5:
                    21:a0:4e:a8:6c:bc:93:da:43:67:cb:9c:0d:39:e3:
                    8b:02:d1:d3:b7:eb:cc:e2:94:60:ce:c0:51:bd:a4:
                    fc:45:3a:e4:d1:56:5a:27:8b:37:67:52:9b:c6:ad:
                    74:17:61:37:43:f9:62:d9:b3:42:20:4f:97:a2:67:
                    10:29:6c:13:09:64:34:91:7f:bc:8c:89:e3:3b:7c:
                    8b:4c:9c:eb:d3:f7:bb:85:52:cb:34:fc:80:e2:84:
                    e4:c0:ad:eb:72:89:86:41:39:22:be:db:cf:03:12:
                    ef:88:41:99:1f:42:8e:5f:d1:9b:28:a1:87:33:4f:
                    99:ec:5e:3d:48:a7:c1:51:25:2d:17:38:fc:5b:a3:
                    68:c8:89:a1:b5:e1:a2:75:73:d8:55:de:8b:13:f0:
                    69:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6D:2E:7D:B3:84:DC:89:97:51:D0:0E:3B:9A:9A:BD:17:28:F8:BC
            X509v3 Authority Key Identifier:
                keyid:DF:9D:1F:F1:4B:D6:D4:20:9A:F1:97:A1:E8:76:8E:8A:7A:93:C5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/323830343a343837383a3a2f33322d3438203d3e20323637313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4878::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:aa:8e:c2:cb:ee:c5:6d:8e:04:e2:93:a4:c4:c4:9b:56:96:
         c6:be:97:ec:7c:c2:da:90:97:83:33:29:19:0f:18:0b:e9:a1:
         b7:7b:f5:7e:22:b1:15:fd:e1:f5:bc:f1:eb:8e:ad:e2:46:3b:
         09:32:c0:4f:28:20:b9:10:46:11:92:26:8d:2a:39:96:4b:35:
         f7:5c:74:ae:9a:c9:a6:46:90:58:9a:48:ea:69:2a:c9:51:24:
         31:d4:3b:82:01:77:40:64:a2:53:0d:c5:42:33:aa:94:33:ce:
         9d:a7:f8:03:2f:a1:a4:a0:b5:76:23:fe:f3:17:4b:16:25:57:
         24:6b:2f:56:31:18:c0:65:9f:13:04:cf:0e:48:5a:56:50:01:
         28:e7:a2:c8:3d:42:77:77:f3:9b:df:50:e4:de:13:5f:b4:04:
         a2:e0:fa:1d:cf:11:14:c1:11:ef:74:b9:7c:8c:5b:f2:13:3c:
         a0:9b:92:4e:a8:b9:9d:5d:ed:5c:35:b4:8f:bc:af:15:4f:49:
         21:41:dd:c8:3f:a7:e4:9e:a7:59:65:ac:d0:87:1a:6d:a1:4f:
         bb:d6:e4:bb:f1:85:a8:e3:9c:14:4e:ff:da:24:6e:4e:b2:19:
         61:a9:9e:13:22:c2:37:7d:6b:e5:1e:c1:f7:2a:04:06:18:4f:
         39:c0:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:53:46 2025 by rpki-client