Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3438203d3e20323633393230.roa
File:                     323830343a323763303a3a2f33322d3438203d3e20323633393230.roa (raw, json)
Hash identifier:          /r3PcgERgJ45Sa8m0u/izoO95Z5adsvX0cA0azm8B8c=
Subject key identifier:   22:65:03:16:70:D0:5E:CB:25:25:5E:09:C2:1D:A2:C4:EF:51:BA:14
Certificate issuer:       /CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
Certificate serial:       0A9B222E540AE5192C3041C8E8A46707C8F05311
Authority key identifier: C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3438203d3e20323633393230.roa
Signing time:             Fri 29 Aug 2025 00:19:50 +0000
ROA not before:           Fri 29 Aug 2025 00:14:50 +0000
ROA not after:            Fri 28 Aug 2026 00:19:50 +0000
asID:                     263920
IP address blocks:        2804:27c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 17:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9b:22:2e:54:0a:e5:19:2c:30:41:c8:e8:a4:67:07:c8:f0:53:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
        Validity
            Not Before: Aug 29 00:14:50 2025 GMT
            Not After : Aug 28 00:19:50 2026 GMT
        Subject: CN=2265031670D05ECB25255E09C21DA2C4EF51BA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bd:dd:2a:22:43:cb:a7:54:e5:4d:86:59:aa:
                    c0:8c:1f:e2:19:ab:b9:2d:db:33:56:51:f2:26:b2:
                    b2:3f:a5:94:f3:e9:4a:8b:62:22:a5:47:6b:39:1e:
                    5c:71:b7:e1:50:79:d1:de:b3:2e:50:95:fc:99:91:
                    30:bb:d5:cb:e0:2d:e2:cf:b0:76:ac:e4:b7:9b:17:
                    24:1d:56:fa:f3:50:e3:5b:9e:e8:2e:ee:2c:d9:ae:
                    c4:b3:27:a1:2a:2e:82:46:4c:b7:4d:8a:58:c3:a2:
                    71:28:6e:47:a3:51:db:78:d8:1e:03:79:3f:a6:a9:
                    70:de:d1:db:77:70:a2:71:d1:33:4b:e1:a1:65:ad:
                    ca:a7:e1:cb:f5:28:6e:18:48:91:fa:f7:8c:46:22:
                    6b:b5:d0:16:20:cb:83:3e:03:da:e6:5e:67:6a:d4:
                    cb:ac:b0:6b:7f:08:df:e5:34:a0:2c:00:21:f1:27:
                    e1:cd:c6:70:f4:74:a9:ed:d6:c0:03:92:9c:28:bd:
                    e8:ea:48:59:44:84:bc:02:15:6a:ce:44:81:d4:c2:
                    bb:d4:32:17:cb:11:90:dd:f6:d4:b0:dd:dc:ad:4c:
                    65:87:f1:26:4c:72:19:4e:67:8d:ef:7e:ec:41:70:
                    88:ae:a9:0f:ca:29:43:7e:64:7c:64:e3:07:f4:cd:
                    d9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:03:16:70:D0:5E:CB:25:25:5E:09:C2:1D:A2:C4:EF:51:BA:14
            X509v3 Authority Key Identifier:
                keyid:C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3438203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:55:d5:c1:a3:d8:09:e4:74:7a:2d:17:24:f0:d8:31:11:9f:
         5a:20:ed:e1:c1:f4:bd:94:a6:be:18:89:10:e7:94:05:94:b2:
         8f:f3:dd:b4:ed:c7:84:dd:f9:49:6c:66:96:f6:09:5c:d0:3d:
         af:e3:6f:f9:60:15:f8:6c:1b:20:61:25:e9:54:55:23:18:72:
         5a:63:ac:f6:ef:44:25:5d:f8:39:cf:d7:14:35:ed:70:71:73:
         49:c1:cd:e8:e2:b1:c6:c3:cc:91:47:78:2d:4e:48:f1:29:45:
         7c:6d:2c:dd:9c:1f:f2:ac:ea:86:64:16:7a:3d:10:c8:09:26:
         36:a4:03:68:73:f0:69:13:e0:10:ed:c7:10:ac:3d:06:fe:2c:
         ea:14:6c:13:13:ae:db:3a:d8:0e:de:44:dd:2e:0d:cb:2a:b3:
         89:bc:2b:52:a7:75:2e:5d:65:a2:7c:53:ef:90:38:67:2a:65:
         88:40:ce:ea:d4:86:2d:41:25:f5:9f:52:e4:58:a7:40:39:62:
         d2:33:95:8b:fa:f2:a1:e5:e6:d9:d4:06:c2:7b:10:54:7f:86:
         94:aa:70:76:38:92:98:56:b8:ce:54:4e:2d:7a:9a:bc:74:3b:
         05:ec:9d:68:17:55:79:08:3b:6e:8d:d7:c0:8f:7e:7c:11:3d:
         43:b7:f7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:19 2025 by rpki-client