Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/323830343a31303a3a2f33322d3438203d3e203237373135.roa
File:                     323830343a31303a3a2f33322d3438203d3e203237373135.roa (raw, json)
Hash identifier:          wcmAStAl6YkYEHW+lL6GD5XTOTMkfa0dlad/5Aio7UM=
Subject key identifier:   04:F9:85:05:28:BC:EA:09:FB:A6:70:56:27:E7:96:DE:73:68:08:F5
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       5650B8D307576EC67B513F83CFA43054285FEB2A
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/323830343a31303a3a2f33322d3438203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:25:22 +0000
ROA not before:           Mon 20 Oct 2025 12:20:22 +0000
ROA not after:            Mon 19 Oct 2026 12:25:22 +0000
asID:                     27715
IP address blocks:        2804:10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:50:b8:d3:07:57:6e:c6:7b:51:3f:83:cf:a4:30:54:28:5f:eb:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 12:20:22 2025 GMT
            Not After : Oct 19 12:25:22 2026 GMT
        Subject: CN=04F9850528BCEA09FBA6705627E796DE736808F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:df:17:91:e5:f1:e1:e1:76:4e:f2:df:c1:25:
                    66:28:85:9f:8a:c6:86:51:02:91:14:3f:01:1a:54:
                    0b:4a:14:a5:5b:e5:a6:d1:c1:7f:13:da:9a:26:3c:
                    b7:18:89:61:56:a3:ef:5e:43:fd:ad:e9:35:1c:af:
                    76:72:05:7a:62:22:37:12:f2:db:47:5a:7a:64:9e:
                    66:c6:9b:48:ed:65:29:96:e3:f0:cc:c2:1a:24:10:
                    a8:8e:77:fb:75:5a:15:0a:c2:a4:c7:d1:cb:92:22:
                    c0:a7:3e:e0:f9:11:85:42:2f:2c:68:27:30:5c:df:
                    35:d0:b5:a3:18:a9:31:ca:40:0a:fe:ac:ff:1a:67:
                    6d:cc:07:d3:9a:53:ad:d3:17:ef:8e:be:4d:30:f9:
                    d6:00:a2:52:82:ea:bb:dc:41:d8:de:60:c2:2f:ba:
                    e5:ea:67:ec:7c:fb:dc:2c:75:d1:20:39:98:ce:7d:
                    fc:94:62:bc:47:66:f9:e1:64:8c:e3:ae:f3:77:90:
                    0c:9a:ae:d1:65:cb:d4:86:7d:f5:e1:8c:4d:7e:25:
                    84:bb:fd:69:bd:a5:76:8e:c1:28:96:11:3c:eb:15:
                    f9:31:99:20:09:f6:c0:5d:22:6e:2d:b3:d7:7d:6f:
                    8d:ea:1e:54:6c:66:49:66:aa:87:1b:ad:c8:b5:8b:
                    46:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F9:85:05:28:BC:EA:09:FB:A6:70:56:27:E7:96:DE:73:68:08:F5
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/323830343a31303a3a2f33322d3438203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:e3:5c:8b:a4:48:b9:fb:2e:e2:72:81:19:6d:7e:e0:1d:d1:
         de:7e:43:1b:e4:a9:b7:56:f2:bc:7b:32:df:7d:a7:63:f6:a7:
         ae:bc:30:64:f8:1c:57:b6:25:05:e1:38:4a:06:92:3d:dc:cb:
         0f:52:5b:ad:30:3f:f8:ef:6b:41:b5:ac:df:fe:1a:6b:b6:1a:
         f9:27:98:df:84:cb:d5:f6:fc:b7:fe:2f:14:83:7d:eb:00:60:
         6c:da:7c:41:0c:d2:36:9b:45:01:ca:6d:c9:02:b3:0b:18:21:
         f9:05:e9:ac:a8:58:d3:d0:8b:91:49:80:df:64:51:c9:90:5e:
         ff:79:9d:3d:bd:b9:d3:80:3d:15:c6:21:5a:4c:b7:66:bb:77:
         df:5e:8d:68:50:44:15:81:62:b1:47:da:be:73:fc:81:6e:ce:
         03:55:af:34:ac:ac:cc:3d:cd:91:c1:3f:8e:1c:31:67:af:1a:
         c8:63:cf:12:50:fc:f4:74:e7:f4:b7:d8:8a:4b:cb:18:19:bc:
         4d:00:6a:6c:4b:32:27:5b:80:58:c5:97:ef:0a:49:7a:ec:fa:
         45:3a:e7:ab:f5:72:5a:0f:24:37:01:4f:45:7e:7c:bf:a8:33:
         e0:21:3c:8f:c4:bd:af:82:8f:cb:5d:72:f6:a7:73:82:62:c8:
         b5:9a:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:08:13 2025 by rpki-client