Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a613030303a3a2f33362d3336203d3e20323632353835.roa
File:                     323830343a386637303a613030303a3a2f33362d3336203d3e20323632353835.roa (raw, json)
Hash identifier:          sKw7myAECGjzC4xy/Cl4YnL+chdrj+dhFMOMXNBo4vg=
Subject key identifier:   0E:8A:C2:6B:24:43:FF:D0:38:6D:28:FE:A2:E0:BC:1C:14:D5:9C:13
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       4B54E57DEF88835FB0153F0E86B4820AE8CC8049
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a613030303a3a2f33362d3336203d3e20323632353835.roa
Signing time:             Thu 16 Oct 2025 16:05:04 +0000
ROA not before:           Thu 16 Oct 2025 16:00:04 +0000
ROA not after:            Thu 15 Oct 2026 16:05:04 +0000
asID:                     262585
IP address blocks:        2804:8f70:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:54:e5:7d:ef:88:83:5f:b0:15:3f:0e:86:b4:82:0a:e8:cc:80:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Oct 16 16:00:04 2025 GMT
            Not After : Oct 15 16:05:04 2026 GMT
        Subject: CN=0E8AC26B2443FFD0386D28FEA2E0BC1C14D59C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:3b:6d:cf:be:90:2e:67:78:13:41:76:93:
                    7e:30:86:e9:18:c3:d8:71:42:b5:8d:1f:f0:01:8d:
                    5b:f0:4d:a2:e2:b5:82:76:97:91:d4:c9:ba:ea:f3:
                    e2:fd:0a:b0:5d:38:47:95:91:51:fe:0f:99:a2:2e:
                    1d:ce:5c:89:58:60:80:c8:93:89:d6:36:ad:db:ed:
                    3c:9d:0c:b5:5e:52:ea:f7:43:48:98:ee:f1:68:55:
                    d1:47:87:1b:8d:42:59:11:45:89:5c:80:d0:9b:7c:
                    a3:a0:df:05:72:6d:5e:00:bd:6d:0e:3d:14:19:98:
                    40:0c:7c:9b:0a:ea:7f:ba:4c:8d:9c:8e:66:21:6b:
                    d4:01:44:91:b2:51:79:3f:d8:66:7e:f3:e6:53:03:
                    98:e4:a2:48:dd:4a:f9:d3:e0:fd:4d:77:b3:63:63:
                    ca:a4:e0:00:8c:db:85:1c:70:a7:66:a2:6f:8d:38:
                    8d:8b:f5:e7:83:7e:e3:1e:4f:03:40:59:fc:6c:c0:
                    84:e2:b7:d6:8b:c8:5f:ab:a6:00:96:0f:da:9d:d2:
                    2a:0e:bf:49:ce:16:34:b9:b6:10:6b:de:31:e2:82:
                    b5:75:78:25:5d:a7:87:15:e0:d9:57:61:79:0a:a7:
                    08:db:f2:65:54:29:6a:12:4b:4d:84:dd:fc:f6:68:
                    b5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8A:C2:6B:24:43:FF:D0:38:6D:28:FE:A2:E0:BC:1C:14:D5:9C:13
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a613030303a3a2f33362d3336203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f70:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:8d:ea:1b:73:21:57:1d:f6:f6:ea:91:36:55:bc:2e:e2:13:
         1f:97:4b:c6:78:fc:13:1f:af:1f:2d:da:ef:f4:a3:7b:19:4a:
         6d:76:32:4a:9a:ba:af:e9:b3:d3:ac:22:5b:fb:bc:e9:41:9e:
         77:b7:e1:80:e7:b5:a4:1e:fc:42:80:60:6e:a1:ac:7c:a1:c2:
         bb:2b:9e:7b:2a:58:1d:8d:90:3d:9f:9e:2e:b4:63:93:1c:c6:
         52:a5:e7:ca:70:d6:75:4e:76:13:20:65:7d:e9:fe:95:88:13:
         fe:51:24:83:a4:26:e9:8f:76:c5:bf:d3:cb:f9:ba:77:ca:17:
         87:6d:35:1e:ef:e6:ed:42:51:4b:db:8e:32:e4:d4:a2:08:72:
         51:5d:d7:1a:60:7f:b1:1e:6c:dc:f4:06:23:20:0b:96:ca:a5:
         ba:53:ae:e2:e3:04:c0:42:b4:0e:e4:ef:41:96:64:29:d2:9f:
         6f:5d:0a:9f:aa:ce:8e:ef:a8:59:db:67:df:f5:ea:f0:70:0e:
         97:8b:a0:31:67:fe:ba:58:f7:62:21:2d:86:73:32:2d:f6:95:
         db:7d:f5:c8:74:55:7d:a6:24:a6:9c:e5:c5:bc:75:5f:b4:62:
         9e:99:7f:f5:d9:4d:79:4e:ac:28:50:96:b2:ee:de:25:cf:72:
         bd:13:76:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:37:32 2025 by rpki-client