Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/323830343a343365303a3a2f33322d3332203d3e20323637353936.roa
File:                     323830343a343365303a3a2f33322d3332203d3e20323637353936.roa (raw, json)
Hash identifier:          4XoXi3vyUEjESuG0QI7Wcg99yzcETtW9I3JkeESRJdk=
Subject key identifier:   60:D7:9B:71:7A:A5:0C:89:FD:75:E1:91:4C:42:A1:93:2D:47:27:F6
Certificate issuer:       /CN=EA94FB33637123FD82BC561313AE44D1A8CF9D23
Certificate serial:       31436F79565AEA790AEE6E35C466BB6EE207FB86
Authority key identifier: EA:94:FB:33:63:71:23:FD:82:BC:56:13:13:AE:44:D1:A8:CF:9D:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/323830343a343365303a3a2f33322d3332203d3e20323637353936.roa
Signing time:             Tue 07 Oct 2025 18:49:24 +0000
ROA not before:           Tue 07 Oct 2025 18:44:24 +0000
ROA not after:            Tue 06 Oct 2026 18:49:24 +0000
asID:                     267596
IP address blocks:        2804:43e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:43:6f:79:56:5a:ea:79:0a:ee:6e:35:c4:66:bb:6e:e2:07:fb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA94FB33637123FD82BC561313AE44D1A8CF9D23
        Validity
            Not Before: Oct  7 18:44:24 2025 GMT
            Not After : Oct  6 18:49:24 2026 GMT
        Subject: CN=60D79B717AA50C89FD75E1914C42A1932D4727F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:04:eb:37:f5:2d:26:d3:87:d3:c6:f8:4c:df:
                    cb:da:5d:ba:02:8a:01:0e:21:dd:c5:2b:a1:67:27:
                    bb:3f:b9:6c:74:11:72:1b:4f:e8:e2:02:a5:73:34:
                    20:4b:1f:46:97:e6:0d:09:93:f2:68:3c:57:5a:17:
                    4b:07:75:12:ab:f6:08:cc:3b:51:45:cf:09:7f:34:
                    53:c4:37:b6:69:7d:63:c6:fe:fa:1a:d1:22:b7:c3:
                    5b:0b:cb:98:9f:23:c3:cc:b4:80:79:26:cd:eb:54:
                    49:4d:79:12:6b:64:f0:7b:06:70:9e:95:53:06:36:
                    94:70:fd:e8:63:02:bd:5d:d2:35:55:ae:fc:df:36:
                    74:f9:a5:a5:4d:28:77:86:bd:0d:ba:09:86:b1:de:
                    3f:f2:fa:24:c6:1e:35:bb:87:cf:c9:ab:b8:73:4f:
                    85:06:a3:b5:cd:b8:9e:61:26:24:ac:74:a4:b8:7d:
                    d3:95:1e:55:21:28:65:cb:56:ad:4f:c1:1d:84:fb:
                    26:2e:76:29:af:d7:84:ed:03:51:9d:a3:12:78:51:
                    38:19:fb:b6:f3:b1:d7:39:d8:d7:17:7a:2d:b3:c2:
                    36:d7:5b:ec:89:14:35:15:76:cf:5d:2f:93:70:c6:
                    53:77:85:1d:09:7e:e4:71:f5:68:17:b4:ab:a7:08:
                    50:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D7:9B:71:7A:A5:0C:89:FD:75:E1:91:4C:42:A1:93:2D:47:27:F6
            X509v3 Authority Key Identifier:
                keyid:EA:94:FB:33:63:71:23:FD:82:BC:56:13:13:AE:44:D1:A8:CF:9D:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/323830343a343365303a3a2f33322d3332203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:ce:1e:69:93:5f:62:60:7d:b9:cd:b6:b5:68:49:2e:10:
         b4:5c:f6:4c:ca:56:f4:7e:2f:50:79:66:a4:59:ce:47:63:11:
         39:80:4b:1f:0f:8d:1e:92:d8:96:2b:e1:ac:b9:2f:07:cc:cc:
         30:78:81:75:93:a1:7f:ec:00:3a:db:ac:42:7a:b4:57:61:58:
         ab:8c:44:c9:3f:be:2f:e3:3d:10:fe:4b:ec:9e:63:a4:50:1f:
         10:28:58:c9:8d:e4:c9:5a:c4:d6:6f:d4:18:c2:a7:45:3b:00:
         39:56:16:e8:d6:d1:4e:56:67:09:0c:cb:e0:e9:c7:b5:3b:ad:
         a4:f8:a5:cf:e9:8e:81:e2:35:71:03:af:2e:d7:78:ba:99:bf:
         5e:9e:02:48:0b:fc:11:ac:41:54:36:4b:e5:0e:e1:9e:8c:e6:
         3a:b2:18:a5:5d:84:42:28:cd:77:59:b3:83:d2:a7:43:31:ba:
         e0:89:7f:7e:e3:b3:6b:f3:cc:e2:2a:ef:79:4f:5c:0a:bc:63:
         c2:cb:01:b1:24:f7:ca:f4:3a:ea:c6:e1:fd:96:7c:95:5d:8d:
         72:da:ac:76:cb:05:d8:0f:23:d9:b1:f0:8d:15:d7:8b:3d:7f:
         96:e8:ea:b8:b5:98:c9:cc:27:d6:90:65:06:80:f4:fd:ca:7d:
         69:95:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:44 2025 by rpki-client