Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/323830343a353164633a313038303a3a2f34332d3433203d3e20323638343831.roa
File:                     323830343a353164633a313038303a3a2f34332d3433203d3e20323638343831.roa (raw, json)
Hash identifier:          oYcdjBwG0g3YQ7NzzDizFKOWrHffusmggNpEBNIXvZY=
Subject key identifier:   A5:8B:EC:AE:5C:B5:56:BD:82:40:47:72:85:CC:DC:79:82:EE:C1:6C
Certificate issuer:       /CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
Certificate serial:       25629239ACDD7DF46AD05EFEAE99623EC74986A7
Authority key identifier: 85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/323830343a353164633a313038303a3a2f34332d3433203d3e20323638343831.roa
Signing time:             Fri 11 Jul 2025 14:14:44 +0000
ROA not before:           Fri 11 Jul 2025 14:09:44 +0000
ROA not after:            Fri 10 Jul 2026 14:14:44 +0000
asID:                     268481
IP address blocks:        2804:51dc:1080::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl
                          rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 04:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:62:92:39:ac:dd:7d:f4:6a:d0:5e:fe:ae:99:62:3e:c7:49:86:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
        Validity
            Not Before: Jul 11 14:09:44 2025 GMT
            Not After : Jul 10 14:14:44 2026 GMT
        Subject: CN=A58BECAE5CB556BD8240477285CCDC7982EEC16C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:84:e0:1f:2c:8d:60:1a:4f:a7:38:33:55:
                    6b:f9:a1:ab:95:da:86:97:e1:45:b1:ee:8c:73:8f:
                    3b:16:fd:4d:5b:c7:39:df:91:f1:b1:44:20:3b:7a:
                    90:e4:64:58:a8:a0:e9:73:69:8e:c2:a6:5c:fa:bf:
                    43:a6:0b:4a:e6:97:16:79:a0:24:15:a8:52:3c:4f:
                    22:a0:94:f8:b6:75:64:a8:72:cb:f8:ad:4e:a1:ab:
                    34:9a:cd:bc:1c:cb:2e:2e:b9:31:7f:d6:ef:e5:2d:
                    51:03:cd:ad:fb:e2:b9:34:e4:2a:b9:94:b8:84:0e:
                    27:ae:0b:ed:cc:e6:23:a1:ca:d1:bf:6d:01:48:68:
                    eb:00:df:68:40:0e:b8:91:50:8c:5a:10:d4:fa:11:
                    f8:49:3e:be:e3:30:d3:b5:49:af:ff:c4:eb:91:ac:
                    c9:c1:2a:41:7e:48:fe:60:68:a9:02:71:40:85:dc:
                    27:55:52:85:19:b1:19:98:3b:eb:e3:fb:b7:2c:84:
                    17:53:d0:ae:1c:85:a0:10:da:e5:5b:8b:ab:06:f8:
                    89:25:d0:f2:82:8a:3f:ea:d1:af:10:fb:07:ab:95:
                    74:c6:5a:74:a3:c7:21:5b:3b:ef:1e:5b:6a:01:e0:
                    fc:81:a6:fb:d0:19:59:4c:b6:67:56:a5:f9:c1:0f:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8B:EC:AE:5C:B5:56:BD:82:40:47:72:85:CC:DC:79:82:EE:C1:6C
            X509v3 Authority Key Identifier:
                keyid:85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/323830343a353164633a313038303a3a2f34332d3433203d3e20323638343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51dc:1080::/43

    Signature Algorithm: sha256WithRSAEncryption
         88:53:6e:cc:4e:7a:f3:15:40:92:bf:d0:b7:67:e2:68:0b:cd:
         b2:c0:bd:07:c8:cd:ec:0a:fb:77:3e:08:10:fe:4b:39:2a:a6:
         1b:3e:f2:e4:83:80:94:9c:ad:88:97:38:ab:c5:bd:1c:58:5a:
         d4:49:68:3f:54:41:56:bd:a9:69:cf:d9:43:1e:17:6a:2b:5a:
         d0:8c:b1:41:2f:f1:fa:1f:b4:d2:bd:2b:b5:13:cd:9d:b3:20:
         e0:11:45:9e:93:42:f4:15:52:e1:b9:30:2c:be:0c:e5:03:b8:
         ca:7a:2c:0e:ea:58:9c:98:cb:b9:8c:46:83:1e:85:06:4a:37:
         67:de:8c:38:7a:48:2c:ff:b3:cc:a2:73:c7:24:7d:a7:4b:3a:
         1d:ef:45:b5:24:fd:69:c7:42:2f:14:d5:e9:92:67:46:89:74:
         e3:27:68:a2:47:54:1e:54:43:45:d5:74:4d:75:b8:e4:0f:91:
         16:7e:bf:8e:3d:aa:44:3d:e0:80:0b:cc:f5:4f:54:9c:88:2f:
         51:96:a9:a4:d1:f7:84:2b:43:1b:c3:9e:00:49:53:48:61:d0:
         d8:b1:fd:9d:d6:29:a6:49:8d:ed:5a:df:1b:32:77:e3:6c:24:
         53:88:06:12:a7:39:01:16:ab:f3:a7:9e:bf:a9:8a:4e:b2:d8:
         7b:12:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:06:49 2025 by rpki-client