Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/323830343a353734303a3a2f33322d3332203d3e20323638303534.roa
File:                     323830343a353734303a3a2f33322d3332203d3e20323638303534.roa (raw, json)
Hash identifier:          IBMwaLbVgJj1ptbobL2FUZRGwdEd7GdyE3pePp3m21U=
Subject key identifier:   27:75:32:C9:5E:95:4E:06:54:3C:81:10:77:C7:32:48:31:BC:2C:0C
Certificate issuer:       /CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
Certificate serial:       5B036416E1EDC8B3E057F66506C0A6DD22B93C4C
Authority key identifier: A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/323830343a353734303a3a2f33322d3332203d3e20323638303534.roa
Signing time:             Sat 13 Sep 2025 15:09:11 +0000
ROA not before:           Sat 13 Sep 2025 15:04:11 +0000
ROA not after:            Sat 12 Sep 2026 15:09:11 +0000
asID:                     268054
IP address blocks:        2804:5740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.crl
                          rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:03:64:16:e1:ed:c8:b3:e0:57:f6:65:06:c0:a6:dd:22:b9:3c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
        Validity
            Not Before: Sep 13 15:04:11 2025 GMT
            Not After : Sep 12 15:09:11 2026 GMT
        Subject: CN=277532C95E954E06543C811077C7324831BC2C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:00:32:0d:a1:c8:fa:39:88:fb:ac:4c:ea:
                    fa:12:20:1a:b9:f9:37:2c:61:f8:74:b3:42:db:ac:
                    b1:ee:9e:93:d2:6d:8c:2d:dc:fb:7c:d6:b6:0b:1b:
                    6c:5a:4a:f2:ea:4b:48:e9:bb:2d:f2:7b:da:a1:77:
                    28:60:47:0f:f4:7c:2c:09:5a:15:51:87:00:a6:9e:
                    b7:df:a3:11:63:e5:ec:ab:9b:80:df:21:a5:50:27:
                    7d:16:9a:66:f4:0a:ab:4e:2e:b9:77:af:49:bc:b8:
                    0b:c2:0d:c9:c4:77:a0:86:d9:16:ed:58:d1:fe:1e:
                    c5:50:66:ad:32:99:ff:c4:47:d1:19:94:c6:96:85:
                    cb:3b:68:5a:f1:2b:ce:03:8b:53:c6:e9:ce:65:05:
                    16:73:ad:87:02:29:e3:f4:93:b1:df:7c:7c:fd:25:
                    16:ed:29:9b:01:c7:a7:db:51:eb:45:28:cd:9d:44:
                    48:3e:74:17:5d:e3:21:a3:d4:19:ca:be:de:2d:b0:
                    8f:5b:e7:41:65:34:ef:6b:0e:04:6d:0a:2d:0a:c2:
                    0a:b4:0b:5e:11:79:78:ae:64:19:2f:7b:ac:df:d1:
                    0a:bf:93:37:33:5e:15:7e:11:37:62:48:be:37:a4:
                    23:f4:9a:c4:a3:32:22:5b:bf:f7:43:f3:56:57:6b:
                    21:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:75:32:C9:5E:95:4E:06:54:3C:81:10:77:C7:32:48:31:BC:2C:0C
            X509v3 Authority Key Identifier:
                keyid:A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/323830343a353734303a3a2f33322d3332203d3e20323638303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5740::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:15:ef:5c:71:2e:92:f1:66:66:55:c1:77:66:95:df:88:84:
         3c:d2:78:fd:52:9d:de:ad:df:eb:70:84:72:44:65:f8:9c:75:
         7b:46:7d:86:cc:98:0a:4f:46:0c:33:18:c0:80:3e:c0:df:d4:
         bf:7a:9d:41:9d:d5:9f:ac:db:ff:c8:4e:ac:ae:d6:4f:48:f8:
         b1:fb:b3:31:ad:54:26:a1:a2:2d:3e:34:92:c8:c0:6f:5e:25:
         aa:41:0a:ed:dd:8d:7e:27:66:81:c4:93:19:5d:02:28:20:cc:
         13:21:19:b2:f6:7b:23:dd:88:f9:f8:6b:6d:43:05:da:fd:00:
         af:87:02:bf:58:3e:d8:3d:c0:2f:d6:50:91:84:14:4f:85:1b:
         86:d9:16:d0:83:f4:d7:e8:ba:39:b8:83:9b:da:d9:c1:3c:6a:
         ff:fa:35:a3:a4:04:4b:40:fd:bf:40:1a:67:70:71:b1:97:2e:
         54:ce:75:9a:1c:16:4b:e1:89:a3:30:88:2a:ab:dc:97:54:67:
         2b:db:62:3b:d4:4c:cb:12:58:b1:ba:43:bb:76:0a:f6:65:a9:
         9f:60:10:95:f5:53:94:59:08:64:a2:4f:83:43:32:0a:8e:15:
         c7:5e:5d:c0:04:b4:a1:21:4c:ec:53:fd:a4:37:68:3f:86:f4:
         29:07:b1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:23:04 2025 by rpki-client