Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/46mfX45mtkeg9ESxG9Ep6ovaEnuMcQNdqpdceRkbzwVY/0/323830343a376563303a3a2f33322d313238203d3e20323731363435.roa
File:                     323830343a376563303a3a2f33322d313238203d3e20323731363435.roa (raw, json)
Hash identifier:          /ox8M4YIwv8RFh2WBZ5L0ENcqaeprtgomnxQ1Erpuf4=
Subject key identifier:   27:AA:BA:C9:28:F2:C0:BB:8A:EF:F0:DA:1D:DF:95:22:2A:97:F3:F5
Certificate issuer:       /CN=7ED75F310E76EF5A2CE0DFE4DDE942D9A776B9D6
Certificate serial:       4843C269AB0195C183EC81F212D6F9FE2B5522C5
Authority key identifier: 7E:D7:5F:31:0E:76:EF:5A:2C:E0:DF:E4:DD:E9:42:D9:A7:76:B9:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ED75F310E76EF5A2CE0DFE4DDE942D9A776B9D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46mfX45mtkeg9ESxG9Ep6ovaEnuMcQNdqpdceRkbzwVY/0/323830343a376563303a3a2f33322d313238203d3e20323731363435.roa
Signing time:             Sun 07 Sep 2025 22:54:03 +0000
ROA not before:           Sun 07 Sep 2025 22:49:03 +0000
ROA not after:            Sun 06 Sep 2026 22:54:03 +0000
asID:                     271645
IP address blocks:        2804:7ec0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/46mfX45mtkeg9ESxG9Ep6ovaEnuMcQNdqpdceRkbzwVY/0/7ED75F310E76EF5A2CE0DFE4DDE942D9A776B9D6.crl
                          rsync://rpki-repo.registro.br/repo/46mfX45mtkeg9ESxG9Ep6ovaEnuMcQNdqpdceRkbzwVY/0/7ED75F310E76EF5A2CE0DFE4DDE942D9A776B9D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ED75F310E76EF5A2CE0DFE4DDE942D9A776B9D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:43:c2:69:ab:01:95:c1:83:ec:81:f2:12:d6:f9:fe:2b:55:22:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED75F310E76EF5A2CE0DFE4DDE942D9A776B9D6
        Validity
            Not Before: Sep  7 22:49:03 2025 GMT
            Not After : Sep  6 22:54:03 2026 GMT
        Subject: CN=27AABAC928F2C0BB8AEFF0DA1DDF95222A97F3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:af:63:56:a1:df:ed:ca:2a:bd:4b:67:82:
                    bd:6f:1f:e1:cc:1f:fa:a7:64:89:20:14:92:76:eb:
                    64:28:9b:6d:10:06:16:bd:95:29:89:8a:75:ee:be:
                    da:ae:60:d8:c2:86:d5:c7:75:ae:da:eb:69:42:53:
                    2f:d6:79:53:6e:2c:8e:4b:9a:43:b1:ff:a5:c1:1a:
                    5c:db:13:5e:48:44:18:db:d2:ef:6b:99:27:99:87:
                    4d:a7:b5:ad:c0:24:c3:33:75:87:c9:ab:0f:22:16:
                    00:ff:57:4e:1d:d7:a2:6c:e0:ee:0c:74:53:4a:45:
                    49:4d:d5:00:23:cf:74:c7:f0:f3:ff:27:bf:23:0d:
                    5a:ab:bd:a3:ee:53:88:02:d6:21:c7:9c:e3:09:48:
                    ca:dd:64:1c:66:f1:64:05:d9:0b:df:17:d7:55:c1:
                    c4:17:06:d3:3e:a8:08:3d:ca:d9:e9:e4:fe:a7:a1:
                    fe:0d:26:91:3e:1c:5c:64:9d:9e:f6:02:30:41:df:
                    d9:4f:34:09:f0:a1:0c:27:5c:a3:e4:5d:b3:d3:94:
                    f9:ea:fc:e2:0b:e8:16:fa:d7:b7:d3:e9:4e:2c:01:
                    95:6c:fc:a6:ed:3b:8b:87:1c:22:d2:06:8f:a6:74:
                    e8:4c:89:45:a1:5b:d7:b0:1b:7d:12:09:26:b6:82:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AA:BA:C9:28:F2:C0:BB:8A:EF:F0:DA:1D:DF:95:22:2A:97:F3:F5
            X509v3 Authority Key Identifier:
                keyid:7E:D7:5F:31:0E:76:EF:5A:2C:E0:DF:E4:DD:E9:42:D9:A7:76:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46mfX45mtkeg9ESxG9Ep6ovaEnuMcQNdqpdceRkbzwVY/0/7ED75F310E76EF5A2CE0DFE4DDE942D9A776B9D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ED75F310E76EF5A2CE0DFE4DDE942D9A776B9D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46mfX45mtkeg9ESxG9Ep6ovaEnuMcQNdqpdceRkbzwVY/0/323830343a376563303a3a2f33322d313238203d3e20323731363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:b2:d3:24:48:a5:51:34:c8:cf:d1:93:81:17:c4:0e:8e:7b:
         49:19:20:ad:cf:85:13:05:03:96:3d:63:dc:56:87:fc:b1:63:
         60:d1:65:ed:26:73:72:f9:f5:ae:3c:03:20:6c:6d:d9:9a:55:
         ac:84:25:2e:e7:17:b7:03:cf:cb:15:d8:fa:03:50:3d:85:a8:
         b6:a5:2a:32:48:e6:12:dd:86:ca:47:b0:87:ca:e2:6b:09:54:
         b9:a2:2c:5b:2e:b0:5f:fc:00:c6:40:e6:3a:78:28:fd:73:4c:
         c5:6c:d7:5a:b9:90:aa:2e:47:dd:a6:1e:5b:75:40:da:2b:ac:
         d9:d7:69:d7:53:ad:0c:f4:91:f6:c7:d3:d1:01:f6:34:b2:68:
         95:08:96:fb:98:7b:f4:02:dc:d5:81:dd:65:2b:4d:9d:99:bb:
         54:a8:37:bf:b0:fe:f3:b3:3f:94:58:f5:2f:fb:2d:72:fd:73:
         3e:cc:39:0d:bd:96:ba:ef:47:af:95:9f:9c:17:0d:33:ec:17:
         5b:c1:97:52:49:66:97:e3:55:b6:a4:a9:98:f0:62:8d:b1:08:
         60:c7:16:28:e9:15:87:1b:0c:11:6e:a9:60:20:40:e8:91:f1:
         14:92:fe:f5:53:b3:f8:ca:53:16:00:27:4d:3c:ae:45:d7:b9:
         d7:39:7f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:49:10 2025 by rpki-client