Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/323830343a346230343a3a2f33322d313238203d3e20323637323738.roa
File:                     323830343a346230343a3a2f33322d313238203d3e20323637323738.roa (raw, json)
Hash identifier:          upgg6OxFZop0MpSK0U1gxuhEZga+aIKZouSOjtgmVA8=
Subject key identifier:   90:6C:46:75:9F:53:13:CD:E7:1E:95:A2:E8:AD:A9:55:AA:EA:C9:47
Certificate issuer:       /CN=EC7C263B7E9D500AF95A3CA431658BD7A0F40A46
Certificate serial:       4EB0437CF3D70068EDC53E37377165FD8FBE836E
Authority key identifier: EC:7C:26:3B:7E:9D:50:0A:F9:5A:3C:A4:31:65:8B:D7:A0:F4:0A:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC7C263B7E9D500AF95A3CA431658BD7A0F40A46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/323830343a346230343a3a2f33322d313238203d3e20323637323738.roa
Signing time:             Tue 28 Oct 2025 13:10:09 +0000
ROA not before:           Tue 28 Oct 2025 13:05:09 +0000
ROA not after:            Tue 27 Oct 2026 13:10:09 +0000
asID:                     267278
IP address blocks:        2804:4b04::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/EC7C263B7E9D500AF95A3CA431658BD7A0F40A46.crl
                          rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/EC7C263B7E9D500AF95A3CA431658BD7A0F40A46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC7C263B7E9D500AF95A3CA431658BD7A0F40A46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 11:29:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b0:43:7c:f3:d7:00:68:ed:c5:3e:37:37:71:65:fd:8f:be:83:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC7C263B7E9D500AF95A3CA431658BD7A0F40A46
        Validity
            Not Before: Oct 28 13:05:09 2025 GMT
            Not After : Oct 27 13:10:09 2026 GMT
        Subject: CN=906C46759F5313CDE71E95A2E8ADA955AAEAC947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:e9:a1:19:76:33:2f:8e:7a:83:c7:44:99:
                    ff:0d:98:2a:ef:a0:ac:c3:da:8b:eb:ad:fb:9b:71:
                    ae:c5:2d:3b:bf:42:f8:43:bf:02:58:ff:a8:53:69:
                    05:33:d2:52:8d:20:74:24:48:13:f1:bd:3d:21:d7:
                    de:0c:7d:26:c1:1c:41:76:7f:be:17:ca:6d:5c:16:
                    f4:c4:e2:7c:0e:7a:df:5c:9f:f4:5e:f3:d1:5e:d4:
                    49:0e:79:63:60:9e:71:54:61:2e:a3:c9:b7:6f:65:
                    6a:93:53:45:40:88:bd:d8:50:46:ec:23:de:d3:59:
                    b3:03:77:cd:17:98:d2:6a:c6:ae:3f:db:d9:5d:da:
                    6b:05:ed:74:68:28:7d:a1:d4:4e:59:c3:46:5c:90:
                    b0:26:9f:b4:94:df:8e:97:69:d6:06:09:0a:71:62:
                    c0:1e:85:8f:3d:9a:51:8f:77:23:5f:3b:f2:7a:33:
                    f7:ab:84:fe:b6:19:10:94:a5:bb:89:04:cc:99:97:
                    90:81:48:2e:eb:37:e3:02:a6:d5:c0:75:8b:1e:7a:
                    86:1b:08:62:89:a7:f2:4f:43:48:60:7b:61:58:ee:
                    ba:68:c7:c6:79:17:da:90:1c:ab:33:66:ed:97:9b:
                    84:59:f4:d4:47:76:05:7c:81:a7:f0:b6:95:2e:3c:
                    9b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6C:46:75:9F:53:13:CD:E7:1E:95:A2:E8:AD:A9:55:AA:EA:C9:47
            X509v3 Authority Key Identifier:
                keyid:EC:7C:26:3B:7E:9D:50:0A:F9:5A:3C:A4:31:65:8B:D7:A0:F4:0A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/EC7C263B7E9D500AF95A3CA431658BD7A0F40A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC7C263B7E9D500AF95A3CA431658BD7A0F40A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/323830343a346230343a3a2f33322d313238203d3e20323637323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b04::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:e2:1f:26:4e:cb:a1:1c:ae:34:e9:fe:7a:f3:73:a5:8e:fc:
         ef:0e:a9:89:11:f1:10:dd:19:55:f2:5b:5d:18:47:8b:ce:61:
         39:c5:67:cd:ba:6b:97:46:2e:5e:44:96:47:21:24:cf:62:3c:
         f5:00:79:d8:f0:84:9b:36:e2:55:c6:25:d7:55:c5:5c:a8:2b:
         96:2a:a5:85:c3:51:33:a1:23:4f:06:33:07:ee:80:c3:ea:3a:
         20:dc:b6:23:2a:f0:e6:18:8a:39:43:57:99:c1:d9:4d:34:04:
         33:ba:0b:94:d9:6a:99:4d:37:73:a4:45:9c:e0:c3:c1:d1:a7:
         c0:16:08:92:9f:e1:6c:8e:1f:a2:9f:96:26:d7:97:38:dc:f4:
         39:7f:9b:ff:68:e1:a2:6f:f3:44:d5:29:e0:15:83:cc:f7:9e:
         b3:7c:ae:87:d7:11:ee:14:94:fe:5b:12:8e:d0:9d:5e:a0:cd:
         a2:79:57:1b:6c:2c:ac:99:a2:71:05:ec:f7:e9:27:62:a6:0d:
         99:9e:01:aa:13:a1:ab:d3:64:9d:e8:ac:2e:b1:10:10:b6:25:
         4b:f3:d9:ee:0b:58:0f:f3:27:ed:8d:be:4e:05:03:f2:7c:e9:
         04:43:a7:74:72:59:3a:b9:d7:62:28:84:6f:e0:74:1f:96:42:
         2a:92:9b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:14:10 2025 by rpki-client