Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/323830343a326137633a3a2f33322d313238203d3e20323634303735.roa
File:                     323830343a326137633a3a2f33322d313238203d3e20323634303735.roa (raw, json)
Hash identifier:          rYkZzYXGf9Tr5fqNBxmcs8bM8/fi0MS0RPYt0QlZ1jk=
Subject key identifier:   E3:00:CD:0C:7D:DD:C2:01:14:2C:1C:E3:BD:D4:7A:76:48:3B:2D:03
Certificate issuer:       /CN=54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB
Certificate serial:       01629394306CF5D5C765CC7BEF814E2BF7217A4B
Authority key identifier: 54:EC:70:51:1E:4F:9C:93:7D:DD:77:E9:BD:EC:EA:12:1D:DB:B1:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/323830343a326137633a3a2f33322d313238203d3e20323634303735.roa
Signing time:             Sat 01 Nov 2025 01:02:23 +0000
ROA not before:           Sat 01 Nov 2025 00:57:23 +0000
ROA not after:            Sat 31 Oct 2026 01:02:23 +0000
asID:                     264075
IP address blocks:        2804:2a7c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.crl
                          rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 00:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:62:93:94:30:6c:f5:d5:c7:65:cc:7b:ef:81:4e:2b:f7:21:7a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB
        Validity
            Not Before: Nov  1 00:57:23 2025 GMT
            Not After : Oct 31 01:02:23 2026 GMT
        Subject: CN=E300CD0C7DDDC201142C1CE3BDD47A76483B2D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:fa:1d:6f:7d:76:2a:36:53:3e:69:b3:32:
                    0f:56:f7:ea:fe:de:d7:ac:ee:f0:e3:25:b9:6e:77:
                    18:8c:8b:4c:6b:10:af:43:47:e5:33:ad:9d:64:15:
                    4a:79:30:82:d1:2e:23:b8:10:02:d3:f8:e5:e2:56:
                    08:fe:3e:f4:8a:ca:5c:b1:65:67:5f:71:c7:8b:a3:
                    b8:05:08:35:58:97:1c:d9:4c:db:08:3d:c8:16:d2:
                    2e:be:56:3d:fe:4c:71:80:f8:d2:b9:50:b2:6d:11:
                    79:83:e2:ed:80:13:d6:a8:63:cd:9b:d0:b2:7c:80:
                    fa:8b:82:6d:f5:3c:87:a9:fd:37:bf:d7:54:dc:60:
                    81:5a:a7:00:30:d2:6d:26:2b:9f:e8:92:3f:81:24:
                    ed:56:cb:99:98:dd:78:9a:4a:01:81:fc:7a:a3:8b:
                    05:cf:1c:07:31:09:db:8c:51:6b:d9:d3:31:16:5b:
                    f7:bd:c6:6e:32:fd:31:ed:6e:6b:3d:ab:78:01:23:
                    a9:12:9b:6a:84:cd:87:b2:91:11:fc:22:28:85:4d:
                    1b:28:57:49:45:92:c3:2d:e8:f9:e9:99:3a:ca:ca:
                    92:5b:86:8d:0c:57:7a:63:dc:a9:c1:81:da:87:c1:
                    56:b4:ec:48:c5:d5:d4:3e:c0:c4:f7:13:af:51:00:
                    e4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:CD:0C:7D:DD:C2:01:14:2C:1C:E3:BD:D4:7A:76:48:3B:2D:03
            X509v3 Authority Key Identifier:
                keyid:54:EC:70:51:1E:4F:9C:93:7D:DD:77:E9:BD:EC:EA:12:1D:DB:B1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/323830343a326137633a3a2f33322d313238203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:70:0c:b0:e2:cb:6a:4a:d1:62:91:76:72:48:4c:23:2d:33:
         f5:c4:a3:b9:e8:0f:44:ef:65:c0:23:06:dc:12:ae:d7:6d:7d:
         6b:ff:92:aa:2d:ed:8c:66:5d:b1:8e:a2:ad:67:e0:0b:08:5b:
         a5:86:a8:16:c3:9c:d1:ad:94:0e:6b:81:3f:8b:89:68:8e:c4:
         8c:7b:8a:a2:44:72:cf:01:d0:1a:b1:8f:91:af:61:f0:3c:d9:
         b6:b9:4e:47:0c:b7:74:dd:91:d6:ad:9c:49:38:06:98:f0:3b:
         a2:61:bb:d9:c3:4a:0f:bc:37:e3:46:fd:c4:aa:94:9e:39:4d:
         06:10:00:25:34:be:f8:be:dc:5b:d4:40:50:1b:d6:72:ef:31:
         00:23:fe:f8:39:c5:15:59:71:01:07:72:57:a6:0a:6e:d5:a3:
         3c:ff:45:56:b6:b1:03:c3:f6:a9:98:42:3b:f5:94:88:da:68:
         b9:28:e7:9c:36:e2:69:f6:6d:65:ec:e5:75:cb:ce:cc:5f:0b:
         94:64:46:3d:37:2c:cf:95:3a:d5:eb:4a:ca:e3:1d:7d:29:39:
         f9:bc:f5:2d:9d:1b:95:89:ab:13:a4:d7:72:8d:11:5e:69:1b:
         02:40:16:93:a5:68:9b:1c:46:d5:5e:b8:ac:cd:bc:f0:c9:3c:
         1b:a7:62:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:29:07 2025 by rpki-client