Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33322d313238203d3e20323638393933.roa
File:                     323830343a356463633a3a2f33322d313238203d3e20323638393933.roa (raw, json)
Hash identifier:          whp/BD+wi9XYnIXQaoAxbgPYxul9G7VU+PRWIyVk3sY=
Subject key identifier:   C3:BD:40:EA:12:6A:CA:8D:DC:76:03:55:3C:91:10:2B:9A:75:A8:64
Certificate issuer:       /CN=DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035
Certificate serial:       39AB0D7AC7DD132465A1FF0A308966A99492D361
Authority key identifier: DE:4E:C8:FB:8E:4B:9C:58:3B:69:BD:B5:0F:52:7D:D6:B5:9E:80:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33322d313238203d3e20323638393933.roa
Signing time:             Thu 14 Aug 2025 12:44:12 +0000
ROA not before:           Thu 14 Aug 2025 12:39:12 +0000
ROA not after:            Thu 13 Aug 2026 12:44:12 +0000
asID:                     268993
IP address blocks:        2804:5dcc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.crl
                          rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ab:0d:7a:c7:dd:13:24:65:a1:ff:0a:30:89:66:a9:94:92:d3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035
        Validity
            Not Before: Aug 14 12:39:12 2025 GMT
            Not After : Aug 13 12:44:12 2026 GMT
        Subject: CN=C3BD40EA126ACA8DDC7603553C91102B9A75A864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:e2:25:39:02:e2:90:49:79:a7:f0:74:f6:
                    89:59:f3:aa:03:c9:5e:05:30:10:c6:73:40:96:e2:
                    34:7a:b3:7e:01:ce:fa:c5:eb:90:63:c1:3e:78:28:
                    64:89:a8:84:86:98:ab:28:9d:20:51:ef:ab:0f:12:
                    0d:2b:1c:6e:57:4e:44:27:0d:0a:03:b9:51:47:31:
                    f2:be:8e:2a:04:49:36:29:0d:94:fe:63:3c:e3:2f:
                    59:58:e9:95:7d:73:19:aa:e3:72:37:aa:6f:39:07:
                    91:16:37:0b:aa:c6:19:5c:7c:49:26:2f:b5:e5:12:
                    e2:da:f8:38:27:47:ae:de:bf:fd:8a:85:82:9b:60:
                    db:9b:1b:27:de:12:95:70:09:3f:52:d7:c3:90:23:
                    c7:b5:83:0c:12:cc:81:d1:87:65:f5:38:77:c8:d4:
                    d3:ff:e9:c3:48:fa:79:4f:44:24:b6:40:22:52:a6:
                    cc:9f:6f:1f:66:b2:ae:e5:de:32:9d:ef:a8:a8:a0:
                    fe:08:9c:83:c8:70:22:a8:bf:95:38:8b:2e:25:2f:
                    cd:80:ff:52:18:92:27:50:e0:ab:67:f3:10:33:c1:
                    77:2f:0f:d5:d4:9c:17:46:4d:21:f0:86:c8:20:e6:
                    d2:8b:22:68:5d:30:cf:1d:0a:a5:34:a3:f5:0f:01:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BD:40:EA:12:6A:CA:8D:DC:76:03:55:3C:91:10:2B:9A:75:A8:64
            X509v3 Authority Key Identifier:
                keyid:DE:4E:C8:FB:8E:4B:9C:58:3B:69:BD:B5:0F:52:7D:D6:B5:9E:80:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33322d313238203d3e20323638393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5dcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:9b:e8:c6:8f:9a:54:88:a6:69:f8:bd:91:8f:9b:b8:25:0e:
         88:b3:27:88:b5:aa:4d:ae:21:f0:31:a1:0c:ce:b1:bd:31:4e:
         cb:f0:03:4a:64:7b:bb:78:f4:61:7e:07:ee:5c:23:01:35:1f:
         77:a9:05:31:45:4b:ad:16:e8:7a:7a:95:00:c9:45:2f:82:3f:
         fb:6b:48:a2:17:4a:9a:03:df:47:9d:f2:f1:06:4c:5a:ae:4f:
         b7:7f:6f:a6:cd:27:ec:52:c6:f1:24:e4:b0:ae:3e:cc:b9:d0:
         8f:3b:ff:7f:6c:14:8f:36:fa:65:6d:e2:cb:04:09:fe:a1:b2:
         ea:8b:eb:72:59:4b:03:4f:35:1f:40:3e:7d:50:a7:75:55:be:
         97:ee:0d:a3:ef:75:02:c3:d7:dd:ab:eb:84:cf:1e:ed:89:d4:
         bd:e3:2d:75:e8:6a:2b:b9:67:5f:77:e8:08:c4:31:32:80:35:
         32:39:1d:ca:fc:26:08:9f:13:74:98:f2:8d:17:a8:d3:42:95:
         33:6f:81:01:8d:a9:58:fd:7f:a1:4a:7c:b2:49:21:89:68:d7:
         94:a0:2d:e1:df:88:e9:18:76:28:c1:b5:f7:8d:08:9a:19:c4:
         b1:77:a3:74:de:3a:fd:7b:b7:89:ea:63:c5:10:ef:34:bd:46:
         14:46:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 22:34:38 2025 by rpki-client