Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a383030303a3a2f33332d3333203d3e20323638373131.roa
File:                     323830343a353939343a383030303a3a2f33332d3333203d3e20323638373131.roa (raw, json)
Hash identifier:          KM5aSx5PC29OUomjkhkMHUOKbBlHyGntr8N8CIzA06M=
Subject key identifier:   1E:DD:AF:F6:AA:49:94:83:D4:93:E6:18:12:E1:66:33:43:37:5A:A3
Certificate issuer:       /CN=C25265AD4C15AD12F33FD243385F457064C66247
Certificate serial:       4AC2EE6BB34D2CD3C5CA2E2EEFC538FD24982B9D
Authority key identifier: C2:52:65:AD:4C:15:AD:12:F3:3F:D2:43:38:5F:45:70:64:C6:62:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C25265AD4C15AD12F33FD243385F457064C66247.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a383030303a3a2f33332d3333203d3e20323638373131.roa
Signing time:             Thu 11 Sep 2025 12:46:24 +0000
ROA not before:           Thu 11 Sep 2025 12:41:24 +0000
ROA not after:            Thu 10 Sep 2026 12:46:24 +0000
asID:                     268711
IP address blocks:        2804:5994:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.crl
                          rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C25265AD4C15AD12F33FD243385F457064C66247.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 01:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c2:ee:6b:b3:4d:2c:d3:c5:ca:2e:2e:ef:c5:38:fd:24:98:2b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C25265AD4C15AD12F33FD243385F457064C66247
        Validity
            Not Before: Sep 11 12:41:24 2025 GMT
            Not After : Sep 10 12:46:24 2026 GMT
        Subject: CN=1EDDAFF6AA499483D493E61812E1663343375AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:49:47:f6:cc:0e:a0:10:b5:f6:49:73:fc:
                    25:61:b2:8e:42:85:8b:68:ad:19:f7:79:48:64:1a:
                    da:53:7b:fa:98:ed:f3:7c:d8:08:05:d8:06:47:e1:
                    1a:e2:c1:0f:eb:3c:fb:3d:10:e4:79:f7:a6:20:2c:
                    af:05:cb:cf:28:9b:ac:82:3c:59:03:72:f2:d4:6f:
                    c4:6d:a5:29:cc:1d:c0:20:ae:44:1a:42:02:c5:cb:
                    cb:1c:a6:99:0e:c3:05:f3:cd:9a:4d:57:d4:73:73:
                    db:ec:61:4d:23:d2:9e:f3:d6:fd:20:7d:d6:0d:25:
                    92:d6:51:72:54:fc:ef:f4:bb:0c:f9:1a:1d:28:32:
                    ef:cb:76:69:22:78:e2:67:af:80:6c:c2:80:28:20:
                    c9:8b:e5:17:b9:51:b1:15:3f:12:76:65:3e:d4:ad:
                    8a:d1:d5:a8:e5:bd:fb:e3:5a:79:d4:59:ce:0e:05:
                    d4:63:4d:cf:09:19:a5:92:8c:2b:40:92:b2:56:26:
                    54:79:c8:6a:d5:7a:01:02:d9:2b:c9:a2:ae:fd:e3:
                    a6:0e:56:63:0e:87:86:21:c4:ac:e0:83:4f:75:d6:
                    09:07:50:80:54:b5:5a:06:35:2a:dd:d4:f2:7c:cb:
                    24:b6:fa:ea:af:71:87:14:a7:c2:9a:f2:ce:66:74:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DD:AF:F6:AA:49:94:83:D4:93:E6:18:12:E1:66:33:43:37:5A:A3
            X509v3 Authority Key Identifier:
                keyid:C2:52:65:AD:4C:15:AD:12:F3:3F:D2:43:38:5F:45:70:64:C6:62:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C25265AD4C15AD12F33FD243385F457064C66247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a383030303a3a2f33332d3333203d3e20323638373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5994:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         56:6b:97:ec:91:37:9d:62:e5:dc:23:9e:de:60:57:74:37:bf:
         5e:9e:be:c1:11:24:58:36:2d:95:d9:cf:20:9b:38:dc:c8:ef:
         4d:38:7d:df:0a:9a:65:b8:b7:a9:5e:f5:c2:b5:60:82:8c:fb:
         7c:21:99:0a:80:15:b2:69:d1:10:dc:e6:64:88:e6:84:f5:a6:
         e8:f4:da:0c:6b:c6:97:d0:e6:c5:bc:54:5d:bb:f0:37:b6:d3:
         50:80:80:31:04:1b:30:33:cc:3b:98:9e:0e:d8:ad:8c:62:c6:
         fa:b9:0f:36:e4:5f:25:80:d9:8d:f0:a9:92:e4:d7:f1:09:d9:
         e9:c1:a7:06:05:a5:e6:26:e0:c0:f9:c4:59:2f:37:2c:0a:4a:
         fc:0b:2f:56:57:58:f5:ab:26:14:ae:2d:f1:e2:42:94:ce:a8:
         2a:27:02:61:bc:26:9c:ac:77:91:66:6e:8e:6f:08:82:94:65:
         8d:a7:43:59:11:85:01:9b:04:07:aa:69:53:c2:6c:29:d7:fb:
         e8:95:47:0b:f9:da:81:2b:89:fe:45:bf:1c:d0:a7:c6:78:c0:
         1f:60:08:b3:e9:36:58:4b:06:44:c0:d2:5a:1f:57:87:b6:9a:
         4c:b1:49:03:f0:11:87:87:8c:f8:0a:84:7f:a4:e5:ef:82:95:
         de:3a:22:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:29:46 2025 by rpki-client