Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/323830343a373735383a3a2f33322d3438203d3e20323731313732.roa
File:                     323830343a373735383a3a2f33322d3438203d3e20323731313732.roa (raw, json)
Hash identifier:          BncfjCz3jfRxeLOxQU+LpOuKdL10p/TAeVKVovT9vA8=
Subject key identifier:   5B:E4:10:2D:5C:FE:13:BD:18:34:EB:F4:6C:BB:63:34:C0:01:BE:6A
Certificate issuer:       /CN=3E2F7B69AD237B6BCFBC1D895936507AC5481EA9
Certificate serial:       7777AF920E4886840FA4B8635A7BD4EC266CFBDF
Authority key identifier: 3E:2F:7B:69:AD:23:7B:6B:CF:BC:1D:89:59:36:50:7A:C5:48:1E:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2F7B69AD237B6BCFBC1D895936507AC5481EA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/323830343a373735383a3a2f33322d3438203d3e20323731313732.roa
Signing time:             Fri 24 Oct 2025 15:14:25 +0000
ROA not before:           Fri 24 Oct 2025 15:09:25 +0000
ROA not after:            Fri 23 Oct 2026 15:14:25 +0000
asID:                     271172
IP address blocks:        2804:7758::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/3E2F7B69AD237B6BCFBC1D895936507AC5481EA9.crl
                          rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/3E2F7B69AD237B6BCFBC1D895936507AC5481EA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2F7B69AD237B6BCFBC1D895936507AC5481EA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 08:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:77:af:92:0e:48:86:84:0f:a4:b8:63:5a:7b:d4:ec:26:6c:fb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2F7B69AD237B6BCFBC1D895936507AC5481EA9
        Validity
            Not Before: Oct 24 15:09:25 2025 GMT
            Not After : Oct 23 15:14:25 2026 GMT
        Subject: CN=5BE4102D5CFE13BD1834EBF46CBB6334C001BE6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:f6:f7:41:c6:7c:24:4a:2c:71:37:e9:ed:
                    89:e4:1f:92:fe:4b:df:bc:85:da:21:22:4b:15:9a:
                    d6:e0:a8:f3:8b:17:f9:ca:9b:3f:70:e2:44:b3:72:
                    ba:a5:5e:50:b0:ea:53:93:80:bc:cb:af:b3:45:b6:
                    0f:fe:76:6b:bc:11:53:e1:52:ef:68:12:f0:d6:fa:
                    bf:ea:fe:65:4f:e7:16:cb:05:20:eb:77:8c:bb:0c:
                    59:e1:49:c7:4a:b0:a6:3d:04:6b:dd:a5:a8:20:43:
                    58:6e:e9:b6:a6:2d:e2:f0:0f:84:61:fd:cd:e6:da:
                    03:64:ec:e3:c3:54:e4:d3:a3:26:0e:d4:0f:97:19:
                    c1:24:ce:87:4c:3c:72:86:2b:20:5d:c4:1d:40:e6:
                    5d:22:cb:73:01:68:f6:45:47:5a:0e:44:fb:25:ff:
                    d5:fb:8a:f1:e6:3f:d6:6a:db:0d:ac:c7:5a:96:36:
                    01:a7:5f:25:3d:66:e7:ec:54:8c:03:dc:69:00:4a:
                    24:90:83:06:3d:ab:9b:03:47:85:88:87:55:64:fc:
                    b9:7d:21:da:51:25:9f:2d:69:42:12:d2:cf:f0:73:
                    ae:eb:79:db:c6:74:2d:83:23:84:e8:61:67:2f:f8:
                    46:de:73:4e:79:66:0b:e1:5a:d5:d4:3a:a7:12:a6:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E4:10:2D:5C:FE:13:BD:18:34:EB:F4:6C:BB:63:34:C0:01:BE:6A
            X509v3 Authority Key Identifier:
                keyid:3E:2F:7B:69:AD:23:7B:6B:CF:BC:1D:89:59:36:50:7A:C5:48:1E:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/3E2F7B69AD237B6BCFBC1D895936507AC5481EA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2F7B69AD237B6BCFBC1D895936507AC5481EA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/323830343a373735383a3a2f33322d3438203d3e20323731313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7758::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:eb:aa:36:1d:b5:b6:4f:7c:65:0d:80:ba:7b:a9:db:8f:16:
         ba:78:dc:a4:e9:e9:9e:eb:71:ab:76:3a:bb:f4:a2:e8:be:51:
         9e:bc:ef:dc:07:32:c9:4d:98:5e:6b:95:9e:95:3f:c8:ba:66:
         9c:bf:9f:d0:53:31:34:58:f3:8c:0b:36:20:c5:05:6c:46:c8:
         e9:1d:18:5f:9b:2b:68:53:5e:45:b2:38:e4:65:e1:ca:3c:84:
         0e:1e:88:fd:eb:b8:cc:e8:aa:69:02:05:68:d0:f4:c8:9f:b5:
         98:9f:60:ea:df:f2:af:50:5f:a2:9e:66:85:e8:dc:58:5e:ab:
         46:ae:e2:9c:a3:be:5a:33:62:8e:43:a1:17:f0:99:87:ac:45:
         41:27:18:8f:c8:a3:48:90:f8:c6:23:3a:27:70:a1:43:2b:89:
         be:6b:70:bc:07:73:e2:0b:f9:77:be:41:7d:d1:2b:dc:30:ec:
         f5:d1:ad:c0:a2:92:36:7d:5b:d4:d6:f1:78:5f:50:1e:60:54:
         c2:10:d7:1a:17:bc:24:72:9f:e1:9e:d6:6d:70:62:2f:c9:e7:
         b7:40:80:3d:75:ee:42:01:f8:7a:fd:aa:f8:0c:eb:bb:88:6b:
         8c:6e:4e:eb:c1:a6:ce:f9:2b:2e:bc:13:84:be:6c:b2:1e:4b:
         c3:14:59:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:27:36 2025 by rpki-client