Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/323830343a313231633a3a2f33332d3333203d3e20323633343537.roa
File:                     323830343a313231633a3a2f33332d3333203d3e20323633343537.roa (raw, json)
Hash identifier:          T1JnkN2tDA0++uP0Q71zhb19nUcqpe3dqp2i4Zyg9aQ=
Subject key identifier:   92:C0:3C:17:A8:B1:2C:FF:33:F4:AD:E2:61:1F:F7:A1:E4:7C:F7:09
Certificate issuer:       /CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
Certificate serial:       30AA5F84AE92383537E71D7875F5BD403D21E92B
Authority key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/323830343a313231633a3a2f33332d3333203d3e20323633343537.roa
Signing time:             Wed 29 Oct 2025 14:39:17 +0000
ROA not before:           Wed 29 Oct 2025 14:34:17 +0000
ROA not after:            Wed 28 Oct 2026 14:39:17 +0000
asID:                     263457
IP address blocks:        2804:121c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl
                          rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 22:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:aa:5f:84:ae:92:38:35:37:e7:1d:78:75:f5:bd:40:3d:21:e9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Validity
            Not Before: Oct 29 14:34:17 2025 GMT
            Not After : Oct 28 14:39:17 2026 GMT
        Subject: CN=92C03C17A8B12CFF33F4ADE2611FF7A1E47CF709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8c:0e:3b:53:a8:96:a1:94:d7:e6:9d:5e:b3:
                    a4:6e:3f:c2:f7:65:78:0f:38:89:98:31:5b:bf:5a:
                    1b:79:4c:b8:5a:0e:8c:35:7f:d0:a1:ae:12:9d:9f:
                    d1:1d:b4:fa:f0:e1:f4:51:32:ca:6f:4c:6c:0b:80:
                    cc:43:2a:e8:8a:aa:b4:23:1d:67:29:e0:1f:f9:45:
                    da:ef:d5:aa:90:01:f3:ab:b5:be:79:7a:a4:f1:e7:
                    32:b7:3c:ac:8c:c5:40:f1:c7:68:77:0f:3d:45:02:
                    72:fe:16:d6:ac:8a:7f:0d:e0:38:a3:c5:79:1a:34:
                    f2:66:e0:54:3b:2e:dd:cd:7e:9d:6b:ca:97:a1:c3:
                    a1:13:5b:8b:a4:c7:e1:93:89:05:68:8d:77:b2:24:
                    aa:18:ab:53:45:b4:98:54:55:ab:8a:82:0e:47:87:
                    81:42:4a:5a:05:4e:56:35:91:e5:16:6c:d1:e6:fa:
                    ad:70:27:b0:33:05:61:df:c8:88:5a:b8:59:af:c5:
                    16:71:91:8d:0a:28:6e:dd:0e:00:c8:fb:26:e2:7b:
                    08:98:38:c3:fd:5f:60:9d:44:8e:45:5c:c2:0e:51:
                    70:a8:bd:42:35:12:92:67:fb:d6:3c:a3:ae:47:44:
                    d4:64:25:8d:8d:6e:c9:e4:f1:ca:60:80:9e:c3:b6:
                    5f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C0:3C:17:A8:B1:2C:FF:33:F4:AD:E2:61:1F:F7:A1:E4:7C:F7:09
            X509v3 Authority Key Identifier:
                keyid:D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/323830343a313231633a3a2f33332d3333203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:121c::/33

    Signature Algorithm: sha256WithRSAEncryption
         58:cb:04:cc:e1:76:f7:05:78:78:07:ac:08:e5:7b:4f:c2:b8:
         c8:0a:24:38:e7:69:dd:2d:95:34:13:ad:83:39:5c:e1:f5:fe:
         00:45:78:e4:4c:27:9b:7d:6f:02:58:6d:64:bb:a5:14:c9:16:
         d5:b1:04:00:17:60:50:88:e9:37:26:e8:87:08:41:2f:8b:ea:
         9e:e2:dc:28:92:8a:ba:bf:30:7a:6b:96:5f:ab:44:99:18:5c:
         60:69:18:85:9a:27:ee:ce:ef:74:a2:5a:75:e5:a1:37:36:5c:
         f6:93:13:f8:2e:ed:0c:32:8d:2b:8d:41:5f:75:ee:70:b3:2f:
         ce:19:d5:36:d2:ad:aa:47:da:70:1f:34:35:85:90:bf:a8:99:
         82:19:8b:72:ed:6d:28:e9:08:8d:ea:25:60:5b:83:3a:22:8e:
         ac:48:54:1d:5a:b4:e5:46:ff:88:fa:6e:ca:f0:5d:c5:bd:aa:
         53:86:c4:ca:56:ac:aa:92:1c:b0:70:43:42:e0:80:48:32:04:
         37:17:7a:7d:27:69:fc:af:c3:c9:0a:80:70:23:35:13:5c:b5:
         bd:3d:41:5d:1b:18:4b:aa:64:ea:67:c8:b9:e5:83:fc:7b:15:
         55:f1:33:10:0b:34:f2:36:aa:43:be:0a:9f:fe:73:51:23:ad:
         ce:ee:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:30:14 2025 by rpki-client