Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a343030303a3a2f33342d3334203d3e20323632383138.roa
File:                     323830343a333434633a343030303a3a2f33342d3334203d3e20323632383138.roa (raw, json)
Hash identifier:          n2glyWXnEK6g0o9ZNmVitaPWGFcqmb+iqpICG5u2MYY=
Subject key identifier:   14:98:BF:CE:A6:76:95:C7:15:4B:61:F2:40:3B:83:F1:BD:3B:54:76
Certificate issuer:       /CN=F8A5885612DC8F082016099D6959B32B90C3706E
Certificate serial:       4CE31F97E12AB883498DD42742544A08B4A90355
Authority key identifier: F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a343030303a3a2f33342d3334203d3e20323632383138.roa
Signing time:             Fri 08 Aug 2025 11:47:43 +0000
ROA not before:           Fri 08 Aug 2025 11:42:43 +0000
ROA not after:            Fri 07 Aug 2026 11:47:43 +0000
asID:                     262818
IP address blocks:        2804:344c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl
                          rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 08:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e3:1f:97:e1:2a:b8:83:49:8d:d4:27:42:54:4a:08:b4:a9:03:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A5885612DC8F082016099D6959B32B90C3706E
        Validity
            Not Before: Aug  8 11:42:43 2025 GMT
            Not After : Aug  7 11:47:43 2026 GMT
        Subject: CN=1498BFCEA67695C7154B61F2403B83F1BD3B5476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:9c:b1:20:56:74:ac:cc:0f:10:6a:a9:9a:
                    04:0d:cf:ae:21:e8:70:51:ba:f3:03:86:14:b4:ce:
                    92:85:c0:ba:5a:08:e6:8a:4d:5a:a0:61:3b:39:4b:
                    c4:28:6e:f5:e5:1d:0f:c1:c7:b0:ce:f8:c2:a6:f4:
                    df:0f:2e:ff:15:b4:40:96:85:c9:7b:8a:32:cc:55:
                    a2:c2:cc:fb:4c:57:fa:5e:9b:77:48:58:2c:b8:6a:
                    8a:8e:f7:3c:b7:40:c0:f2:0a:c4:08:20:51:b9:ab:
                    00:53:2e:c7:c1:cd:33:1a:aa:41:3d:bb:18:4d:b2:
                    53:33:c1:db:0d:75:ab:0a:38:4a:36:b5:b9:ea:32:
                    d7:94:2c:de:75:84:f4:78:7c:c2:90:c2:6f:6d:ec:
                    5e:de:d3:a4:c1:2f:9f:a7:83:68:f5:8b:d0:53:65:
                    f4:78:f6:8a:99:8b:cf:de:33:7e:cd:dd:67:5b:d0:
                    8e:87:35:d6:eb:2c:d1:78:47:52:0d:44:2b:4f:e0:
                    54:5a:17:65:6b:71:91:f6:a7:d7:86:7b:4e:6c:9e:
                    ce:04:50:c5:d9:c1:0d:65:d2:52:3f:ab:a7:dc:92:
                    5d:f1:7f:97:a7:fe:f5:1e:fa:4c:00:44:85:c3:eb:
                    1a:80:d1:27:b2:a8:7b:bb:a0:ae:7c:33:31:ab:05:
                    5d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:98:BF:CE:A6:76:95:C7:15:4B:61:F2:40:3B:83:F1:BD:3B:54:76
            X509v3 Authority Key Identifier:
                keyid:F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a343030303a3a2f33342d3334203d3e20323632383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:344c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:31:5e:f0:02:b2:8f:84:68:da:e6:c2:b1:14:56:76:a2:
         f5:45:fd:78:6b:ea:f7:76:e0:82:dc:d7:dd:3c:aa:03:1e:a1:
         0d:3e:86:cd:2d:ad:d5:96:c2:a9:47:e7:62:09:8a:c0:a1:02:
         19:68:2a:34:46:3b:e3:34:3e:23:60:3b:0a:de:9d:98:50:41:
         6a:6b:2b:79:a9:2e:c6:08:0b:2a:a9:2c:3c:1e:ec:cb:01:8e:
         07:2d:c9:76:53:87:67:4e:58:e7:fe:41:fd:a6:99:ab:44:dc:
         da:39:bb:0f:77:0e:22:28:3c:19:92:db:46:9f:2f:3b:9c:1f:
         6d:d0:88:16:67:72:b4:c4:f0:fa:3b:33:a7:d2:2a:90:af:64:
         e0:47:4f:34:c9:34:bf:00:65:0e:77:1f:66:82:cc:09:54:ed:
         b0:e1:a5:02:66:d3:18:6d:c7:e4:68:ed:62:8a:e0:4b:d3:fe:
         78:01:d6:4d:c4:c4:3a:96:31:87:0c:81:d8:60:94:9e:6d:29:
         03:89:e7:4e:55:bb:dd:31:94:7f:a5:f1:a9:10:9a:59:77:c9:
         b7:61:53:60:87:54:d1:53:3a:bf:50:3d:0f:70:cd:33:ee:6c:
         7b:53:30:e7:dc:0d:37:fe:f4:ba:f7:64:44:78:86:03:9f:55:
         8d:c8:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 18:32:02 2025 by rpki-client