Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/323830343a353335343a3a2f33322d313238203d3e20323638353737.roa
File:                     323830343a353335343a3a2f33322d313238203d3e20323638353737.roa (raw, json)
Hash identifier:          YtjExlRCeQiklYASsF957nvQs5ELrH3akabafd0zgEA=
Subject key identifier:   CC:29:01:9A:65:19:98:41:10:2F:B6:B6:1E:C5:4B:CD:7E:32:82:35
Certificate issuer:       /CN=B84256C5C6B51BF418CE0B38CE27FC86A6A8DAA0
Certificate serial:       3AB0805D68C620FE5F8378F5FF683B5200592A6C
Authority key identifier: B8:42:56:C5:C6:B5:1B:F4:18:CE:0B:38:CE:27:FC:86:A6:A8:DA:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B84256C5C6B51BF418CE0B38CE27FC86A6A8DAA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/323830343a353335343a3a2f33322d313238203d3e20323638353737.roa
Signing time:             Thu 03 Jul 2025 15:37:28 +0000
ROA not before:           Thu 03 Jul 2025 15:32:28 +0000
ROA not after:            Thu 02 Jul 2026 15:37:28 +0000
asID:                     268577
IP address blocks:        2804:5354::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/B84256C5C6B51BF418CE0B38CE27FC86A6A8DAA0.crl
                          rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/B84256C5C6B51BF418CE0B38CE27FC86A6A8DAA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B84256C5C6B51BF418CE0B38CE27FC86A6A8DAA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 08:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b0:80:5d:68:c6:20:fe:5f:83:78:f5:ff:68:3b:52:00:59:2a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B84256C5C6B51BF418CE0B38CE27FC86A6A8DAA0
        Validity
            Not Before: Jul  3 15:32:28 2025 GMT
            Not After : Jul  2 15:37:28 2026 GMT
        Subject: CN=CC29019A65199841102FB6B61EC54BCD7E328235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:02:3c:37:d3:61:9f:69:a7:5d:4a:73:2f:
                    b9:85:23:b2:7e:d5:b2:60:2b:7e:57:7c:85:97:6b:
                    45:a4:6b:24:ad:76:74:0d:cb:a7:46:06:9a:00:68:
                    8a:41:4a:cc:78:09:b4:e9:5f:b2:09:32:24:be:b8:
                    4d:8c:3a:9e:09:cc:41:f1:d0:cb:00:66:98:ea:b2:
                    81:89:59:85:5e:2b:1e:b8:65:48:5a:cc:45:75:e7:
                    ea:15:88:cb:ca:33:d5:0d:06:e6:37:16:c1:67:36:
                    40:71:a6:e8:a5:2a:a4:d9:df:53:67:ed:85:11:b9:
                    92:09:0c:10:5e:1f:df:c7:71:30:6a:f7:19:70:80:
                    b3:7b:ed:34:a2:ea:5d:80:ba:b4:1e:8b:d9:d2:84:
                    6f:3e:b5:16:72:0d:e7:39:89:d3:a1:f7:b9:53:62:
                    5b:f1:b5:af:04:64:7f:51:85:d6:28:9c:16:52:e7:
                    1e:04:e9:bf:98:78:21:7e:83:a7:b7:08:59:6a:4e:
                    03:5a:c1:a2:ce:b8:88:d0:1b:a8:a8:f9:d1:c7:b7:
                    54:f5:ec:ac:58:b2:74:4b:1e:da:af:3a:f8:90:d5:
                    9f:b2:a9:f5:3d:7b:24:9b:b3:d3:82:ba:6d:12:8c:
                    50:de:bf:fa:54:b0:cc:0b:a4:95:76:98:42:4c:a6:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:29:01:9A:65:19:98:41:10:2F:B6:B6:1E:C5:4B:CD:7E:32:82:35
            X509v3 Authority Key Identifier:
                keyid:B8:42:56:C5:C6:B5:1B:F4:18:CE:0B:38:CE:27:FC:86:A6:A8:DA:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/B84256C5C6B51BF418CE0B38CE27FC86A6A8DAA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B84256C5C6B51BF418CE0B38CE27FC86A6A8DAA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/323830343a353335343a3a2f33322d313238203d3e20323638353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5354::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:c8:63:91:24:f0:8c:0b:1e:e2:53:6a:78:e8:71:ee:e1:71:
         23:35:bc:36:36:92:08:c9:ef:56:f8:26:a2:5d:0b:99:d4:d5:
         58:35:07:7c:3f:4c:6e:28:fd:c1:e1:90:c9:24:b0:c9:3c:db:
         04:50:f1:3b:35:15:1e:da:8b:43:98:88:6e:f4:ef:92:8e:ae:
         04:f5:fd:69:41:5f:56:5a:70:75:98:7e:49:b2:5c:a0:b8:04:
         f6:6f:db:73:53:6e:b2:6d:16:d6:a4:e1:ee:ec:51:79:33:a8:
         2a:44:ca:d1:0b:7e:8b:19:c1:16:82:d3:dc:05:ce:5b:55:56:
         1d:58:07:2b:9f:f3:5b:d0:6e:d0:5d:c1:cb:81:65:65:ad:c5:
         0b:3e:32:08:6c:a3:05:c5:64:5b:1e:0f:fe:63:44:11:11:dc:
         9e:af:bb:b6:0a:db:f1:5a:3d:a9:8c:8c:d1:0c:b0:43:5a:57:
         36:a1:6c:dd:7e:ec:86:89:46:9b:82:47:2b:5f:63:2c:92:8d:
         cf:19:56:1d:4f:11:ec:dc:41:a4:0f:d1:55:36:ff:81:cb:ba:
         a8:70:f9:5a:92:d4:ff:d7:d2:53:53:fc:ae:f8:8f:c4:30:c9:
         93:bd:2a:7b:4a:c6:e0:3e:41:7d:94:06:84:9a:4b:36:d1:de:
         7f:45:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:50:56 2025 by rpki-client