Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/323830343a3239383a3a2f33322d3438203d3e203533303837.roa
File:                     323830343a3239383a3a2f33322d3438203d3e203533303837.roa (raw, json)
Hash identifier:          dtwgWeHY8+R3zDh6n2MEwyEwvtLq5vm+epApsEFN1zI=
Subject key identifier:   04:44:C8:9C:7D:18:D5:74:99:02:D5:A9:DB:CB:26:85:9E:84:84:16
Certificate issuer:       /CN=E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F
Certificate serial:       38741F53C0E30056F9CE5F6FF79290D28CFE3B44
Authority key identifier: E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/323830343a3239383a3a2f33322d3438203d3e203533303837.roa
Signing time:             Wed 17 Sep 2025 20:25:02 +0000
ROA not before:           Wed 17 Sep 2025 20:20:02 +0000
ROA not after:            Wed 16 Sep 2026 20:25:02 +0000
asID:                     53087
IP address blocks:        2804:298::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.crl
                          rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:74:1f:53:c0:e3:00:56:f9:ce:5f:6f:f7:92:90:d2:8c:fe:3b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F
        Validity
            Not Before: Sep 17 20:20:02 2025 GMT
            Not After : Sep 16 20:25:02 2026 GMT
        Subject: CN=0444C89C7D18D5749902D5A9DBCB26859E848416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f8:c2:2b:6e:1e:7a:ab:64:51:a8:ad:3d:10:
                    9e:f4:35:e3:00:12:c1:74:f1:10:e2:21:e5:2e:55:
                    41:b6:f2:e8:80:b5:7d:43:17:e5:31:27:ab:88:6f:
                    b1:d6:77:04:c5:25:0c:52:30:69:61:4c:11:08:0e:
                    ac:f6:78:be:4f:3b:bb:a3:8a:e5:2c:d9:8d:67:58:
                    13:f1:8b:0d:6a:8b:05:50:15:a0:0a:dc:49:5e:82:
                    13:29:98:c4:d3:75:ec:9e:65:a6:fc:d8:8b:86:c3:
                    fc:b6:c6:47:fc:5f:a8:6d:e1:15:e5:72:f7:7c:19:
                    02:80:9f:5c:cb:69:38:7d:23:f8:8b:20:5c:29:02:
                    f6:23:e2:47:28:e8:37:bd:72:64:73:ef:85:af:f5:
                    65:37:53:e0:f3:70:54:41:80:11:c0:43:5a:e6:db:
                    da:bb:58:f2:c7:7d:0e:7f:29:92:e9:1f:22:6e:1b:
                    2e:96:b6:f4:3b:91:86:b6:14:d9:5a:c0:04:4d:4f:
                    e2:ab:a5:59:24:4f:49:cb:a0:42:a1:2b:57:68:9d:
                    a3:dc:88:f1:50:a2:64:f4:c8:1a:63:7c:cc:ab:56:
                    28:71:a8:b4:a0:00:b6:40:c9:9d:35:85:6f:24:8b:
                    b3:95:3c:6f:a8:4c:10:19:18:2e:6e:c1:24:52:dc:
                    52:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:44:C8:9C:7D:18:D5:74:99:02:D5:A9:DB:CB:26:85:9E:84:84:16
            X509v3 Authority Key Identifier:
                keyid:E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/323830343a3239383a3a2f33322d3438203d3e203533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:298::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:7b:3c:a1:22:7d:29:2d:f0:ef:26:21:4f:6b:a6:3c:fb:e9:
         ae:e9:15:68:85:66:81:c8:7c:4a:1a:5b:3a:75:a3:d3:ec:ed:
         d3:17:b2:64:48:3b:9c:e5:2d:8b:8d:2b:38:f1:2f:24:f1:4a:
         5f:34:03:00:93:52:5c:e1:ce:92:9a:b1:4a:6b:fd:9f:2e:10:
         17:5b:29:c1:c6:08:e5:4f:84:1f:10:5c:0e:4a:24:07:77:45:
         7b:bd:3e:dc:ed:b0:e3:c3:f9:17:83:61:29:c1:5f:e1:b7:cb:
         16:40:34:93:60:11:a4:2c:69:9b:7a:84:36:87:4b:a5:02:8c:
         47:b5:71:aa:58:b4:ee:ea:7c:c6:a5:7d:f1:3a:e3:4e:6f:e3:
         aa:af:c9:36:80:b1:d0:c0:09:d8:15:95:0c:26:0d:b8:03:d9:
         d2:a3:da:0e:e9:ac:ec:c7:61:e7:a3:f9:f0:47:4a:ef:df:9d:
         7a:1f:1e:4d:6d:bf:66:23:8e:2a:9f:a6:39:df:9c:ca:64:f2:
         ce:bc:de:be:d0:05:fb:91:b5:56:87:c2:ec:7a:3f:27:4d:e5:
         02:6b:ce:e7:98:f9:0f:50:35:46:0e:af:12:d6:44:38:76:40:
         88:6b:2e:1c:30:b8:44:a7:b0:45:8e:c5:10:11:9b:68:68:01:
         3a:1d:95:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:31:17 2025 by rpki-client