Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a633030303a3a2f33362d3336203d3e20323638303430.roa
File:                     323830343a353730633a633030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier:          O7Oqr//PpcCqpzqFcZFT9boA2UaSvzJGXYDNBvE/tdI=
Subject key identifier:   45:71:8C:95:6F:B3:BE:51:E1:2B:5D:C1:C7:9F:9F:3A:B4:21:D2:E9
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       5D505613F99B8F3EFA7B219EFC750069407BD348
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a633030303a3a2f33362d3336203d3e20323638303430.roa
Signing time:             Mon 08 Sep 2025 21:31:26 +0000
ROA not before:           Mon 08 Sep 2025 21:26:26 +0000
ROA not after:            Mon 07 Sep 2026 21:31:26 +0000
asID:                     268040
IP address blocks:        2804:570c:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:50:56:13:f9:9b:8f:3e:fa:7b:21:9e:fc:75:00:69:40:7b:d3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Sep  8 21:26:26 2025 GMT
            Not After : Sep  7 21:31:26 2026 GMT
        Subject: CN=45718C956FB3BE51E12B5DC1C79F9F3AB421D2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:a3:e8:75:fb:bb:d6:64:2b:b8:df:05:54:
                    e7:2d:4b:fc:6d:9d:68:e1:20:b9:20:b2:58:43:d1:
                    a8:83:0e:a5:b7:71:3f:f4:b6:4e:70:9f:cb:bc:18:
                    05:58:f8:77:e6:59:16:05:c7:88:bf:ad:42:d0:87:
                    64:96:6f:83:dd:12:89:93:66:7f:51:88:af:a0:c2:
                    11:b3:da:04:06:cc:74:95:38:c5:47:5d:cc:ee:be:
                    4c:ac:40:da:f5:ac:b8:62:de:c1:6f:98:da:53:1c:
                    f7:3f:e5:5b:84:73:fa:b9:64:31:c7:c0:81:5e:e9:
                    a9:0c:ae:3e:4d:44:57:46:e8:53:c6:2e:95:cd:e0:
                    c3:96:5c:18:c3:99:9d:35:65:8d:5a:04:4f:47:fb:
                    75:d8:8e:a5:7e:3a:2b:fd:f4:f1:24:25:43:1f:bb:
                    42:d0:ce:77:23:8b:61:84:69:69:6b:b9:5a:8f:4b:
                    db:7b:a8:c6:31:da:ca:3b:dd:67:80:52:bd:c4:64:
                    f2:89:d1:20:17:67:34:ad:0b:46:2e:59:b8:d8:18:
                    38:47:43:8b:12:8d:5d:5a:3b:c1:b0:4f:01:19:d2:
                    c4:c3:bf:16:ee:c1:36:be:b7:2d:c0:fa:00:d7:45:
                    03:ce:db:f1:ec:b9:86:6b:6d:c2:d4:19:e4:f6:58:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:71:8C:95:6F:B3:BE:51:E1:2B:5D:C1:C7:9F:9F:3A:B4:21:D2:E9
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a633030303a3a2f33362d3336203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:f1:0d:9b:41:72:57:92:b2:36:95:fa:7e:95:c0:bc:22:19:
         7c:12:69:d7:d9:f9:62:c3:b3:b8:dc:bd:a3:58:18:49:be:00:
         06:44:66:65:8f:d5:43:10:b4:1c:d5:22:11:e3:45:b6:1d:44:
         ba:a1:5a:43:7c:8a:61:e2:a4:c5:58:7b:65:57:b0:16:b5:74:
         1b:cb:1b:06:b5:05:68:e3:d1:72:1e:6d:3d:67:db:c0:b4:ee:
         7a:68:a6:18:93:03:5c:bb:32:d0:9e:78:39:95:9c:08:16:08:
         76:81:3d:ea:73:21:52:a5:68:3a:3b:47:0f:d2:3d:94:6a:c8:
         59:03:7a:60:bf:3d:f8:47:17:f9:8e:e7:71:53:81:0c:80:f5:
         88:44:a5:23:fd:86:c3:83:ce:df:06:30:04:52:bd:8c:16:63:
         f7:31:60:a3:c4:cd:25:3c:c6:ac:fe:10:ad:81:43:c8:7a:68:
         09:d1:2e:86:1e:71:9a:fb:d8:15:24:98:7c:bf:6a:38:4d:06:
         4e:1b:63:30:b1:b3:38:34:5d:f6:1a:1b:6a:65:6e:14:89:71:
         7b:55:63:a8:20:74:35:fc:ad:ef:90:ab:9a:39:95:b6:7c:ba:
         b3:32:64:3f:94:3e:bf:86:bb:6f:79:09:31:36:d4:cf:15:57:
         37:29:b3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:31:43 2025 by rpki-client