Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a643030303a3a2f33362d3336203d3e20323638303430.roa
File:                     323830343a353730633a643030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier:          7tiAzH2T7BZpiBdZ7h8cWjCqszI1cAHqi1AKIdwI+Ns=
Subject key identifier:   DA:04:38:E8:69:FF:A6:CB:73:51:8B:67:00:CA:04:3A:3B:1F:53:3C
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       178BEFB6D8AB7186589263F46D616251EB0D9E83
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a643030303a3a2f33362d3336203d3e20323638303430.roa
Signing time:             Mon 08 Sep 2025 21:31:26 +0000
ROA not before:           Mon 08 Sep 2025 21:26:26 +0000
ROA not after:            Mon 07 Sep 2026 21:31:26 +0000
asID:                     268040
IP address blocks:        2804:570c:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8b:ef:b6:d8:ab:71:86:58:92:63:f4:6d:61:62:51:eb:0d:9e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Sep  8 21:26:26 2025 GMT
            Not After : Sep  7 21:31:26 2026 GMT
        Subject: CN=DA0438E869FFA6CB73518B6700CA043A3B1F533C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a0:ff:5f:69:4d:93:f8:be:69:13:7b:29:6e:
                    70:31:91:fb:b0:b8:3d:a8:59:0f:40:f3:0b:f2:07:
                    e4:26:c7:5b:fe:59:17:21:f8:dd:16:1e:94:ce:b7:
                    f9:2f:8a:f9:e3:1c:2d:42:96:1c:13:e1:bb:b6:1c:
                    cf:58:18:5e:5a:f5:6d:fc:87:56:5a:e1:15:db:4c:
                    06:c7:eb:bf:ee:87:76:1a:26:a0:6b:db:0a:80:f9:
                    9b:cb:18:93:19:f9:d3:c8:58:31:fc:0d:77:49:c5:
                    e0:35:87:a0:12:24:bc:76:9e:be:70:bd:96:da:e3:
                    05:5d:a4:7e:4a:58:8b:2e:b4:0d:f3:34:73:8d:dc:
                    e6:d0:8f:e6:13:f2:d2:8b:8f:87:02:50:42:b8:ae:
                    f6:92:c2:15:48:85:f6:2b:72:8d:1e:a3:67:b8:a4:
                    79:74:d2:73:5f:48:cc:1d:ba:1b:2b:4c:32:2c:5f:
                    71:c8:c2:e9:19:65:db:24:de:06:5a:e3:6b:d0:5d:
                    70:2b:9f:5d:60:da:d2:41:e8:b0:ba:63:a3:e8:96:
                    a6:bd:a4:e1:e0:48:ad:99:54:67:c4:8f:0b:02:d2:
                    5f:43:f0:64:34:7f:37:46:5a:02:75:1a:15:8b:36:
                    a6:cf:31:96:da:ac:49:c8:66:50:73:99:78:31:7a:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:04:38:E8:69:FF:A6:CB:73:51:8B:67:00:CA:04:3A:3B:1F:53:3C
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a643030303a3a2f33362d3336203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         01:d4:08:a0:1b:9c:4e:4e:19:d8:69:c0:bd:3e:9c:18:40:8f:
         13:01:8d:fa:b8:0f:fe:2b:4f:6d:90:da:c8:81:de:da:fc:f2:
         77:48:69:f9:08:51:aa:39:99:d2:ff:60:8e:af:da:94:8d:09:
         aa:f4:ea:77:ee:77:f6:f1:84:67:6c:3a:2b:a4:5e:9b:07:82:
         f9:3c:c8:47:f8:d3:60:68:f5:4c:56:41:ef:7f:23:08:64:d1:
         46:21:05:fc:7e:78:d9:ce:fd:c4:4f:94:e2:a5:68:8e:c9:d8:
         00:3b:14:b8:1f:1a:fe:76:30:79:d2:ed:33:17:8b:ae:1c:33:
         f8:b0:0d:50:82:a5:18:55:3d:5f:f8:70:3a:6d:5d:43:a4:67:
         a2:92:b8:bb:b9:c7:b4:8e:65:72:8f:53:28:94:ff:35:41:d5:
         d1:8f:e9:55:5a:eb:7b:60:88:b1:fb:a4:16:f9:23:fc:35:32:
         9b:f5:dd:3d:4f:99:e0:ef:ab:4b:57:78:9a:79:a8:ad:b0:df:
         62:25:79:48:e8:5b:e6:cc:e2:b5:4a:8d:8f:b8:70:a5:bb:69:
         f9:6c:80:90:12:d8:de:f7:43:55:ed:3f:4a:fc:81:b5:d7:5d:
         10:e1:62:34:57:72:67:90:21:61:90:ac:32:2c:16:15:e2:cd:
         27:b2:c2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:07:15 2025 by rpki-client