Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/323830343a333265303a3a2f33322d3336203d3e20323635313032.roa
File:                     323830343a333265303a3a2f33322d3336203d3e20323635313032.roa (raw, json)
Hash identifier:          VKqaT3M8Vbs1UbYSEsk+ac4JH864j9LqcYQVRatZ2eQ=
Subject key identifier:   2E:B5:5A:A9:5E:CB:FC:B4:FC:00:86:0B:FC:69:14:8B:8D:A8:B3:9A
Certificate issuer:       /CN=B50F71D69739DBF5914AAB576A379411D64051AB
Certificate serial:       169A8CCB332D1696670F08B5A912185AE474AF30
Authority key identifier: B5:0F:71:D6:97:39:DB:F5:91:4A:AB:57:6A:37:94:11:D6:40:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/323830343a333265303a3a2f33322d3336203d3e20323635313032.roa
Signing time:             Tue 21 Oct 2025 14:00:19 +0000
ROA not before:           Tue 21 Oct 2025 13:55:19 +0000
ROA not after:            Tue 20 Oct 2026 14:00:19 +0000
asID:                     265102
IP address blocks:        2804:32e0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.crl
                          rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 01:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9a:8c:cb:33:2d:16:96:67:0f:08:b5:a9:12:18:5a:e4:74:af:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B50F71D69739DBF5914AAB576A379411D64051AB
        Validity
            Not Before: Oct 21 13:55:19 2025 GMT
            Not After : Oct 20 14:00:19 2026 GMT
        Subject: CN=2EB55AA95ECBFCB4FC00860BFC69148B8DA8B39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bc:63:5e:90:1b:e5:f9:ca:d5:15:d7:45:5d:
                    26:08:90:47:d3:c6:8e:30:ab:a9:bf:8d:8c:b5:f1:
                    45:ca:3e:d3:6f:21:e2:a6:b5:c6:43:5b:56:de:59:
                    2f:38:24:08:f8:b8:c3:ee:f2:92:5c:f3:fa:94:8d:
                    9a:f3:d0:62:bb:8b:3a:01:74:37:ea:27:a9:63:6e:
                    7b:92:50:ff:16:ce:01:51:12:ac:5c:62:dd:f3:0c:
                    cb:08:23:d5:96:7f:17:4e:47:da:ed:34:ce:1b:a6:
                    61:e7:eb:29:34:76:ce:d0:97:75:4c:da:76:ad:37:
                    e7:57:ea:60:49:a3:42:13:74:bf:e5:ca:a7:f9:b9:
                    bc:c5:bb:53:76:65:c7:43:8b:8e:20:28:d4:35:4d:
                    8e:d5:0f:22:cf:54:7d:41:09:b4:e8:d9:e4:24:82:
                    d3:20:47:99:2a:a7:1e:00:48:1c:d7:6f:77:1c:e8:
                    c3:11:03:00:7b:18:04:e1:ea:7d:87:2e:00:53:d4:
                    b9:c3:f4:57:a7:41:30:d0:41:98:83:a9:b2:9c:ca:
                    ef:0f:44:e5:8f:b3:34:1e:fb:0c:57:26:3e:f3:8e:
                    1e:9a:0a:65:67:52:0a:da:f8:63:7d:32:8a:fc:b4:
                    de:5b:36:34:de:53:60:49:dd:e7:d4:4d:e9:23:18:
                    60:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B5:5A:A9:5E:CB:FC:B4:FC:00:86:0B:FC:69:14:8B:8D:A8:B3:9A
            X509v3 Authority Key Identifier:
                keyid:B5:0F:71:D6:97:39:DB:F5:91:4A:AB:57:6A:37:94:11:D6:40:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/323830343a333265303a3a2f33322d3336203d3e20323635313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:b6:f8:bf:9f:ce:b0:2a:ab:d3:81:49:74:2c:6c:ca:6e:b6:
         ac:94:82:b7:38:f1:d2:b1:9b:1c:6b:03:c8:8f:a6:de:d5:f1:
         d3:5a:7c:27:99:a7:8e:91:ac:19:c6:36:32:ef:a0:82:e5:15:
         2d:34:59:69:a0:0d:d5:ba:74:2a:41:e5:7c:33:d8:27:39:3e:
         fa:11:e4:91:7d:0d:d6:52:b0:7f:9a:d8:b9:68:a7:1f:de:20:
         0b:dd:fd:ea:85:5a:eb:6f:3d:a2:f0:ba:f7:ed:e3:9f:fa:73:
         57:4e:20:d5:c5:d9:bf:c6:4e:16:2f:07:a0:e8:26:0d:d1:d6:
         8b:31:ac:18:61:82:f6:d0:69:1d:34:d5:57:42:64:79:04:3c:
         7b:f0:ed:32:d1:9f:9a:3e:e3:c2:2c:58:bf:fb:50:ac:0e:88:
         b1:f7:af:03:d3:ba:d2:7f:71:29:c9:c1:43:b2:a8:c3:ed:f9:
         fe:5b:6a:fa:fd:47:37:c2:62:b0:38:1a:e0:4f:0e:d6:5a:71:
         20:0b:42:95:80:64:ff:89:0c:79:5d:1e:8d:1b:52:9b:49:2e:
         56:af:f6:50:b9:66:41:35:e2:7f:de:6f:de:9b:09:c5:7e:19:
         d4:14:e5:07:11:75:08:e2:c7:cb:aa:f0:06:54:02:65:b7:b8:
         e6:25:69:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:52:20 2025 by rpki-client