Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/323830343a363165633a3a2f33322d3332203d3e20323639323635.roa
File:                     323830343a363165633a3a2f33322d3332203d3e20323639323635.roa (raw, json)
Hash identifier:          G5uYp0ecuOs4MuZb+A34zoxhoZ/nOHhZNf5CuuFyumo=
Subject key identifier:   F9:AB:9A:5C:A1:7B:D4:6B:A3:4D:D7:A8:64:94:AA:D6:AD:12:AD:2A
Certificate issuer:       /CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
Certificate serial:       2792E8EE6F3DA2FC3A97649EEAB71B1DD73F881C
Authority key identifier: D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/323830343a363165633a3a2f33322d3332203d3e20323639323635.roa
Signing time:             Tue 29 Jul 2025 21:56:06 +0000
ROA not before:           Tue 29 Jul 2025 21:51:06 +0000
ROA not after:            Tue 28 Jul 2026 21:56:06 +0000
asID:                     269265
IP address blocks:        2804:61ec::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 14:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:92:e8:ee:6f:3d:a2:fc:3a:97:64:9e:ea:b7:1b:1d:d7:3f:88:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
        Validity
            Not Before: Jul 29 21:51:06 2025 GMT
            Not After : Jul 28 21:56:06 2026 GMT
        Subject: CN=F9AB9A5CA17BD46BA34DD7A86494AAD6AD12AD2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:8d:8c:ac:ce:9b:ff:e8:d4:0c:32:4b:e4:
                    2d:7e:9f:45:95:74:19:f5:16:3c:0c:89:61:8f:3b:
                    69:af:5c:8f:91:75:72:81:a6:7e:bc:0b:a8:f2:17:
                    f7:db:6a:28:da:68:78:70:ea:b2:af:a6:a1:90:c5:
                    4d:4e:fd:f5:46:68:8e:2f:1c:73:c4:a4:ad:be:a9:
                    e4:75:4a:35:78:ab:ed:b4:a0:bb:e3:1e:f0:93:38:
                    78:3b:67:2c:be:ed:b7:5c:c1:11:53:41:6a:f0:25:
                    63:84:bd:60:61:16:4d:17:dd:69:18:69:50:3c:26:
                    8a:eb:cf:a6:4a:c5:67:91:c0:a4:d6:30:fb:09:ed:
                    6f:19:eb:58:e4:76:0a:30:9b:e4:8a:e3:5d:ba:4f:
                    92:b7:e1:bc:14:7e:f5:4d:47:7b:47:69:45:ec:93:
                    b3:22:c8:95:96:4b:5c:01:dc:2a:0a:39:7c:1a:59:
                    77:28:bb:72:00:85:f7:8f:bd:10:c2:81:51:34:74:
                    1e:ff:6e:57:da:d7:71:31:c2:41:4b:a6:1b:6f:69:
                    5a:74:46:26:6e:4a:3b:56:07:24:96:e4:24:c7:54:
                    d6:63:3a:aa:b6:df:87:0e:c3:96:38:e3:94:55:dc:
                    ec:a0:32:1e:a5:d5:62:32:19:4b:37:37:d1:bc:da:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AB:9A:5C:A1:7B:D4:6B:A3:4D:D7:A8:64:94:AA:D6:AD:12:AD:2A
            X509v3 Authority Key Identifier:
                keyid:D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/323830343a363165633a3a2f33322d3332203d3e20323639323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:22:50:f6:60:c7:15:be:b6:f7:0d:b8:62:3c:94:91:a7:79:
         59:2d:4a:cc:d2:ed:be:0f:e5:08:13:ae:29:26:2d:41:f4:f7:
         36:b2:06:21:22:b1:23:bb:07:ef:7c:16:2a:0e:6a:4f:55:cf:
         78:40:c2:aa:3d:e3:b8:38:04:00:8a:62:0f:73:90:75:9b:e3:
         2a:9c:0b:df:f5:68:c6:e8:29:f8:8c:12:52:29:6f:d2:f8:c8:
         ff:8b:f5:2d:b2:35:1d:e2:51:08:be:d6:31:c9:8d:16:c0:f4:
         9e:cb:cc:29:81:f7:d0:e2:75:97:a0:6c:fb:dd:9d:8c:b0:e6:
         94:6d:91:0c:3d:ad:a3:e2:a6:a3:12:17:91:fa:3d:72:15:cd:
         22:46:7b:a1:5f:99:58:a4:8f:87:87:35:95:69:33:e9:ea:21:
         1c:28:2b:ee:a7:2b:8e:e9:fe:59:b8:98:de:1c:27:8c:2b:63:
         4d:8c:63:ec:39:bb:a0:68:75:ac:e7:1f:0c:a6:f1:2a:b7:46:
         06:04:ff:a1:80:8f:b0:65:45:a7:b0:e7:6c:a9:f2:e5:d9:90:
         e6:ef:19:b5:d5:9d:c1:39:9d:c8:b4:e2:83:8b:ab:83:a9:d7:
         ad:62:fa:cb:7f:3b:5f:9b:48:33:41:4e:42:ae:18:ed:bd:c9:
         15:99:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:56:10 2025 by rpki-client