Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a343030303a3a2f33342d3334203d3e20323639313037.roa
File:                     323830343a356638383a343030303a3a2f33342d3334203d3e20323639313037.roa (raw, json)
Hash identifier:          ap3b/NKK8QbtT6btYqTd3ysE07X5HZlXt698mLPIkl0=
Subject key identifier:   47:75:4D:85:25:92:A0:24:FD:42:29:CC:42:D9:31:EA:04:8E:38:A2
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       3C379D4D4275923DE8815A23FD2EAA29675C63E9
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a343030303a3a2f33342d3334203d3e20323639313037.roa
Signing time:             Mon 14 Jul 2025 21:00:03 +0000
ROA not before:           Mon 14 Jul 2025 20:55:03 +0000
ROA not after:            Mon 13 Jul 2026 21:00:03 +0000
asID:                     269107
IP address blocks:        2804:5f88:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 21:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:37:9d:4d:42:75:92:3d:e8:81:5a:23:fd:2e:aa:29:67:5c:63:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Jul 14 20:55:03 2025 GMT
            Not After : Jul 13 21:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:7e:b4:8e:a3:65:25:7d:ce:57:ed:48:a0:
                    f0:b0:cf:d8:56:d5:b7:8f:8b:6f:96:32:cc:6b:fa:
                    e3:90:89:95:df:fc:cd:fe:cf:56:18:de:18:10:6b:
                    9b:6b:7a:0a:1a:22:ef:be:5d:8a:62:11:9a:57:61:
                    5d:31:39:c5:61:48:11:55:09:38:3a:01:a6:e7:19:
                    74:d3:8e:17:ac:d1:2c:3c:6b:46:90:98:91:2a:71:
                    c9:8a:32:6d:79:fc:92:4e:26:50:99:69:94:2f:e7:
                    4a:0b:4b:e1:b8:f8:8a:bd:70:3d:63:0c:c9:23:50:
                    84:77:d9:48:e2:95:69:ba:de:6c:f4:d9:57:ea:fb:
                    d5:00:35:35:f6:da:28:86:27:11:55:57:12:26:3d:
                    bb:52:ca:ca:0d:52:54:26:69:c6:d7:61:22:6e:34:
                    1f:75:96:18:a7:4b:7f:56:b8:91:24:db:8e:5a:bf:
                    fc:74:e4:19:00:5e:3d:a9:22:2b:06:ca:d3:ee:60:
                    7a:65:27:4b:0d:60:03:ae:0c:f8:db:5b:d7:a8:a9:
                    74:fb:9a:07:1b:66:01:8c:83:b7:38:24:1a:6a:d7:
                    1d:de:70:7b:b8:cd:ef:20:2c:b9:59:d1:2a:6c:3c:
                    5a:8f:88:f6:b4:f7:87:54:ec:84:e4:c5:20:33:4c:
                    31:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:75:4D:85:25:92:A0:24:FD:42:29:CC:42:D9:31:EA:04:8E:38:A2
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a343030303a3a2f33342d3334203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f88:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5e:5e:00:40:2f:a2:25:be:8e:24:92:2e:b9:50:72:05:d9:93:
         83:c2:cc:8a:b3:d2:0b:2d:23:a7:8e:3e:b9:82:a6:c8:ac:65:
         14:4f:5f:a1:06:2d:ac:2c:3b:70:10:04:31:27:9f:cb:cc:e6:
         e5:70:0a:ee:29:7a:e2:62:30:2a:54:8e:64:44:22:6d:27:72:
         c4:e7:89:95:1d:36:4b:d7:93:4c:d2:3d:6f:b8:87:f9:2f:71:
         e8:61:d3:15:4a:55:65:ea:67:9b:31:28:11:ef:09:7f:f0:62:
         06:68:12:8f:6c:7a:70:13:fc:fc:b2:9c:00:9d:19:ef:14:a5:
         70:4d:ab:bd:2c:6f:d2:4a:8a:18:4c:68:a1:ce:64:60:84:8b:
         3f:7f:c9:ba:2b:b2:73:9c:d5:5e:66:8f:ad:fb:e5:04:a4:e4:
         a1:9e:c0:89:11:ff:40:6d:6e:82:a0:22:0c:bc:a1:25:2f:db:
         b9:ba:d5:c2:bd:1b:da:15:bc:91:3b:78:47:9f:d1:00:56:f5:
         fe:db:10:a9:e4:28:d4:17:72:9a:aa:34:a7:48:12:4c:2a:46:
         7a:d5:40:34:f6:ba:ce:51:c1:7e:75:66:7e:6b:44:c9:d7:84:
         b0:04:1d:2c:60:d5:60:93:ca:92:16:b5:76:46:6e:ca:72:83:
         8f:9f:b0:e8
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUPDedTUJ1kj3ogVoj/S6qKWdcY+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0RUQ1N0NGQkE5MjU1Qjg0MjQ3QTdGRkJGMkZEOTIz
QTM2NUZEQjAeFw0yNTA3MTQyMDU1MDNaFw0yNjA3MTMyMTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkJBMzdFQjQ4RUEzNjUyNTdE
Q0U1N0VENDhBMEYwQjBDRkQ4NTZENUI3OEY4QjZGOTYzMkNDNkJGQUUzOTA4OTk1
REZGQ0NERkVDRjU2MThERTE4MTA2QjlCNkI3QTBBMUEyMkVGQkU1RDhBNjIxMTlB
NTc2MTVEMzEzOUM1NjE0ODExNTUwOTM4M0EwMUE2RTcxOTc0RDM4RTE3QUNEMTJD
M0M2QjQ2OTA5ODkxMkE3MUM5OEEzMjZENzlGQzkyNEUyNjUwOTk2OTk0MkZFNzRB
MEI0QkUxQjhGODhBQkQ3MDNENjMwQ0M5MjM1MDg0NzdEOTQ4RTI5NTY5QkFERTZD
RjREOTU3RUFGQkQ1MDAzNTM1RjZEQTI4ODYyNzExNTU1NzEyMjYzREJCNTJDQUNB
MEQ1MjU0MjY2OUM2RDc2MTIyNkUzNDFGNzU5NjE4QTc0QjdGNTZCODkxMjREQjhF
NUFCRkZDNzRFNDE5MDA1RTNEQTkyMjJCMDZDQUQzRUU2MDdBNjUyNzRCMEQ2MDAz
QUUwQ0Y4REI1QkQ3QThBOTc0RkI5QTA3MUI2NjAxOEM4M0I3MzgyNDFBNkFENzFE
REU3MDdCQjhDREVGMjAyQ0I5NTlEMTJBNkMzQzVBOEY4OEY2QjRGNzg3NTRFQzg0
RTRDNTIwMzM0QzMxQjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu6N+tI6jZSV9zlftSKDwsM/YVtW3j4tvljLMa/rjkImV3/zN/s9W
GN4YEGuba3oKGiLvvl2KYhGaV2FdMTnFYUgRVQk4OgGm5xl0044XrNEsPGtGkJiR
KnHJijJtefySTiZQmWmUL+dKC0vhuPiKvXA9YwzJI1CEd9lI4pVput5s9NlX6vvV
ADU19toohicRVVcSJj27UsrKDVJUJmnG12EibjQfdZYYp0t/VriRJNuOWr/8dOQZ
AF49qSIrBsrT7mB6ZSdLDWADrgz421vXqKl0+5oHG2YBjIO3OCQaatcd3nB7uM3v
ICy5WdEqbDxaj4j2tPeHVOyE5MUgM0wxuQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FEd1TYUlkqAk/UIpzELZMeoEjjiiMB8GA1UdIwQYMBaAFCtO1Xz7qSVbhCR6f/vy
/ZI6Nl/bMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VZWUM5aFpabjkzbTI4
elpERk5SYjh6dGE3b1hvNnlFTnZCR0tTTGQyWnM5LzAvMkI0RUQ1N0NGQkE5MjU1
Qjg0MjQ3QTdGRkJGMkZEOTIzQTM2NUZEQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yQjRFRDU3Q0ZCQTkyNTVCODQyNDdBN0ZGQkYyRkQ5MjNBMzY1
RkRCLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FWVlDOWhaWm45M20yOHpaREZO
UmI4enRhN29YbzZ5RU52QkdLU0xkMlpzOS8wLzMyMzgzMDM0M2EzNTY2MzgzODNh
MzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzkzMTMwMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBF+IQDANBgkqhkiG9w0BAQsFAAOCAQEAXl4AQC+iJb6OJJIuuVBy
BdmTg8LMirPSCy0jp44+uYKmyKxlFE9foQYtrCw7cBAEMSefy8zm5XAK7il64mIw
KlSOZEQibSdyxOeJlR02S9eTTNI9b7iH+S9x6GHTFUpVZepnmzEoEe8Jf/BiBmgS
j2x6cBP8/LKcAJ0Z7xSlcE2rvSxv0kqKGExooc5kYISLP3/Juiuyc5zVXmaPrfvl
BKTkoZ7AiRH/QG1ugqAiDLyhJS/bubrVwr0b2hW8kTt4R5/RAFb1/tsQqeQo1Bdy
mqo0p0gSTCpGetVANPa6zlHBfnVmfmtEydeEsAQdLGDVYJPKkha1dkZuynKDj5+w
6A==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:51:49 2025 by rpki-client