Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/323830343a353335343a3a2f33322d313238203d3e20323638353737.roa
File:                     323830343a353335343a3a2f33322d313238203d3e20323638353737.roa (raw, json)
Hash identifier:          youEd1A6G9ZdagofZd+N94Vs6aXJfkDPw454AC/ppO0=
Subject key identifier:   12:00:8B:97:F9:59:AF:AB:DD:E1:F7:8F:0A:CC:F2:D0:D4:4D:E0:2B
Certificate issuer:       /CN=0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0
Certificate serial:       7AE6028E7FA36F930DF745F0CBE41F1CF4FD5958
Authority key identifier: 0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/323830343a353335343a3a2f33322d313238203d3e20323638353737.roa
Signing time:             Tue 22 Jul 2025 16:37:55 +0000
ROA not before:           Tue 22 Jul 2025 16:32:55 +0000
ROA not after:            Tue 21 Jul 2026 16:37:55 +0000
asID:                     268577
IP address blocks:        2804:5354::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl
                          rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e6:02:8e:7f:a3:6f:93:0d:f7:45:f0:cb:e4:1f:1c:f4:fd:59:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0
        Validity
            Not Before: Jul 22 16:32:55 2025 GMT
            Not After : Jul 21 16:37:55 2026 GMT
        Subject: CN=12008B97F959AFABDDE1F78F0ACCF2D0D44DE02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:48:8f:59:5c:59:98:c8:1d:2b:4a:74:ae:
                    84:ad:33:cb:68:67:cf:30:aa:c0:7f:4a:20:43:23:
                    2c:3c:d7:47:f0:d4:32:7e:34:09:c4:81:53:da:48:
                    53:31:6d:fc:c7:5a:2a:b0:b5:e7:23:48:1b:f6:ac:
                    19:d5:46:80:61:f5:3e:2c:c1:87:a5:ed:3f:1f:2c:
                    66:8b:62:ca:19:b1:b0:4f:38:33:b0:28:2c:f3:ae:
                    eb:8a:7e:da:a2:67:e6:46:52:58:b1:89:53:00:97:
                    50:d9:5c:12:1e:df:01:08:7f:63:01:fe:39:35:83:
                    48:5b:12:dd:f0:ec:ae:5f:9d:bc:0f:82:ed:f0:79:
                    20:64:ad:58:10:26:49:f5:ac:34:6d:de:1d:07:8e:
                    a0:51:a1:b5:64:29:eb:a6:82:86:63:16:3e:f0:91:
                    b1:45:e5:bb:a2:b4:60:1f:c7:9a:9d:cb:ed:45:50:
                    7f:a2:69:fc:85:24:8d:f3:4d:72:01:6d:64:db:95:
                    7f:3a:d4:fb:07:8c:ba:7d:1a:00:cb:9b:55:5f:a3:
                    8c:18:20:3c:56:0a:87:06:f4:3d:04:7f:92:e2:05:
                    cf:2d:88:46:69:3e:75:c0:c6:10:a7:6d:ac:9e:da:
                    55:a7:77:71:b2:46:84:bd:4e:69:ef:25:5f:e9:27:
                    6a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:00:8B:97:F9:59:AF:AB:DD:E1:F7:8F:0A:CC:F2:D0:D4:4D:E0:2B
            X509v3 Authority Key Identifier:
                keyid:0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/323830343a353335343a3a2f33322d313238203d3e20323638353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5354::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:bc:f1:ea:a1:b0:45:b2:d3:e9:ee:2a:21:e1:00:4d:05:c2:
         6d:22:40:d1:b3:a9:ec:13:2e:bf:78:73:5d:ff:dc:9b:25:81:
         45:1a:c0:41:24:19:e2:92:d6:24:ad:4b:50:b7:18:c9:5d:d2:
         cd:d1:00:c5:e0:7e:b0:fd:1f:9a:9d:d1:b4:98:3a:13:2d:07:
         54:bf:f0:3c:cc:ab:c5:8f:a9:f8:76:c8:59:d7:72:ed:1b:1a:
         13:b4:45:6d:77:9a:cb:eb:b9:27:55:6d:1b:8b:be:eb:d5:98:
         79:f7:db:c4:a7:99:00:33:6e:92:7c:59:cc:f3:ab:bb:b4:86:
         d1:f9:dd:d2:b3:67:8e:cd:bc:9f:19:7d:1b:b7:20:dd:f5:94:
         23:fa:de:d7:81:de:a0:4a:74:c1:11:e2:23:17:59:26:ae:8a:
         c9:10:76:34:8c:98:33:1c:f0:8f:45:e2:3f:4d:d5:71:95:85:
         5b:38:04:42:e3:c6:b9:dc:a0:74:ad:e6:05:cc:b9:15:b3:d9:
         9c:75:8d:2e:ea:19:9f:56:3e:1c:88:ff:e1:d6:17:29:c5:09:
         ea:a6:1c:1e:7b:64:9f:69:2d:5f:cd:c3:8a:56:39:ad:20:03:
         14:55:58:7f:cc:1f:10:5c:fc:e5:75:21:d2:82:f3:f2:2d:01:
         50:fa:9c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:28 2025 by rpki-client