Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d313238203d3e203238313832.roa
File:                     323030313a313239343a3a2f33322d313238203d3e203238313832.roa (raw, json)
Hash identifier:          Q+8SwHcq5TK7g+xkBomW2tUhTBlAFrdcnRlOZSPbPOY=
Subject key identifier:   F8:75:80:EB:71:B2:31:65:D4:8B:68:38:11:7E:DB:4B:DA:F9:14:68
Certificate issuer:       /CN=FEEF18BFC0F438C174F899A158ED9751D2D84B6C
Certificate serial:       09137A5237A7BFE12C565E962F02CBD0B2485EC5
Authority key identifier: FE:EF:18:BF:C0:F4:38:C1:74:F8:99:A1:58:ED:97:51:D2:D8:4B:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d313238203d3e203238313832.roa
Signing time:             Tue 29 Jul 2025 12:27:04 +0000
ROA not before:           Tue 29 Jul 2025 12:22:04 +0000
ROA not after:            Tue 28 Jul 2026 12:27:04 +0000
asID:                     28182
IP address blocks:        2001:1294::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:13:7a:52:37:a7:bf:e1:2c:56:5e:96:2f:02:cb:d0:b2:48:5e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEEF18BFC0F438C174F899A158ED9751D2D84B6C
        Validity
            Not Before: Jul 29 12:22:04 2025 GMT
            Not After : Jul 28 12:27:04 2026 GMT
        Subject: CN=F87580EB71B23165D48B6838117EDB4BDAF91468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:ee:f4:90:ba:56:04:16:59:8c:43:6e:04:
                    1c:88:df:56:0b:9e:d3:d7:53:6a:36:62:6f:46:b6:
                    6d:e6:84:49:3d:c4:32:98:40:48:27:a9:59:b7:01:
                    8b:02:77:8d:9e:a6:53:2d:57:c0:5f:b2:06:6e:a1:
                    40:d6:6c:33:00:5f:ab:0e:8e:a4:b6:59:6f:55:57:
                    e5:d0:89:7c:51:1d:f7:79:8f:3a:31:f2:c9:4a:ae:
                    b4:9d:82:07:6d:7f:9a:b9:9c:42:6c:3b:f2:24:c0:
                    d6:71:3e:1f:37:08:ab:0e:c6:7e:1c:c8:f9:13:20:
                    21:9b:a3:76:20:65:9d:3c:b7:a5:f0:99:a7:44:d1:
                    66:e5:02:d8:c8:09:a4:1e:6d:d2:47:23:b0:77:f8:
                    4c:d7:a9:19:e8:4b:e9:3e:fd:62:78:68:34:db:2d:
                    2a:10:e0:a1:cd:6b:4c:2b:02:73:ae:78:9c:b4:56:
                    72:6c:0d:ba:f6:fa:37:da:ba:0c:30:32:00:87:44:
                    48:d7:fb:a4:bb:60:8d:62:dc:04:2f:74:fc:70:8d:
                    f3:17:8f:43:ee:80:95:d8:83:e0:8e:ea:bc:cd:59:
                    67:42:99:7f:36:8f:da:69:09:b8:0a:a3:66:5e:a0:
                    cb:a0:5f:2b:22:99:c1:28:43:5b:c1:7c:ed:ab:40:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:75:80:EB:71:B2:31:65:D4:8B:68:38:11:7E:DB:4B:DA:F9:14:68
            X509v3 Authority Key Identifier:
                keyid:FE:EF:18:BF:C0:F4:38:C1:74:F8:99:A1:58:ED:97:51:D2:D8:4B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d313238203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1294::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:7f:dc:5c:9a:da:58:af:9a:c8:19:af:6f:8b:32:4c:c2:d9:
         5f:da:81:50:8f:c0:22:05:7a:b5:2b:8b:c3:2c:0b:d3:72:90:
         bd:d9:d4:ca:1f:c2:0f:91:6f:e6:f4:9c:f9:20:a2:e0:70:9b:
         cb:72:59:ee:53:53:fa:bf:91:66:fd:b9:6f:08:29:e0:8a:4d:
         13:31:14:67:16:97:93:0c:a4:c0:fe:40:15:9f:dc:dd:b5:a6:
         f8:3f:42:5e:74:99:c5:16:44:1e:25:83:55:e8:26:30:ea:2f:
         1c:ae:a9:5f:c0:a6:7a:00:51:cd:6e:2c:aa:b1:c8:e0:ee:9a:
         30:d2:47:4d:02:59:a6:f7:7e:d8:d7:9f:5c:98:b3:7f:75:c9:
         38:98:92:49:ec:ac:74:04:65:c1:54:82:66:65:59:28:f4:3a:
         47:f3:6b:18:2d:d8:b0:1d:72:44:48:7f:a7:6f:37:a9:5b:8d:
         cd:51:e5:c2:02:be:aa:86:eb:5e:44:7a:03:e7:68:ff:38:75:
         90:4b:75:4c:84:2f:a2:3e:d6:4c:2e:57:b5:cd:36:85:5e:fe:
         14:30:18:92:86:41:8c:bc:fe:1a:85:f7:e6:ea:b5:93:ae:9e:
         4b:0d:ed:82:8b:7b:54:da:f6:09:44:b3:75:ff:75:fa:66:cd:
         81:99:da:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:27:37 2025 by rpki-client