Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa
File:                     323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (raw, json)
Hash identifier:          jrLtuRDUfebp+da8gdNc/X5sTzU1URd3o0fTxtDn0u0=
Subject key identifier:   C0:E5:59:48:C0:35:11:1C:62:78:0D:C7:DB:5C:D1:55:D6:AB:59:93
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       3B4FA0D5E26C47BD807BFFB3673C591A834039F0
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa
Signing time:             Thu 31 Jul 2025 21:32:39 +0000
ROA not before:           Thu 31 Jul 2025 21:27:39 +0000
ROA not after:            Thu 30 Jul 2026 21:32:39 +0000
asID:                     268205
IP address blocks:        2804:4d90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4f:a0:d5:e2:6c:47:bd:80:7b:ff:b3:67:3c:59:1a:83:40:39:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: Jul 31 21:27:39 2025 GMT
            Not After : Jul 30 21:32:39 2026 GMT
        Subject: CN=C0E55948C035111C62780DC7DB5CD155D6AB5993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:8e:35:ba:c5:57:3c:f9:30:67:74:16:e4:
                    34:6e:38:57:40:1f:81:42:c7:dc:64:5d:a8:0e:56:
                    76:ef:d6:f7:18:5f:bf:4a:06:f2:16:ec:95:7f:86:
                    99:b6:1b:54:74:d2:3a:3e:27:db:8b:98:9a:39:cc:
                    56:12:5a:82:c0:d6:1d:46:96:94:5b:05:5c:4f:6d:
                    81:e5:64:c6:79:3c:97:04:6d:b7:ed:e8:10:7f:fc:
                    cd:ff:4a:30:5a:da:db:7e:86:03:85:b9:aa:93:73:
                    32:04:db:9d:49:01:d5:00:9d:07:82:81:8b:23:ee:
                    fb:d8:d1:6b:14:6a:aa:2c:5e:34:e4:91:c3:11:0c:
                    09:15:3f:fd:b2:0a:3b:1f:20:52:c9:ae:9e:4b:65:
                    68:67:46:ab:a1:98:f8:38:22:9f:26:65:48:4e:eb:
                    7d:7f:79:81:08:41:63:3d:bd:ab:50:61:cd:7b:60:
                    25:fb:44:4d:27:5e:fe:33:ac:db:96:9e:f2:fd:c6:
                    bd:4d:16:e1:df:cc:e5:9d:4b:25:a0:08:78:35:c5:
                    0c:d2:3e:8a:0d:5a:c4:95:65:ec:76:0f:07:fe:0b:
                    c8:b8:91:13:11:b0:49:2b:33:54:a1:a8:cd:36:b5:
                    99:a1:7b:c1:0c:61:c6:7e:f3:4d:11:ab:be:84:c7:
                    9f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E5:59:48:C0:35:11:1C:62:78:0D:C7:DB:5C:D1:55:D6:AB:59:93
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:b5:17:e4:f6:9b:cf:be:5a:b2:c1:97:53:c4:93:a0:eb:af:
         6d:a8:d9:11:22:5c:43:57:55:e4:84:52:14:ac:7e:64:74:33:
         9a:96:e3:41:86:ce:3d:0c:16:62:16:aa:e3:97:85:22:b1:a6:
         48:b9:8c:e7:64:0a:cc:29:d2:7d:00:2d:5a:f2:30:53:1c:29:
         be:8d:32:bc:6d:62:da:02:31:0e:b9:96:ed:19:af:7c:50:91:
         1e:0d:b2:2e:d8:4c:3f:23:80:41:3d:2e:2d:ba:47:98:be:72:
         5d:32:a6:4e:90:ec:cd:9a:f2:63:a7:81:f1:a3:c5:5c:c3:40:
         49:71:ec:3f:05:59:35:b5:c7:48:7a:9b:c3:17:9e:9c:45:fe:
         c9:92:af:c4:10:f2:c9:05:c7:c2:3b:33:3d:0f:10:30:6b:74:
         da:bf:34:85:bb:8f:bd:41:46:13:fa:96:40:3e:28:29:9f:e4:
         17:8e:96:a5:f2:63:db:c1:c4:cb:4d:ba:cf:a6:fa:cb:06:aa:
         1e:f4:80:c3:fa:10:c7:2f:b1:6b:be:0c:4f:30:b1:34:4f:19:
         27:89:a3:0e:02:2a:91:5c:4f:7c:a4:ab:e3:8e:a6:12:a7:19:
         89:1e:00:42:f2:67:fa:ee:68:89:54:73:3a:51:57:95:33:84:
         8f:3f:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:02:10 2025 by rpki-client