Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/323830343a356361303a3a2f33322d313238203d3e20323638393230.roa
File:                     323830343a356361303a3a2f33322d313238203d3e20323638393230.roa (raw, json)
Hash identifier:          q/ezCvpn0L/NBlM1GgwYbIDiBNKtr2cYPmEdialO0S0=
Subject key identifier:   43:37:7C:0F:03:49:25:E7:B3:8C:DE:73:99:74:BB:D1:C9:46:CC:EE
Certificate issuer:       /CN=EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C
Certificate serial:       13CCFCF32FC88D0AE5112535063244FA7C26BF56
Authority key identifier: EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/323830343a356361303a3a2f33322d313238203d3e20323638393230.roa
Signing time:             Thu 17 Jul 2025 14:07:52 +0000
ROA not before:           Thu 17 Jul 2025 14:02:52 +0000
ROA not after:            Thu 16 Jul 2026 14:07:52 +0000
asID:                     268920
IP address blocks:        2804:5ca0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.crl
                          rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 12:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cc:fc:f3:2f:c8:8d:0a:e5:11:25:35:06:32:44:fa:7c:26:bf:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C
        Validity
            Not Before: Jul 17 14:02:52 2025 GMT
            Not After : Jul 16 14:07:52 2026 GMT
        Subject: CN=43377C0F034925E7B38CDE739974BBD1C946CCEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:db:88:eb:d6:9d:c1:a4:16:30:7c:ad:4f:86:
                    30:b7:66:bb:d0:54:87:45:42:b4:cd:36:5d:9e:ee:
                    99:6b:d6:b1:4d:f4:9f:17:17:5b:98:00:6e:89:8f:
                    96:30:83:8a:a2:c1:a7:61:d8:3d:b8:aa:6b:ed:d8:
                    ba:55:d1:ed:1a:27:4d:34:16:a4:50:e0:6e:31:e6:
                    2b:72:e4:ff:a4:e8:ff:3d:ee:56:6c:59:40:f2:6f:
                    ea:fe:df:7b:d1:50:8a:3f:50:47:7d:e5:41:ef:f8:
                    cf:61:71:27:d2:9b:29:38:21:26:95:2b:cb:39:cb:
                    c4:cf:c7:dc:07:63:ff:22:9b:99:be:6c:34:81:92:
                    9a:cb:89:62:6b:ea:7f:65:83:d6:20:d1:bf:cd:20:
                    96:65:aa:23:17:14:6d:b5:2d:c6:f5:0b:d9:78:ad:
                    40:2a:06:cb:bf:7f:aa:2b:e3:63:01:9f:3b:81:29:
                    12:cf:55:f9:de:72:9c:2a:72:38:d1:44:e5:7d:89:
                    e9:7a:a6:4e:08:de:93:a7:db:44:59:24:f0:d0:4f:
                    1c:e0:9b:8a:91:81:d5:81:f1:4c:4e:85:cb:d7:ae:
                    5b:28:6d:3e:25:6e:17:79:ff:f1:2e:35:9a:09:73:
                    d1:81:26:f0:e0:e4:2f:a1:39:06:d0:2c:0f:a1:9d:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:37:7C:0F:03:49:25:E7:B3:8C:DE:73:99:74:BB:D1:C9:46:CC:EE
            X509v3 Authority Key Identifier:
                keyid:EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/323830343a356361303a3a2f33322d313238203d3e20323638393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:ee:d3:79:1e:a2:92:b7:cc:93:42:f6:a8:4b:ac:d0:44:2c:
         4e:bc:d4:5f:ad:18:2d:c8:8c:37:83:d8:6f:34:34:fa:7b:fa:
         09:ca:8d:96:27:43:18:fc:1f:ad:01:1e:94:65:f0:73:3c:87:
         5e:ac:6a:bb:91:c4:9a:f2:1b:e3:38:2c:f3:2f:44:b1:0e:bc:
         2b:7e:81:b8:8e:f8:0d:d8:bf:4c:5c:21:23:ca:30:87:e0:66:
         47:b6:91:fb:1c:c5:29:d1:15:1b:e1:f2:eb:1d:1a:03:15:e6:
         34:56:5d:52:be:e2:73:e6:db:a8:30:17:ee:eb:f7:b4:78:96:
         a9:47:5d:a7:09:23:d2:c8:2c:90:ff:9e:82:03:57:ea:9c:1a:
         77:27:c3:1a:32:3b:57:84:9d:52:d8:56:89:a6:04:3c:1e:94:
         27:80:db:e8:23:5c:9e:2c:dc:c2:ba:5b:8f:6f:5c:9c:71:8c:
         96:bf:62:eb:f4:88:43:9d:93:07:3d:42:c2:d3:05:48:59:19:
         9f:9d:7e:4a:5c:00:8b:5d:01:06:9c:a3:a6:3a:46:64:59:e1:
         b8:dd:7a:95:6f:6a:59:0a:d6:81:76:e2:7c:5f:52:0c:17:68:
         e8:57:20:94:09:5c:24:c2:a5:aa:bd:a4:ee:e0:03:20:6c:3b:
         d2:be:ec:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:06 2025 by rpki-client