Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/323830343a313436383a3a2f33322d313238203d3e20323633333238.roa
File:                     323830343a313436383a3a2f33322d313238203d3e20323633333238.roa (raw, json)
Hash identifier:          lIWoaWPRD7cTnw+iHZt+t0X5Bt1zi7EWPtPHof7Zl3k=
Subject key identifier:   03:A8:13:28:83:41:9D:9C:DB:DE:1B:D5:2B:B7:A1:2F:33:0F:D6:1E
Certificate issuer:       /CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
Certificate serial:       3D8D08BE5237973D1E2D899DCFD10F3D76B7B7EC
Authority key identifier: 2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/323830343a313436383a3a2f33322d313238203d3e20323633333238.roa
Signing time:             Tue 19 Aug 2025 13:25:13 +0000
ROA not before:           Tue 19 Aug 2025 13:20:13 +0000
ROA not after:            Tue 18 Aug 2026 13:25:13 +0000
asID:                     263328
IP address blocks:        2804:1468::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl
                          rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8d:08:be:52:37:97:3d:1e:2d:89:9d:cf:d1:0f:3d:76:b7:b7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
        Validity
            Not Before: Aug 19 13:20:13 2025 GMT
            Not After : Aug 18 13:25:13 2026 GMT
        Subject: CN=03A8132883419D9CDBDE1BD52BB7A12F330FD61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:81:99:54:e9:91:13:5b:81:72:b5:91:b5:
                    28:d8:f6:93:84:e1:6c:66:55:a4:a4:7f:76:80:68:
                    e5:71:d9:17:0c:c1:6d:78:8c:b6:6d:fd:4f:f9:d3:
                    fc:4e:6d:80:7e:19:c8:15:40:9a:c7:2d:5f:e6:78:
                    a0:95:6b:d9:8f:7b:4f:37:f6:a7:17:b7:b7:ea:4b:
                    3e:9a:9f:dd:b4:c9:8d:ff:f9:e9:c0:6b:6a:44:92:
                    5c:fd:df:98:9d:54:ce:34:be:76:df:83:dc:c3:d3:
                    b8:ee:5a:97:68:33:60:06:ce:d6:3a:db:0c:a7:53:
                    2c:ff:99:f8:a4:3d:32:ea:cb:c8:c4:83:5c:09:8e:
                    2a:4c:4d:49:48:a6:c8:96:14:c0:a0:dd:0f:b3:9e:
                    de:23:14:3e:6f:69:f9:21:48:a7:3f:ca:23:a4:2e:
                    9f:42:33:7d:f8:7d:6b:f7:ae:e6:c9:a9:2e:b4:ba:
                    c2:9f:80:cd:f0:6f:7a:28:d9:67:b1:10:35:7f:61:
                    ec:88:1f:df:53:90:a5:a7:64:79:b2:d9:b0:0b:8a:
                    7a:04:2a:25:f1:92:32:bd:ab:2f:c9:30:46:91:28:
                    06:97:a3:58:e3:f3:af:5d:14:ec:88:aa:88:f3:9f:
                    fe:05:52:27:01:ce:99:83:f5:92:24:f0:98:bb:8d:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A8:13:28:83:41:9D:9C:DB:DE:1B:D5:2B:B7:A1:2F:33:0F:D6:1E
            X509v3 Authority Key Identifier:
                keyid:2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/323830343a313436383a3a2f33322d313238203d3e20323633333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1468::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:37:60:aa:39:05:c5:43:98:d2:2e:5e:80:63:a9:e7:9c:6d:
         80:7d:a0:64:91:f3:0b:dc:9f:1a:1d:7e:28:57:b9:60:79:08:
         ca:1e:63:ce:a0:4d:4b:aa:f2:0f:e9:eb:df:ca:ed:d9:9a:8a:
         85:64:b7:1b:5d:df:94:ad:05:71:43:ef:85:95:b2:0c:89:33:
         32:e6:50:cb:a4:6e:f4:16:90:b0:c7:12:72:aa:6e:04:7a:75:
         8a:05:d4:18:74:d5:ae:3e:28:70:19:8e:19:a5:d2:61:5d:5a:
         95:67:5f:ab:0b:21:7f:00:f6:76:50:e4:70:c5:53:d3:26:c4:
         a0:a4:e2:1d:fe:93:b4:ef:1c:8a:3b:4e:f5:10:eb:47:2e:d1:
         51:76:c5:68:f7:e6:60:d6:76:53:41:5b:c9:c2:f2:92:ed:ce:
         25:96:7c:97:d7:a0:e0:c4:1b:d7:c8:1a:f6:cb:fd:db:66:2c:
         ef:f8:eb:d9:3d:ea:3c:44:cd:c3:0f:61:00:17:d3:29:c3:a6:
         d4:d7:49:58:05:48:a8:e0:a9:96:d2:eb:21:74:95:01:53:69:
         36:87:b3:80:4a:ff:dc:be:17:d1:fa:df:74:f4:c2:3f:d0:ae:
         0e:b9:17:1e:0a:be:05:c1:e7:38:fa:68:13:a7:d4:d4:e1:3b:
         67:46:9e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:14:56 2025 by rpki-client