Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/323830343a323161633a3a2f33322d3438203d3e20323634353636.roa
File:                     323830343a323161633a3a2f33322d3438203d3e20323634353636.roa (raw, json)
Hash identifier:          dPw20xtmm86hyCLFcZJr3ROslC6L3PsgVD3NDGMyZCs=
Subject key identifier:   0C:04:A3:82:ED:48:6D:80:BA:67:D9:46:FD:EB:1B:66:86:3B:CD:26
Certificate issuer:       /CN=E1DD14E8495BF2D38A907AB140A4657BB4715587
Certificate serial:       603124BD4C8CB9ACDC4E8F4D518E2934A49D4146
Authority key identifier: E1:DD:14:E8:49:5B:F2:D3:8A:90:7A:B1:40:A4:65:7B:B4:71:55:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1DD14E8495BF2D38A907AB140A4657BB4715587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/323830343a323161633a3a2f33322d3438203d3e20323634353636.roa
Signing time:             Wed 24 Sep 2025 18:47:26 +0000
ROA not before:           Wed 24 Sep 2025 18:42:26 +0000
ROA not after:            Wed 23 Sep 2026 18:47:26 +0000
asID:                     264566
IP address blocks:        2804:21ac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E1DD14E8495BF2D38A907AB140A4657BB4715587.crl
                          rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E1DD14E8495BF2D38A907AB140A4657BB4715587.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1DD14E8495BF2D38A907AB140A4657BB4715587.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 22:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:31:24:bd:4c:8c:b9:ac:dc:4e:8f:4d:51:8e:29:34:a4:9d:41:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DD14E8495BF2D38A907AB140A4657BB4715587
        Validity
            Not Before: Sep 24 18:42:26 2025 GMT
            Not After : Sep 23 18:47:26 2026 GMT
        Subject: CN=0C04A382ED486D80BA67D946FDEB1B66863BCD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:dd:97:4e:69:27:0b:2b:a7:1e:8f:c2:a2:
                    d9:b9:33:8f:8c:d0:c1:ca:f8:24:1b:bb:77:a9:36:
                    4e:13:d9:4d:a1:ed:5b:1a:a4:d5:37:73:cf:ae:0c:
                    2d:4c:ec:b9:a1:3c:f6:85:9a:69:07:37:02:e9:86:
                    2f:22:06:00:f1:95:3f:34:d9:b7:f0:7d:f8:1a:83:
                    46:0d:fe:6b:30:5c:f1:b7:7b:e3:64:20:e1:50:17:
                    89:e2:f6:62:74:5d:3c:39:46:23:1d:7a:b0:22:7f:
                    6e:6b:3e:65:bd:c6:c7:78:97:3c:5f:03:f7:cf:6f:
                    65:bf:fa:83:da:7a:a2:3a:08:01:63:1f:ca:ae:a9:
                    98:5a:9e:24:31:40:a8:09:be:2a:09:7e:c3:e9:8b:
                    cf:72:6b:a7:06:f2:02:30:08:42:22:23:eb:ac:95:
                    e8:1f:38:5c:dd:91:e1:38:dd:48:cc:0a:50:61:d3:
                    79:e0:61:ae:62:82:06:56:81:98:20:2d:84:2d:8b:
                    01:b5:a2:2c:4d:3d:a3:d7:ca:6f:5e:95:6f:5e:b6:
                    94:26:6b:35:a3:fc:09:c9:ad:3d:96:8b:f5:45:37:
                    b0:b7:17:f1:19:13:b4:7b:a8:b1:4f:19:53:e9:9a:
                    38:8f:ed:90:75:47:6e:a5:73:7f:b2:cd:5c:41:57:
                    37:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:04:A3:82:ED:48:6D:80:BA:67:D9:46:FD:EB:1B:66:86:3B:CD:26
            X509v3 Authority Key Identifier:
                keyid:E1:DD:14:E8:49:5B:F2:D3:8A:90:7A:B1:40:A4:65:7B:B4:71:55:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E1DD14E8495BF2D38A907AB140A4657BB4715587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1DD14E8495BF2D38A907AB140A4657BB4715587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/323830343a323161633a3a2f33322d3438203d3e20323634353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:6f:cb:35:c9:e2:ad:7a:6d:50:38:f5:6b:bc:36:bf:72:65:
         e3:2e:22:7c:38:13:af:3a:94:b1:9a:dc:c7:1a:a2:2f:72:b3:
         55:4f:05:8c:30:b1:57:a6:cb:d9:a9:d0:28:5b:c4:9b:ac:68:
         a7:a7:8a:14:bb:43:d1:cd:19:a8:61:71:55:c1:24:33:dc:8f:
         6d:6f:7f:d0:a8:1d:49:3f:ee:97:0e:32:26:97:86:78:e1:52:
         e0:96:9f:76:48:7c:20:83:a5:63:4a:9e:87:a4:f2:ab:56:b8:
         06:79:51:21:2c:4e:39:b4:e1:1f:a2:62:1e:00:37:56:b5:a9:
         49:6a:fd:a6:6f:cf:18:1c:c0:8c:dc:c5:a0:2d:44:a8:33:63:
         12:65:ed:0e:62:08:31:f9:79:fb:1c:f7:b9:47:b2:33:45:ac:
         21:e7:63:27:9e:e8:03:61:7d:50:7f:c8:91:a9:cc:1d:b0:1e:
         9b:63:1b:4c:a1:99:c0:c9:51:c2:67:c9:d0:4a:09:42:cf:57:
         fa:b2:0c:a7:85:7b:bc:96:f9:30:20:e9:9c:45:5c:a5:2c:29:
         e5:12:f8:24:17:80:f0:78:4a:25:af:cc:6c:df:ae:11:ad:ab:
         ca:6f:60:19:9c:3f:ff:7e:85:ba:35:24:8f:c4:d8:41:d5:f3:
         7d:3a:12:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:50:46 2025 by rpki-client