Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/323830343a323566383a3a2f33322d313238203d3e20323634333135.roa
File:                     323830343a323566383a3a2f33322d313238203d3e20323634333135.roa (raw, json)
Hash identifier:          1KthrIa60igSCZtKVf+DVJcgC6oFsB1IOVzRTY1jw9s=
Subject key identifier:   D8:88:A8:22:67:2C:F0:C3:E3:48:5F:6B:51:0B:5C:9A:EA:F3:D1:6F
Certificate issuer:       /CN=66A56D870457AAEA1EED831D71D318FB7DA99B42
Certificate serial:       3EB2932D4B7D226391C7F309853AE4ABA6B516EA
Authority key identifier: 66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/323830343a323566383a3a2f33322d313238203d3e20323634333135.roa
Signing time:             Fri 22 Aug 2025 02:05:34 +0000
ROA not before:           Fri 22 Aug 2025 02:00:34 +0000
ROA not after:            Fri 21 Aug 2026 02:05:34 +0000
asID:                     264315
IP address blocks:        2804:25f8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.crl
                          rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 16:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b2:93:2d:4b:7d:22:63:91:c7:f3:09:85:3a:e4:ab:a6:b5:16:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66A56D870457AAEA1EED831D71D318FB7DA99B42
        Validity
            Not Before: Aug 22 02:00:34 2025 GMT
            Not After : Aug 21 02:05:34 2026 GMT
        Subject: CN=D888A822672CF0C3E3485F6B510B5C9AEAF3D16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:51:55:b1:48:99:b5:cb:33:3b:84:8a:af:
                    e4:fd:bb:53:33:8c:22:5f:b0:ae:4c:f4:68:44:db:
                    ad:01:c6:75:c3:9e:36:00:8e:c0:bd:a6:d2:d5:64:
                    ec:cf:48:54:10:0c:81:b7:de:fe:83:85:a9:c9:d0:
                    2b:7f:61:54:4e:a4:fa:76:6f:b1:b7:6f:2e:27:f1:
                    e6:9b:ca:a9:05:f1:85:a6:17:67:2d:18:22:95:6d:
                    f2:76:b8:8b:d2:6b:6e:7c:29:10:5d:63:0e:26:3a:
                    53:bb:a8:0a:90:e6:a2:7c:26:37:80:61:2c:fa:af:
                    db:43:7a:4b:5d:7f:97:38:a1:53:cd:c7:ad:bb:cb:
                    05:7e:46:df:05:b2:28:45:61:13:98:d4:a2:b3:e1:
                    0a:c6:40:89:2c:fa:1c:15:35:2e:13:7a:c4:4d:11:
                    2b:b3:b9:f2:79:05:80:45:32:af:66:1e:83:93:fe:
                    a9:41:c9:be:21:fb:72:a6:96:29:bd:66:ae:94:6b:
                    55:d9:b2:53:99:c1:1b:f7:15:9f:bf:e2:ca:b1:7b:
                    1e:07:d0:95:1a:91:83:71:7d:fd:45:d8:31:d6:1c:
                    7e:6c:01:2a:c2:1e:a7:73:cd:89:8a:88:ae:a8:8e:
                    0a:b7:ec:2f:7d:f0:f5:e9:63:5e:10:51:7b:ec:d5:
                    c5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:88:A8:22:67:2C:F0:C3:E3:48:5F:6B:51:0B:5C:9A:EA:F3:D1:6F
            X509v3 Authority Key Identifier:
                keyid:66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/323830343a323566383a3a2f33322d313238203d3e20323634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:d0:68:52:e0:34:80:62:38:03:a9:52:c5:4c:fa:93:b1:5e:
         11:64:24:dd:39:8f:1c:fb:61:6f:6d:f4:3f:52:35:b3:9b:d7:
         a6:c5:14:e6:44:3c:8b:57:8f:2a:2c:b2:66:60:0d:9a:9c:95:
         f9:38:be:89:69:5d:05:f9:41:96:77:27:77:ec:ba:ca:86:34:
         66:0b:6a:83:d4:4a:4f:78:64:fb:6c:8f:b3:0b:a8:6f:fa:68:
         e6:85:4f:eb:d3:0b:51:6a:8f:4d:fd:c3:b7:2f:87:d0:c5:ce:
         e1:d5:d5:31:67:f4:8d:11:05:aa:c4:11:7a:ec:95:e1:c2:f2:
         4d:08:b3:80:ac:39:67:39:ca:df:8e:bf:af:01:42:c1:84:02:
         94:73:88:37:17:79:20:37:99:56:59:4d:16:f2:ab:b3:cc:df:
         a3:96:e9:a8:59:8c:c3:a8:b8:54:55:98:0e:b8:95:79:ce:c3:
         8d:96:f1:f6:1e:08:b4:11:eb:1d:93:3f:65:38:47:37:ea:6b:
         19:4e:5c:e0:bd:31:a6:fd:ba:98:29:33:e0:07:30:ff:42:cb:
         3f:bc:99:b4:92:5d:a0:cf:15:a9:a7:e1:38:c0:7c:68:75:f9:
         a8:10:2b:64:25:37:bd:9f:ec:fe:3d:0d:d6:7e:5e:a1:a1:9d:
         fe:4a:88:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:23:25 2025 by rpki-client