Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/323830343a326430303a3a2f33322d313238203d3e20323635323536.roa
File:                     323830343a326430303a3a2f33322d313238203d3e20323635323536.roa (raw, json)
Hash identifier:          lTDp35CajjaJ1HueGsEzQsHE3E7Hk8+M3O6e4ExMfLs=
Subject key identifier:   16:B6:EE:D1:1F:83:C6:D9:B7:73:0C:2C:26:9E:26:8B:B5:47:3A:F2
Certificate issuer:       /CN=1D98467C905A92172F884A0A1419F30237985451
Certificate serial:       6AFEE7BF727ACEC198FE981E71105BC368C43AEE
Authority key identifier: 1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/323830343a326430303a3a2f33322d313238203d3e20323635323536.roa
Signing time:             Wed 13 Aug 2025 10:06:03 +0000
ROA not before:           Wed 13 Aug 2025 10:01:03 +0000
ROA not after:            Wed 12 Aug 2026 10:06:03 +0000
asID:                     265256
IP address blocks:        2804:2d00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/1D98467C905A92172F884A0A1419F30237985451.crl
                          rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/1D98467C905A92172F884A0A1419F30237985451.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fe:e7:bf:72:7a:ce:c1:98:fe:98:1e:71:10:5b:c3:68:c4:3a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D98467C905A92172F884A0A1419F30237985451
        Validity
            Not Before: Aug 13 10:01:03 2025 GMT
            Not After : Aug 12 10:06:03 2026 GMT
        Subject: CN=16B6EED11F83C6D9B7730C2C269E268BB5473AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:1b:15:49:45:b3:7f:2c:6e:58:13:fb:3c:
                    15:b1:9a:d7:d1:15:be:4f:5b:15:18:1c:b7:79:9c:
                    a5:0c:f8:49:93:79:dd:89:cf:e6:36:86:72:af:5e:
                    6c:e7:53:d5:a6:ce:6c:8c:1f:df:61:10:c9:ef:12:
                    f5:88:17:3a:24:1e:9a:b9:56:9e:47:71:0c:da:02:
                    aa:25:1c:a7:52:8f:2d:0e:1d:40:7c:86:32:1d:02:
                    12:c7:42:82:b8:42:37:70:a1:51:c8:58:ad:27:7a:
                    32:d1:97:54:78:69:f3:74:ce:47:11:54:b1:fb:63:
                    1d:ae:ce:3e:5f:44:bf:a2:d5:87:a0:8f:cc:87:ee:
                    e9:24:f0:42:06:6e:92:13:54:9f:32:24:d4:8e:f0:
                    83:4f:47:a2:f6:db:49:6e:eb:b2:2e:44:b2:79:f5:
                    e4:f1:07:c1:56:c5:3a:c4:75:71:28:8f:c5:37:ba:
                    92:6a:9b:b1:ee:ed:33:81:44:88:13:14:ba:a5:c9:
                    46:0e:e3:8e:77:0c:7f:d7:c2:5e:8d:d2:6a:1a:c5:
                    82:f9:ca:0c:77:7c:c6:e5:1b:10:7a:b2:71:54:20:
                    43:ac:ba:f1:08:7f:b6:d5:c5:9f:32:b6:53:9e:ad:
                    4e:16:7a:7b:0d:57:f6:70:a3:ce:39:ae:60:12:e8:
                    a0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B6:EE:D1:1F:83:C6:D9:B7:73:0C:2C:26:9E:26:8B:B5:47:3A:F2
            X509v3 Authority Key Identifier:
                keyid:1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/1D98467C905A92172F884A0A1419F30237985451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/323830343a326430303a3a2f33322d313238203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:32:1b:1a:d2:96:39:51:2e:f7:56:9f:a2:2a:b3:31:9b:32:
         ab:78:31:43:26:e0:32:41:97:1a:4c:16:7d:1c:d3:e9:ea:47:
         eb:39:49:48:dc:a8:cc:ea:49:4e:8f:fe:61:4e:e0:00:5c:80:
         ee:14:90:9e:ab:96:34:85:c2:15:69:9b:a9:04:e7:70:63:a1:
         dd:ba:e6:71:54:8b:0b:8a:5b:ba:2e:53:4c:d5:b2:ce:52:1b:
         d5:81:51:64:d1:b0:c8:1c:8e:2a:00:a0:86:2e:dd:d6:df:4a:
         8b:17:c1:5f:b9:8b:53:fc:72:b7:ae:65:8d:68:e1:2b:e5:55:
         64:98:30:58:b2:11:34:98:3f:b5:7e:e3:e1:6d:d4:a2:61:1e:
         a6:24:f8:1b:5a:c0:3f:95:33:10:ee:ad:96:7f:f2:61:0c:48:
         0a:cf:32:ab:7d:a8:41:90:b0:45:3d:6a:2f:38:a0:f2:aa:aa:
         ec:5e:53:98:a2:2b:37:c3:1e:e9:b5:76:2f:ba:b2:56:ee:92:
         6b:19:f8:4b:0f:44:75:c5:22:8b:fa:0b:6a:73:af:0b:bd:e8:
         2c:09:83:89:3c:8d:ba:2f:63:79:15:f9:53:df:65:bb:90:37:
         e8:1d:bd:20:24:dc:cb:32:ec:0c:3f:21:6f:03:d3:d0:51:21:
         39:27:63:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:25:57 2025 by rpki-client