Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/323830343a383861633a3130303a3a2f34382d3438203d3e20323732373836.roa
File:                     323830343a383861633a3130303a3a2f34382d3438203d3e20323732373836.roa (raw, json)
Hash identifier:          YsQ9T1+xY671WV+1diy4RqXoPeKtl/SwwqfLuciRrb8=
Subject key identifier:   6E:08:E1:D7:8E:4F:1C:45:9F:08:01:2B:70:71:48:74:45:27:06:D0
Certificate issuer:       /CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
Certificate serial:       5F248F609FBCE02B1E2FDCCBCCDA158AE71A792C
Authority key identifier: 58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/323830343a383861633a3130303a3a2f34382d3438203d3e20323732373836.roa
Signing time:             Thu 14 Aug 2025 12:47:52 +0000
ROA not before:           Thu 14 Aug 2025 12:42:52 +0000
ROA not after:            Thu 13 Aug 2026 12:47:52 +0000
asID:                     272786
IP address blocks:        2804:88ac:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl
                          rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:24:8f:60:9f:bc:e0:2b:1e:2f:dc:cb:cc:da:15:8a:e7:1a:79:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
        Validity
            Not Before: Aug 14 12:42:52 2025 GMT
            Not After : Aug 13 12:47:52 2026 GMT
        Subject: CN=6E08E1D78E4F1C459F08012B70714874452706D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:7c:d0:af:7d:f8:e6:82:d6:b8:0a:ef:df:
                    cf:22:00:0f:ca:2e:fd:88:2c:d4:33:4f:30:b9:59:
                    f2:bc:9f:0a:24:1d:a4:54:ff:58:2b:5c:71:bf:e7:
                    ae:0d:05:0d:a4:ba:79:b3:b7:9a:73:24:45:22:4d:
                    4f:07:16:43:bb:70:7a:73:7b:f9:02:c1:67:96:3f:
                    91:91:c7:0e:5b:bd:d3:05:44:5c:34:f2:00:ab:39:
                    93:07:10:31:d7:bc:18:20:e7:7f:2d:91:ca:7c:a7:
                    1c:41:e4:60:96:29:15:51:cc:d5:41:e9:e5:4a:e7:
                    34:41:39:5f:2f:ca:2a:9e:d0:c6:dd:72:16:84:d2:
                    f9:69:66:fe:50:40:c1:64:88:6c:87:de:71:c1:76:
                    9f:c1:54:32:57:f0:84:0b:04:ba:85:c1:57:c3:21:
                    6d:a1:b5:af:21:b0:a7:21:ac:4e:2f:d9:ba:9b:ce:
                    ad:42:af:8f:27:99:ae:a9:e5:15:ef:10:06:18:97:
                    71:c3:02:7f:13:5b:76:19:ae:81:3c:98:b1:f6:74:
                    d8:ac:43:7d:ed:99:60:dc:f7:b1:97:2b:c0:f7:bd:
                    5c:25:d8:ee:55:81:a0:d1:2d:aa:fb:48:17:4d:8b:
                    44:b7:18:01:db:6d:46:21:49:21:64:60:c3:49:65:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:08:E1:D7:8E:4F:1C:45:9F:08:01:2B:70:71:48:74:45:27:06:D0
            X509v3 Authority Key Identifier:
                keyid:58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/323830343a383861633a3130303a3a2f34382d3438203d3e20323732373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88ac:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:a9:7f:b6:21:2f:b8:03:29:13:ed:63:ed:92:c2:49:3a:f3:
         31:36:bd:6b:e8:c4:7c:0d:85:61:87:5e:3f:97:58:6c:a3:7f:
         89:66:14:d6:91:7f:7a:2d:a2:4b:8e:90:58:d4:97:c3:0d:72:
         96:22:3f:75:5e:9a:45:43:f0:32:2c:69:51:5c:38:74:00:8f:
         57:aa:7a:a7:d8:af:40:38:2f:51:ef:d4:25:e3:67:0c:65:23:
         34:ca:40:42:ca:de:79:08:b2:6e:5e:b8:e4:48:27:f0:17:65:
         47:a4:97:90:63:3b:c2:51:5e:9d:3e:a7:7c:4e:f3:5f:73:83:
         19:e6:18:96:5f:9f:fa:b4:c0:09:b0:ae:33:b7:43:96:b5:d4:
         c2:cf:23:e4:29:21:80:dd:fa:df:81:4d:8b:d3:48:73:8d:81:
         b1:40:60:c4:17:85:4d:13:3c:70:67:68:4d:83:c9:cf:9b:bb:
         ee:f3:48:19:e0:c4:a9:f0:7a:0d:f8:da:cd:dc:53:99:3b:57:
         a6:b4:05:dd:1d:bc:21:66:c4:0f:45:32:e9:1f:b4:ab:56:f9:
         a3:be:f0:5b:af:8d:eb:3a:5b:fe:0b:97:86:c7:19:9e:d3:09:
         2a:23:2c:2c:46:51:0c:84:26:b0:9c:01:d9:e6:c8:55:a9:57:
         a6:1d:60:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:44:15 2025 by rpki-client