Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a313830303a3a2f34382d3438203d3e2032373136.roa
File:                     323830343a303a313830303a3a2f34382d3438203d3e2032373136.roa (raw, json)
Hash identifier:          L4zi7U5EJknj4TEOIBRbA1KaQUzn1e/l5yBe/aSeDig=
Subject key identifier:   F6:85:0C:20:13:07:F2:EE:91:D5:1A:3E:DA:89:53:D2:00:F0:E2:40
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       2CB3D9DC6D771FBD569CEFB58A4EC4E45E130B2B
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a313830303a3a2f34382d3438203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:05 +0000
ROA not before:           Tue 22 Jul 2025 15:04:05 +0000
ROA not after:            Tue 21 Jul 2026 15:09:05 +0000
asID:                     2716
IP address blocks:        2804:0:1800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b3:d9:dc:6d:77:1f:bd:56:9c:ef:b5:8a:4e:c4:e4:5e:13:0b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:05 2025 GMT
            Not After : Jul 21 15:09:05 2026 GMT
        Subject: CN=F6850C201307F2EE91D51A3EDA8953D200F0E240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:2d:93:2c:7e:10:92:81:cc:c4:67:81:d2:
                    89:84:de:c6:85:99:29:cb:13:20:d7:ef:ab:59:6f:
                    f3:33:8f:dd:27:a7:04:bc:de:35:81:58:52:84:91:
                    ea:c4:f4:10:6e:58:31:02:d6:e1:09:b0:17:e1:e8:
                    70:90:4e:00:5a:a5:1a:fe:ef:8e:42:3d:10:76:f2:
                    80:f6:72:3c:97:4f:56:d6:f6:85:75:1a:0a:25:fe:
                    41:e5:fb:16:2c:87:e1:ca:7d:58:8e:ca:b7:43:11:
                    c3:eb:1f:7e:1b:06:54:0a:10:48:ae:41:7a:ff:16:
                    3a:d4:ce:df:21:29:33:36:e9:af:3d:23:e9:35:f7:
                    38:46:7d:a7:9f:f3:dc:a8:cd:23:07:7d:86:5a:d0:
                    28:59:b1:0d:20:a5:86:99:e4:ac:97:50:9e:4a:47:
                    9d:04:99:ca:13:d7:71:6f:8e:7d:53:46:94:65:6e:
                    c6:9a:cc:22:89:ef:65:4b:97:bd:72:a5:3a:c2:9b:
                    9a:54:00:7f:1d:b6:42:26:93:12:c1:ae:65:64:33:
                    9b:4c:49:59:41:a7:ea:13:4a:47:23:db:27:7f:99:
                    79:c5:bc:49:2f:87:8a:58:e1:4e:b8:e1:be:33:fd:
                    bb:59:5f:3b:71:3c:be:c9:10:c6:3a:23:f0:9c:0a:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:85:0C:20:13:07:F2:EE:91:D5:1A:3E:DA:89:53:D2:00:F0:E2:40
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a313830303a3a2f34382d3438203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:0:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:88:a9:2a:42:3d:2d:57:87:ff:ec:47:57:e7:44:a2:ca:59:
         e0:18:e2:ef:4c:0f:c7:ce:58:77:90:a5:2f:dc:91:81:87:82:
         1a:f3:08:e2:85:f4:84:e3:11:7b:4d:4f:00:0a:23:b5:23:16:
         37:32:49:3e:18:17:4e:d0:93:7b:cb:68:61:93:f1:ed:d5:31:
         b0:a2:79:4b:1d:57:bf:ba:ae:2b:e5:1c:0c:1d:83:a1:c7:9d:
         c3:8b:8a:66:81:ef:a2:87:6d:bf:72:2b:99:16:bd:93:f8:5b:
         f6:ed:ad:95:f2:c6:fb:26:71:bc:8f:08:61:7b:e4:ca:08:30:
         cf:03:4a:65:80:5b:bb:1b:62:ef:da:b0:8e:0f:b0:00:8d:5d:
         ff:72:31:61:cf:48:b6:37:f1:8f:38:78:1d:5d:3c:f5:75:91:
         99:6e:26:a3:0a:ea:d9:e4:6d:cb:eb:5a:7b:db:6f:5d:ec:a5:
         c6:a5:f8:72:dc:77:d4:61:39:aa:59:4b:77:72:35:b9:56:34:
         23:01:5f:b2:2c:54:49:07:16:22:42:51:c1:d6:24:94:c2:2c:
         83:9a:66:00:45:4c:06:16:a0:b5:1a:ae:b7:24:94:c3:a8:dd:
         78:e2:31:ab:e0:4f:ec:16:23:51:c4:f9:c0:6a:16:ba:25:2c:
         31:3d:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:41:13 2025 by rpki-client