Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa
File:                     323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa (raw, json)
Hash identifier:          zJ/gu+N2D9C3aJqcNLdbNp7NFP0Bdz6TUReMakVtZOI=
Subject key identifier:   AE:F4:8A:23:6A:0B:F4:DA:BB:5B:5D:65:B9:75:1E:54:9E:89:68:15
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       047E938E31134B74E78D67E16236D23B66B9FEB4
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:06 +0000
ROA not before:           Tue 22 Jul 2025 15:04:06 +0000
ROA not after:            Tue 21 Jul 2026 15:09:06 +0000
asID:                     2716
IP address blocks:        2804:0:1c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7e:93:8e:31:13:4b:74:e7:8d:67:e1:62:36:d2:3b:66:b9:fe:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:06 2025 GMT
            Not After : Jul 21 15:09:06 2026 GMT
        Subject: CN=AEF48A236A0BF4DABB5B5D65B9751E549E896815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:8b:25:56:72:37:7c:c1:13:8b:13:15:02:
                    f5:64:42:9a:15:80:1e:36:dd:17:3e:56:16:a4:18:
                    69:7c:80:6e:10:43:bd:92:6c:d0:b1:19:bb:b5:67:
                    ca:76:db:51:93:e8:0c:2d:e8:e6:48:e4:df:10:31:
                    2e:d8:4e:a9:70:b3:1a:7b:ec:49:4b:ac:5c:97:9b:
                    86:d9:37:9c:d0:f3:d0:b2:21:b9:b7:03:46:0f:42:
                    49:4e:24:8f:11:29:ad:3d:67:0a:55:6b:fb:d7:34:
                    40:2e:34:53:5e:a4:4a:70:d2:c3:38:57:1a:44:61:
                    65:0c:63:51:6a:0d:24:dc:c9:1a:42:f6:58:3a:b0:
                    37:df:0e:5f:e2:9c:1e:f0:47:3e:88:96:0a:cf:c0:
                    16:be:76:c1:fb:c6:b4:59:f5:c4:20:53:38:07:1b:
                    d4:3f:e6:0c:48:ba:a3:bb:3e:e7:f5:5d:69:5d:44:
                    f2:38:06:51:0c:ae:63:72:a9:81:45:93:77:8c:a1:
                    c9:3d:fb:9d:8b:88:ce:ee:75:f7:0c:c1:a2:8c:26:
                    29:8f:73:2a:d1:47:58:4d:d9:4f:a2:4e:f4:9c:af:
                    ee:cf:49:3c:7b:c4:5c:f1:a2:13:d7:7f:a7:01:67:
                    d9:00:9c:fd:3b:a9:6b:87:b5:fb:11:5b:05:d1:dc:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F4:8A:23:6A:0B:F4:DA:BB:5B:5D:65:B9:75:1E:54:9E:89:68:15
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:0:1c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:6c:15:a7:21:8a:f8:e7:a0:89:0d:45:19:b5:18:a9:66:7d:
         a4:f4:9d:d6:d4:b3:72:c4:fc:fe:64:6c:62:e9:16:55:2f:0b:
         9d:3e:79:03:e1:af:a6:4c:ca:58:4f:b8:e1:1d:4c:ba:ee:9e:
         03:ff:31:37:13:8e:18:94:53:a2:2e:c4:1a:d4:ef:9f:dd:ae:
         68:9c:cb:a1:5b:c7:99:bd:65:c7:44:0a:e5:79:e1:3c:51:63:
         7a:76:cf:65:04:58:02:e2:4a:e2:64:a5:e1:b9:fc:51:86:c0:
         04:05:72:0f:65:80:b1:a9:89:1e:eb:f6:36:24:0b:70:b6:78:
         b9:fe:2a:c3:46:fa:8b:a5:b1:d8:99:a1:dd:58:71:e2:e9:7d:
         b2:55:99:4d:27:11:92:d3:d9:9f:b8:86:db:6b:7f:d0:c7:97:
         46:c8:ce:8b:9a:30:bb:61:60:84:3c:ec:3e:1f:32:f3:04:86:
         93:8a:68:ad:82:45:cf:6d:5b:80:64:c6:a2:ce:9d:37:86:c9:
         d1:fe:20:b1:5e:05:b9:f5:14:9a:5e:b0:54:00:41:d1:1a:2d:
         4d:7c:2f:74:e9:7e:2e:46:ee:ec:56:6e:27:a4:79:8d:46:cd:
         bb:ae:3b:fa:79:16:68:02:e1:59:b4:20:de:81:b7:bf:c2:ee:
         c0:19:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:40:42 2025 by rpki-client