Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a3a2f33322d3332203d3e2032373136.roa
File:                     323830343a3a2f33322d3332203d3e2032373136.roa (raw, json)
Hash identifier:          1Wyx5NYskrUAbLdvoch7ANwnmcpHmlf6p58gNhhkr10=
Subject key identifier:   49:5E:AE:A6:7C:DC:81:88:91:29:FE:B3:5A:7E:46:99:29:94:97:23
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       569635890C696CC62D9B4F0D4D9860EA5223B807
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a3a2f33322d3332203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:04 +0000
ROA not before:           Tue 22 Jul 2025 15:04:04 +0000
ROA not after:            Tue 21 Jul 2026 15:09:04 +0000
asID:                     2716
IP address blocks:        2804::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:96:35:89:0c:69:6c:c6:2d:9b:4f:0d:4d:98:60:ea:52:23:b8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:04 2025 GMT
            Not After : Jul 21 15:09:04 2026 GMT
        Subject: CN=495EAEA67CDC81889129FEB35A7E469929949723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:d7:80:7b:ba:4e:b8:95:b5:8e:8c:a9:b8:
                    2b:82:43:d2:32:c5:37:42:96:40:10:0a:ec:96:a1:
                    f6:70:9f:9c:10:c3:61:ff:9a:e4:c4:50:3f:f6:d2:
                    cd:89:d1:4b:94:ce:00:e5:2b:69:e5:ed:f5:66:59:
                    96:04:fd:41:00:33:3a:69:0f:c1:72:49:72:ba:ff:
                    1f:4a:e6:a0:bd:0c:9e:ef:fc:93:7e:7c:72:e3:dc:
                    12:0b:a3:a4:52:02:77:e6:8e:de:a4:92:3b:94:10:
                    53:6e:af:4a:76:1a:84:ea:ac:be:ea:3b:94:a1:22:
                    7b:8e:95:a8:49:1f:f3:54:4f:b4:78:4a:99:64:aa:
                    d6:85:68:28:3a:c4:9f:30:2a:22:e3:a4:06:b1:75:
                    a9:aa:cd:a3:f8:a9:12:13:80:82:ad:8d:1f:09:2c:
                    2f:fd:4c:f6:c8:41:8d:1a:a9:4c:08:f8:95:aa:7a:
                    fd:28:17:79:d7:41:65:68:b3:85:4a:24:67:2e:55:
                    7a:39:90:e4:7c:be:1f:2e:ca:2a:72:4d:fa:1b:c2:
                    c5:68:39:b0:3a:98:63:64:a5:06:83:60:d5:d1:36:
                    43:2b:f8:da:0d:77:56:3f:cb:15:09:ee:02:1b:28:
                    b8:c7:6e:c6:f2:a9:c5:b4:69:f1:9f:6c:c1:cd:13:
                    7b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5E:AE:A6:7C:DC:81:88:91:29:FE:B3:5A:7E:46:99:29:94:97:23
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a3a2f33322d3332203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:c5:b8:82:d7:5a:c4:d5:11:50:6b:4c:37:4b:55:ea:34:6f:
         da:cc:da:9d:b2:82:ef:20:55:14:fe:c4:89:a3:3f:eb:2c:d8:
         c2:c7:21:04:19:9d:8e:44:45:14:e4:81:4e:38:af:3b:c8:a7:
         a3:02:2e:7a:86:bb:83:23:39:a5:30:2c:d1:0a:59:6f:e2:bf:
         9f:c1:28:f7:f7:f4:1a:d7:5c:57:79:55:94:df:75:c3:21:3e:
         e2:32:8f:4a:bd:f8:9a:b3:b7:7c:da:23:6e:d5:c3:0d:14:4b:
         b9:8f:da:5e:d7:f9:82:27:c9:a4:60:dd:c5:9e:97:35:15:19:
         de:9d:76:7c:15:a7:5a:33:68:0f:10:c1:d8:b3:79:11:3b:e4:
         d0:11:b7:94:aa:ef:76:65:81:dc:ef:02:8e:73:7b:dc:4f:c6:
         51:1f:a2:75:7a:10:23:03:96:21:bf:cd:36:35:44:16:82:50:
         64:4d:30:67:f8:dc:99:e3:00:1b:ab:63:40:5b:94:f8:52:34:
         d6:29:68:d0:59:55:27:29:8a:9d:cd:92:98:cd:1f:52:9b:90:
         2c:dc:d6:7f:69:f1:d1:4e:ac:75:fa:75:a6:8b:b2:f3:2f:8e:
         6a:38:dd:39:d1:57:0d:e5:81:90:fb:76:6b:2d:00:80:66:82:
         c3:36:9e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:28:09 2025 by rpki-client