Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/323830343a3939633a3a2f33322d3333203d3e20323632353139.roa
File:                     323830343a3939633a3a2f33322d3333203d3e20323632353139.roa (raw, json)
Hash identifier:          pmI7R8IXl00YR4Kxd+GXF5+Wr+XYVjinrVJteKUHhOU=
Subject key identifier:   C1:A7:B9:C2:79:EB:E5:0F:9A:8A:06:A6:1C:18:73:F5:DA:DB:07:8A
Certificate issuer:       /CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3
Certificate serial:       4E36EC8D8D2C934843AE1C9702E03FE4A6A4BB6D
Authority key identifier: CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/323830343a3939633a3a2f33322d3333203d3e20323632353139.roa
Signing time:             Fri 08 Aug 2025 19:24:58 +0000
ROA not before:           Fri 08 Aug 2025 19:19:58 +0000
ROA not after:            Fri 07 Aug 2026 19:24:58 +0000
asID:                     262519
IP address blocks:        2804:99c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl
                          rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:36:ec:8d:8d:2c:93:48:43:ae:1c:97:02:e0:3f:e4:a6:a4:bb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3
        Validity
            Not Before: Aug  8 19:19:58 2025 GMT
            Not After : Aug  7 19:24:58 2026 GMT
        Subject: CN=C1A7B9C279EBE50F9A8A06A61C1873F5DADB078A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:e8:37:4d:23:f4:98:b8:b4:8c:e3:b1:51:
                    98:08:00:58:7e:1b:bd:08:70:54:76:24:4d:f9:f7:
                    02:ae:99:1b:43:be:14:bb:bd:01:cd:83:26:cc:1b:
                    4f:e4:74:1e:5c:ad:e4:14:72:90:05:00:e3:47:95:
                    09:6d:5a:ca:ab:4c:a0:20:ab:b4:2c:a7:e2:73:1d:
                    8d:d0:de:e3:8d:1b:17:df:dd:23:e9:a4:4a:13:5e:
                    43:59:b4:8e:0d:55:2a:96:32:06:d8:02:14:00:57:
                    17:94:38:4c:fe:4f:69:c8:4c:4a:1e:c7:57:99:43:
                    a8:02:a1:f8:c8:fc:6c:fc:d7:dc:7e:cb:95:f3:38:
                    ba:41:a5:64:2e:03:40:99:e3:db:de:ac:cc:96:c1:
                    8d:16:85:7c:e6:ad:b6:49:10:ce:43:9c:28:33:57:
                    a4:8d:1f:2a:e7:6f:25:4d:2e:5f:15:89:21:41:45:
                    5d:2d:18:59:84:a7:40:a8:93:e5:dc:dc:44:f9:70:
                    ca:86:97:52:13:80:c9:55:06:0b:f8:e1:58:1f:ec:
                    a2:84:23:e5:15:5f:99:fc:1c:da:04:c5:e1:ed:21:
                    94:90:ca:cc:5b:29:52:d0:54:41:36:1e:ec:b2:bf:
                    97:70:fb:5f:45:29:a7:70:d8:7e:58:0b:08:ea:14:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A7:B9:C2:79:EB:E5:0F:9A:8A:06:A6:1C:18:73:F5:DA:DB:07:8A
            X509v3 Authority Key Identifier:
                keyid:CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/323830343a3939633a3a2f33322d3333203d3e20323632353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:99c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:dc:a3:0d:cb:2b:bb:6d:49:7f:31:38:87:5a:40:ae:d4:9d:
         8a:7c:c7:c9:67:de:c0:3f:c7:4f:e0:0e:b0:dc:42:46:7f:f1:
         35:13:c3:2a:fd:2f:c8:a5:2d:37:ad:a6:95:20:39:78:57:7c:
         7b:4c:95:5a:fd:7d:ea:31:75:be:5a:19:55:18:2c:40:7b:fd:
         e7:10:f9:b7:64:32:ff:03:88:d2:e7:f1:1e:6d:e9:1d:2d:dc:
         39:06:85:c7:e9:c9:c4:ca:2d:88:e9:31:6b:e6:7e:22:91:f4:
         f7:07:f4:7b:30:f5:7d:7c:02:8d:b0:99:2d:df:ad:14:2d:ec:
         a6:ec:1d:29:a6:cf:31:19:75:45:09:c1:30:57:b6:19:80:75:
         bd:b2:66:8d:fb:30:97:f8:78:3e:45:7f:b3:a8:c1:1d:d6:26:
         95:b5:91:d1:bb:6d:37:48:f8:da:9a:57:03:73:2c:97:c9:1f:
         ae:19:94:5e:d8:36:70:ed:e8:7c:01:45:4b:c3:06:1d:f5:3e:
         32:9c:d2:0c:23:45:ca:4c:35:a7:0a:c7:3c:00:02:0d:2c:c7:
         24:f8:93:1a:6b:59:51:e2:c1:fa:bc:54:d9:24:8c:56:28:4d:
         b5:56:2a:fb:00:bf:53:66:61:a4:d1:f9:ca:0d:24:c7:14:77:
         63:e4:03:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:15:49 2025 by rpki-client