Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/323830343a326164343a3a2f33322d313238203d3e20323635313231.roa
File:                     323830343a326164343a3a2f33322d313238203d3e20323635313231.roa (raw, json)
Hash identifier:          xEsjrLVlzs6H2k1W806SdCCQJvr6MukqwhqFSSjEPR4=
Subject key identifier:   E8:97:5E:FF:D5:57:93:3D:DB:AC:D3:87:F5:A1:56:2F:E0:EA:78:83
Certificate issuer:       /CN=BF1ED920124A956078F54EF2E74C46A4BFC3F517
Certificate serial:       26116AE4D3C59773588027982583B1F2344073B1
Authority key identifier: BF:1E:D9:20:12:4A:95:60:78:F5:4E:F2:E7:4C:46:A4:BF:C3:F5:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF1ED920124A956078F54EF2E74C46A4BFC3F517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/323830343a326164343a3a2f33322d313238203d3e20323635313231.roa
Signing time:             Wed 13 Aug 2025 04:34:51 +0000
ROA not before:           Wed 13 Aug 2025 04:29:51 +0000
ROA not after:            Wed 12 Aug 2026 04:34:51 +0000
asID:                     265121
IP address blocks:        2804:2ad4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.crl
                          rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF1ED920124A956078F54EF2E74C46A4BFC3F517.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 07:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:11:6a:e4:d3:c5:97:73:58:80:27:98:25:83:b1:f2:34:40:73:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF1ED920124A956078F54EF2E74C46A4BFC3F517
        Validity
            Not Before: Aug 13 04:29:51 2025 GMT
            Not After : Aug 12 04:34:51 2026 GMT
        Subject: CN=E8975EFFD557933DDBACD387F5A1562FE0EA7883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2d:dc:c0:2c:b1:5f:a0:68:3f:e0:db:19:d6:
                    0e:fa:a7:81:83:43:c8:c4:fc:b4:0f:6b:48:0e:b3:
                    62:c0:5a:c3:b7:da:d1:4f:cb:d1:b9:ff:4f:ed:0a:
                    80:65:2a:2b:0e:09:44:9f:98:50:f6:01:c9:58:99:
                    15:da:f2:10:ff:33:b5:48:08:a5:af:b2:17:ba:0b:
                    3a:3f:57:c9:66:08:c0:aa:ca:36:8c:47:aa:76:67:
                    b4:58:e3:83:c1:23:21:ab:2e:df:fe:f1:50:8b:1a:
                    7d:9c:0b:cc:21:ee:9a:c7:86:c6:27:19:93:f4:2f:
                    21:c8:1a:9c:0c:73:f2:b4:d8:1e:98:cc:24:d1:eb:
                    41:72:03:64:ef:49:ea:0a:ac:32:98:1d:25:5a:47:
                    03:3d:39:06:98:b6:cb:91:6d:9b:24:6c:dc:f6:bb:
                    73:a3:7e:b8:59:e6:26:b6:c2:78:eb:39:84:90:d8:
                    63:55:71:ee:58:2b:54:13:3e:a4:cf:02:98:c9:c4:
                    97:18:3c:7b:fe:dd:53:68:f5:c2:d6:b3:ac:6a:5d:
                    0f:7a:37:be:6c:81:e1:ea:e0:ba:d7:6a:41:68:25:
                    c2:7c:e4:e0:3a:98:5b:f9:cd:8a:83:01:74:dc:b7:
                    64:fa:9b:7e:fa:19:09:f2:fd:60:a1:70:93:aa:11:
                    64:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:97:5E:FF:D5:57:93:3D:DB:AC:D3:87:F5:A1:56:2F:E0:EA:78:83
            X509v3 Authority Key Identifier:
                keyid:BF:1E:D9:20:12:4A:95:60:78:F5:4E:F2:E7:4C:46:A4:BF:C3:F5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF1ED920124A956078F54EF2E74C46A4BFC3F517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/323830343a326164343a3a2f33322d313238203d3e20323635313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ad4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:df:51:12:ce:0c:19:71:30:bb:aa:08:0b:19:c8:d3:78:6d:
         10:fc:bd:77:57:d5:dd:6e:41:00:a1:77:e1:bc:ce:66:9f:51:
         ee:c7:60:fa:11:aa:04:01:02:f4:a4:e8:74:39:3f:3b:ac:c1:
         5b:44:7d:65:82:55:bf:13:bd:48:65:7e:39:39:51:fe:59:ea:
         cb:46:3b:ad:08:62:41:b1:52:b0:1e:58:5e:22:a7:69:f9:5e:
         62:96:f1:bc:ea:53:7a:9c:18:6e:6e:ef:61:99:4d:c3:5a:cb:
         02:8f:24:b9:0a:45:b8:7d:43:ac:c6:14:6f:52:4a:f8:4f:a8:
         3f:82:3a:02:c9:5d:79:33:72:38:db:15:17:ed:31:84:dc:3d:
         05:38:75:c6:cb:e4:b0:f1:4d:41:90:08:8f:f1:ef:f1:32:7b:
         67:c9:7f:f7:7d:e3:46:fa:87:99:74:90:a0:20:db:58:4e:37:
         9a:64:40:31:c2:26:49:ef:bc:39:d4:65:1b:30:59:c0:f5:20:
         49:45:21:33:ce:c4:30:ab:e2:46:82:04:d3:e3:b5:19:a5:24:
         55:f7:77:f5:de:f5:b9:b6:93:29:0a:c7:5a:de:34:33:a4:81:
         a0:89:45:5c:2e:c4:cc:83:d3:75:ff:76:9d:89:aa:e2:1e:6b:
         44:19:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:27 2025 by rpki-client