Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/323830343a353033383a3a2f33322d313238203d3e203533303033.roa
File:                     323830343a353033383a3a2f33322d313238203d3e203533303033.roa (raw, json)
Hash identifier:          DaI4nT11T6G/j5Fc5pqNPlnh9Xf52G4BeSXkIPss8Eg=
Subject key identifier:   18:55:97:F9:6B:46:F9:BF:2E:DB:A3:F9:BB:C2:9D:59:9E:B0:5E:D1
Certificate issuer:       /CN=E483282DA50873B6832166A0D902D6605AA93019
Certificate serial:       5CBA78D17DA8CEC6712636E34B61494E03A7231E
Authority key identifier: E4:83:28:2D:A5:08:73:B6:83:21:66:A0:D9:02:D6:60:5A:A9:30:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/323830343a353033383a3a2f33322d313238203d3e203533303033.roa
Signing time:             Wed 03 Sep 2025 19:49:59 +0000
ROA not before:           Wed 03 Sep 2025 19:44:59 +0000
ROA not after:            Wed 02 Sep 2026 19:49:59 +0000
asID:                     53003
IP address blocks:        2804:5038::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.crl
                          rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ba:78:d1:7d:a8:ce:c6:71:26:36:e3:4b:61:49:4e:03:a7:23:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E483282DA50873B6832166A0D902D6605AA93019
        Validity
            Not Before: Sep  3 19:44:59 2025 GMT
            Not After : Sep  2 19:49:59 2026 GMT
        Subject: CN=185597F96B46F9BF2EDBA3F9BBC29D599EB05ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:ed:17:98:f4:ad:82:ef:18:8f:03:47:00:
                    3b:19:b5:ad:bb:26:b7:a1:5e:9f:91:74:07:2b:1d:
                    6f:73:89:5c:d0:75:bc:55:eb:ac:54:3f:79:32:b1:
                    28:c0:5d:72:e3:bc:08:21:a3:88:6d:f2:12:aa:37:
                    e9:f1:f9:83:ae:b7:07:a9:a1:fd:d7:d7:13:f2:08:
                    01:4e:fb:63:19:ae:3b:79:ee:d4:6f:5d:34:2a:c8:
                    0e:65:d9:5c:4c:dd:c4:3d:e5:d6:71:97:01:f5:d7:
                    e4:62:59:c7:33:fa:93:c4:fc:18:de:e1:41:ec:26:
                    48:d7:c6:65:dc:1c:8e:28:48:bb:c6:72:e4:87:8e:
                    f4:29:63:16:a6:37:d5:19:9c:14:c0:2e:ef:e1:71:
                    48:48:2b:38:a2:52:e3:fa:6f:7a:3a:0e:d3:1f:4b:
                    c1:74:be:8b:82:bd:29:5b:4e:f8:c0:ad:bc:cd:0d:
                    8b:8c:1e:e8:4d:bd:c1:c5:33:8d:3e:15:c7:9f:d8:
                    01:85:26:b1:72:3d:b0:d2:26:bc:c0:c6:82:09:28:
                    15:12:d9:45:77:3c:eb:83:9f:07:57:fa:f5:87:78:
                    c9:d7:a6:e2:74:28:2f:dd:70:69:cb:24:14:e6:93:
                    9d:24:c0:9e:65:f3:ae:b9:c2:8c:fd:4b:20:66:f3:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:55:97:F9:6B:46:F9:BF:2E:DB:A3:F9:BB:C2:9D:59:9E:B0:5E:D1
            X509v3 Authority Key Identifier:
                keyid:E4:83:28:2D:A5:08:73:B6:83:21:66:A0:D9:02:D6:60:5A:A9:30:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/323830343a353033383a3a2f33322d313238203d3e203533303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5038::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:1e:0c:28:7c:51:17:3d:35:d4:3c:f8:2d:6a:d4:bc:19:c9:
         33:9c:66:e2:49:87:ca:32:31:c5:ba:09:0e:ba:7b:10:9e:94:
         f6:89:34:47:c4:ad:ad:fb:fd:05:db:3b:2f:aa:bc:9b:c6:c6:
         a9:c4:10:fa:39:4e:fc:c4:3b:93:a9:f8:01:ff:c3:77:49:53:
         c2:c3:98:9b:b4:c3:00:94:39:0e:31:da:c5:f0:28:cc:51:ee:
         32:36:ee:5d:52:a5:bd:c4:0f:9e:72:67:44:42:92:f4:95:14:
         bc:94:f8:77:7e:77:5a:2b:e6:d1:b6:e5:57:ba:27:e6:d3:57:
         bc:4f:b6:e1:69:73:83:9a:80:6e:69:97:da:83:e8:15:09:f6:
         c3:6b:fc:b1:c3:fe:90:36:9d:4e:bc:a7:37:e7:34:62:a5:32:
         0a:32:c7:fb:3e:1d:ba:94:d5:ef:a4:f7:f5:94:c3:93:92:07:
         58:af:e2:b4:3f:bd:9b:5b:b2:f7:e7:6a:64:55:9a:c0:c1:cb:
         33:c3:4b:54:9f:71:96:38:9f:16:ae:b5:6e:07:65:db:25:b8:
         e7:98:41:93:d6:e6:75:34:ba:f7:4d:5f:58:db:3b:4b:8b:47:
         c3:cf:e1:21:fd:e4:0b:17:a2:9e:a9:86:bc:90:93:df:25:3b:
         a9:65:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:16:52 2025 by rpki-client