Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a61343a3a2f33322d313238203d3e203238363439.roa
File:                     323830343a61343a3a2f33322d313238203d3e203238363439.roa (raw, json)
Hash identifier:          8+VpdtMt/Z8lZjKIaqn/U4f8p7gsSXcyWTs/uOXlg88=
Subject key identifier:   B4:75:6B:C4:01:3B:A0:EE:6B:44:BA:E7:E5:66:8E:C8:5C:48:64:00
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       7F174FFA51284854A8672F5B1B306425B3D88C26
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a61343a3a2f33322d313238203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:37:49 +0000
ROA not before:           Fri 15 Aug 2025 20:32:49 +0000
ROA not after:            Fri 14 Aug 2026 20:37:49 +0000
asID:                     28649
IP address blocks:        2804:a4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 01:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:17:4f:fa:51:28:48:54:a8:67:2f:5b:1b:30:64:25:b3:d8:8c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:32:49 2025 GMT
            Not After : Aug 14 20:37:49 2026 GMT
        Subject: CN=B4756BC4013BA0EE6B44BAE7E5668EC85C486400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:bb:9a:8c:fc:5c:e6:ac:7d:36:43:72:1e:
                    0c:02:ce:38:ce:e8:5d:60:62:5f:23:4b:81:77:66:
                    bb:8a:09:0d:4d:94:89:69:a7:6a:6f:ba:4c:77:5a:
                    23:10:af:40:1c:7b:44:7f:4c:7e:50:21:a7:50:25:
                    4c:70:6e:62:42:d8:60:fa:c7:48:d6:e8:74:b4:b1:
                    4e:5e:77:d1:1b:49:b1:2d:61:39:33:18:96:89:02:
                    6c:93:b8:42:0a:49:b8:25:7c:2f:11:f9:45:6d:c9:
                    df:10:7d:c8:b6:fc:fa:6e:f1:c0:c2:f5:21:b7:8d:
                    55:21:a5:b9:b6:c1:a6:a6:cf:13:ad:17:04:4c:1c:
                    75:5e:22:fd:4f:84:21:03:f6:f0:b1:a5:aa:e2:48:
                    eb:fe:b5:c3:16:ec:c2:88:89:9f:22:3b:f1:2d:f3:
                    94:db:ea:4c:c3:9b:db:8f:69:97:fe:08:b6:8a:89:
                    f5:51:63:09:0a:aa:28:5d:f0:bb:0a:1d:a3:4a:23:
                    6e:ba:7b:a7:a9:a2:b0:a6:48:c5:48:5d:8e:0d:d8:
                    14:43:ba:09:1f:8a:37:cc:b6:35:9a:04:d9:f3:8f:
                    dc:1d:04:bc:9d:c4:e9:22:fc:1a:2e:67:6f:bf:27:
                    54:8b:c2:4f:0d:44:1e:78:2b:7a:8a:29:e4:0f:41:
                    3c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:75:6B:C4:01:3B:A0:EE:6B:44:BA:E7:E5:66:8E:C8:5C:48:64:00
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a61343a3a2f33322d313238203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:ed:77:e4:51:c4:16:5e:68:10:b3:5b:85:62:e3:6b:b8:12:
         05:43:e8:cd:39:34:8a:1c:bc:42:80:81:d7:a5:71:b2:ae:be:
         1c:8e:86:e9:81:d5:8d:79:05:d9:d8:ab:be:c7:e0:1d:38:e5:
         ae:d1:bb:c7:d7:3e:49:bd:82:22:0c:cc:9f:d5:c3:7d:7c:d6:
         fe:a0:98:31:59:b9:f0:d8:d6:d2:62:6f:33:e2:f9:5e:b4:4a:
         55:49:18:20:20:b8:56:ef:20:f8:d5:13:40:6d:d4:15:99:19:
         66:c1:36:58:f2:37:c8:66:f0:17:9d:56:66:e3:c5:55:66:7a:
         00:75:92:da:fc:ab:88:5b:95:0a:5b:90:a5:4e:65:d4:54:12:
         e0:cb:d6:57:f6:9d:f0:67:48:9c:31:4c:e6:ae:6f:92:90:f6:
         48:c9:28:63:f7:9a:10:ff:0d:2b:c0:09:13:d0:2e:04:cc:75:
         bb:62:17:6c:d9:e7:d6:f8:09:47:51:46:20:03:53:a4:35:1e:
         9e:f7:95:98:bc:70:37:83:11:f5:4b:e8:9d:f3:5c:99:38:da:
         c8:67:ea:a3:63:bd:16:e8:c2:e8:dc:e5:86:7f:6b:6a:3c:42:
         bc:28:72:c8:43:2e:da:72:e6:b3:a8:5b:3d:6a:95:29:a0:01:
         b3:a9:30:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:03:08 2025 by rpki-client