Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a6333303a3a2f33322d313238203d3e203238363439.roa
File:                     323830343a6333303a3a2f33322d313238203d3e203238363439.roa (raw, json)
Hash identifier:          ZnwrklH4Ihz/5JuJ69rupBmkrrywivMukM3mMjieEXo=
Subject key identifier:   CF:E0:B8:F7:DA:D1:BE:36:75:C3:9B:19:FA:B5:32:47:67:69:B4:EF
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       164F78F72B7DC3B5C48CC46F2305815EAF9842B6
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a6333303a3a2f33322d313238203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:37:49 +0000
ROA not before:           Fri 15 Aug 2025 20:32:49 +0000
ROA not after:            Fri 14 Aug 2026 20:37:49 +0000
asID:                     28649
IP address blocks:        2804:c30::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4f:78:f7:2b:7d:c3:b5:c4:8c:c4:6f:23:05:81:5e:af:98:42:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:32:49 2025 GMT
            Not After : Aug 14 20:37:49 2026 GMT
        Subject: CN=CFE0B8F7DAD1BE3675C39B19FAB532476769B4EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:e9:a9:9e:7b:aa:55:de:e1:62:89:7a:2d:
                    ff:bb:a2:a3:30:a5:14:96:45:08:c8:61:52:58:83:
                    19:75:3d:9e:5e:1b:b7:ec:43:b6:84:ec:cd:44:5a:
                    7e:a0:94:c0:58:a5:b2:8d:85:79:bd:ac:11:ed:3d:
                    bb:ff:0c:8f:91:24:8a:82:4b:2e:28:a3:0d:95:f4:
                    b2:01:0c:21:84:c8:8a:32:b0:3d:2c:79:6d:b1:ef:
                    50:6e:b5:52:3d:ff:0e:8a:06:08:98:12:b6:85:9e:
                    a4:13:63:75:83:f3:5a:bc:8a:5a:13:b3:fd:59:37:
                    29:9f:0a:91:70:f7:a8:40:43:0d:7f:fd:7d:21:d4:
                    c6:ca:e1:a1:26:9f:66:ff:02:60:fc:05:a4:55:96:
                    5b:4e:77:2a:e6:63:58:d2:df:37:47:6d:89:27:c7:
                    67:83:18:16:4e:28:18:d1:5f:47:b8:76:87:7d:12:
                    4c:13:af:33:59:8f:30:78:58:4e:69:89:38:3e:54:
                    57:59:f6:6e:55:2a:71:6c:fc:64:6e:87:92:8e:31:
                    76:b2:69:6d:16:38:ca:f6:0a:4f:4e:a7:02:a8:e4:
                    c0:61:bc:b8:16:95:73:87:a9:05:56:bb:18:35:33:
                    5d:5f:46:8f:e4:c1:c7:52:a6:d2:be:a2:37:a0:15:
                    0a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E0:B8:F7:DA:D1:BE:36:75:C3:9B:19:FA:B5:32:47:67:69:B4:EF
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a6333303a3a2f33322d313238203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:a5:f4:e1:34:79:d4:c8:13:34:f2:d6:c6:52:41:d0:0f:13:
         5b:4c:0c:40:00:0b:3a:14:fb:23:d4:c4:ea:a2:c4:51:5c:e4:
         5a:c9:04:6a:25:76:14:b9:10:e4:a2:b7:a5:c1:79:50:b9:05:
         83:4e:f1:5a:f7:44:84:97:83:02:ab:e9:df:e8:26:c7:8f:f4:
         f0:27:db:64:d9:02:9b:df:58:c5:d0:f1:6f:1b:48:04:55:e5:
         dc:67:83:65:43:27:89:ff:59:0c:53:b8:79:28:60:e9:e5:f2:
         b5:9b:4c:35:47:c5:c3:15:c7:29:9c:ce:b5:88:57:57:c6:67:
         e0:cd:1b:1a:c5:ad:53:c9:74:3d:38:89:9e:1c:5f:e6:8f:15:
         e5:b9:8d:1f:a8:69:7c:57:2a:bc:23:2c:00:c2:df:39:e7:b0:
         37:3d:53:e6:47:59:90:6b:6c:27:58:a9:b9:56:7e:39:9e:ed:
         00:fc:6c:cb:f0:52:eb:9d:2c:e1:37:5b:30:6f:5a:54:cd:d5:
         5a:1b:cf:ae:99:38:e8:25:ff:21:16:1f:b6:22:5d:2c:b1:85:
         4d:c6:3c:c3:eb:4c:85:f0:15:c4:7e:12:cc:3b:00:d0:24:5a:
         13:0e:4e:61:3b:0f:5a:b4:f7:89:60:13:5e:8a:13:92:e2:68:
         27:7b:61:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:16:12 2025 by rpki-client