Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuarTiH4oNNAfc6VTeTr81HDPcbcmYm676hXz2hHjVhU/0/323830343a393439383a666630303a3a2f34302d3438203d3e20323734343638.roa
File:                     323830343a393439383a666630303a3a2f34302d3438203d3e20323734343638.roa (raw, json)
Hash identifier:          hDDZ+ffCx/7/iX8vDiLMDEDSVKdQJO46N7tgs3Q5ghI=
Subject key identifier:   AB:00:C9:4B:BD:8D:71:01:63:61:79:BC:A9:D8:6F:78:5A:D5:1C:87
Certificate issuer:       /CN=E85D49068D2412F7E334C1E8D541787D43A203B7
Certificate serial:       69EFE27A87EADEDAF2D127E04E765D0D50EEDD3F
Authority key identifier: E8:5D:49:06:8D:24:12:F7:E3:34:C1:E8:D5:41:78:7D:43:A2:03:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85D49068D2412F7E334C1E8D541787D43A203B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuarTiH4oNNAfc6VTeTr81HDPcbcmYm676hXz2hHjVhU/0/323830343a393439383a666630303a3a2f34302d3438203d3e20323734343638.roa
Signing time:             Wed 20 Aug 2025 02:01:51 +0000
ROA not before:           Wed 20 Aug 2025 01:56:51 +0000
ROA not after:            Wed 19 Aug 2026 02:01:51 +0000
asID:                     274468
IP address blocks:        2804:9498:ff00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuarTiH4oNNAfc6VTeTr81HDPcbcmYm676hXz2hHjVhU/0/E85D49068D2412F7E334C1E8D541787D43A203B7.crl
                          rsync://rpki-repo.registro.br/repo/AuarTiH4oNNAfc6VTeTr81HDPcbcmYm676hXz2hHjVhU/0/E85D49068D2412F7E334C1E8D541787D43A203B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85D49068D2412F7E334C1E8D541787D43A203B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ef:e2:7a:87:ea:de:da:f2:d1:27:e0:4e:76:5d:0d:50:ee:dd:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E85D49068D2412F7E334C1E8D541787D43A203B7
        Validity
            Not Before: Aug 20 01:56:51 2025 GMT
            Not After : Aug 19 02:01:51 2026 GMT
        Subject: CN=AB00C94BBD8D7101636179BCA9D86F785AD51C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:17:e0:5e:73:1e:17:2f:46:5d:b1:fc:ff:
                    41:51:f8:24:f2:ed:a3:c1:d3:46:6d:e9:1f:c3:e2:
                    e1:62:38:59:86:47:ba:7a:a6:ad:15:77:fa:c0:3a:
                    f3:b8:91:ac:e9:23:cc:be:84:63:b6:7a:e9:5b:d6:
                    a2:94:11:aa:ab:17:98:ae:1a:b2:35:a8:0f:0c:b3:
                    17:ee:9d:3e:bf:4c:68:9b:72:b3:3b:64:2b:be:30:
                    be:fc:d9:56:08:cb:f6:ac:4d:6c:7a:91:79:a7:49:
                    6e:63:76:52:7c:32:20:11:31:92:1c:f6:0b:79:4f:
                    9a:2c:a0:14:bc:43:b8:cc:71:e2:14:1c:fd:42:6f:
                    a4:09:cc:35:d6:8c:d9:22:9b:c7:aa:5d:6a:ac:ae:
                    f3:23:bb:29:62:96:5f:9e:cc:ff:1c:08:34:8d:fb:
                    14:1c:6f:e5:44:61:c6:d5:30:6e:67:1a:dc:9f:54:
                    73:ae:5d:cd:94:8b:59:97:eb:31:d7:a7:b2:82:43:
                    33:bf:bd:13:4d:f2:20:19:71:b2:4e:58:6b:40:2e:
                    cd:3f:d4:09:56:9e:2d:e8:38:de:76:b3:ea:1c:72:
                    64:62:fb:99:d9:61:3d:ee:97:f1:7d:52:68:51:7c:
                    0d:c7:ae:27:01:0c:46:54:71:46:6a:be:9b:25:2d:
                    2f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:00:C9:4B:BD:8D:71:01:63:61:79:BC:A9:D8:6F:78:5A:D5:1C:87
            X509v3 Authority Key Identifier:
                keyid:E8:5D:49:06:8D:24:12:F7:E3:34:C1:E8:D5:41:78:7D:43:A2:03:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuarTiH4oNNAfc6VTeTr81HDPcbcmYm676hXz2hHjVhU/0/E85D49068D2412F7E334C1E8D541787D43A203B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85D49068D2412F7E334C1E8D541787D43A203B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuarTiH4oNNAfc6VTeTr81HDPcbcmYm676hXz2hHjVhU/0/323830343a393439383a666630303a3a2f34302d3438203d3e20323734343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9498:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:1c:82:24:15:d7:41:ea:3b:e4:6e:72:8a:7a:b4:eb:3f:89:
         39:3e:50:c9:fc:2e:92:97:d5:a3:48:ad:4e:58:f8:ec:45:36:
         d7:9d:34:92:96:22:e5:af:ce:ce:64:68:8c:f9:fc:2d:d8:0e:
         e9:bd:55:d6:a7:e2:25:cf:09:8e:b8:43:ed:89:29:06:ea:b1:
         06:88:d9:85:21:60:26:9c:ad:64:ac:9c:0f:fc:e3:70:8b:e2:
         de:41:50:ac:e2:98:39:dc:9e:1a:39:27:ca:6a:b4:50:02:17:
         9d:2f:03:d0:f8:3a:f4:e8:17:e6:7d:76:66:b7:5e:ea:8d:d2:
         71:bd:20:94:7b:b8:56:02:0c:bb:5c:4c:4b:2b:44:e2:0b:45:
         97:55:68:32:0b:24:c9:c7:06:7b:df:7f:ce:da:89:0b:39:af:
         94:b8:26:5a:9a:68:59:e3:37:a8:f3:58:9e:07:fe:3e:84:9c:
         1a:c3:3f:9b:a1:d0:0f:23:9f:14:90:cd:6f:b6:8a:a8:36:02:
         22:ef:95:5b:1f:13:3d:95:be:95:a2:49:08:7a:94:a0:4f:96:
         5a:db:4d:32:b7:6f:b5:28:6a:a5:85:e0:45:8a:69:50:4e:cb:
         19:d4:56:d6:2e:34:7e:e7:db:c5:23:14:92:32:f5:4d:b8:20:
         99:bc:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:42 2025 by rpki-client