Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d313238203d3e20323632323933.roa
File:                     323830343a6138303a3a2f33322d313238203d3e20323632323933.roa (raw, json)
Hash identifier:          lKNFRBy+HAaEP1PNLICyCnEPMlltVZJJPntgaz+cA1A=
Subject key identifier:   03:D5:7D:2F:6E:40:67:5A:00:F8:70:50:41:13:3F:97:71:EF:F8:19
Certificate issuer:       /CN=FC32F5E77BB553A3096A33BBDE768287D0B14B26
Certificate serial:       4D93766048749F4B5F7D559BB25832559F691465
Authority key identifier: FC:32:F5:E7:7B:B5:53:A3:09:6A:33:BB:DE:76:82:87:D0:B1:4B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d313238203d3e20323632323933.roa
Signing time:             Tue 19 Aug 2025 14:04:02 +0000
ROA not before:           Tue 19 Aug 2025 13:59:02 +0000
ROA not after:            Tue 18 Aug 2026 14:04:02 +0000
asID:                     262293
IP address blocks:        2804:a80::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:93:76:60:48:74:9f:4b:5f:7d:55:9b:b2:58:32:55:9f:69:14:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC32F5E77BB553A3096A33BBDE768287D0B14B26
        Validity
            Not Before: Aug 19 13:59:02 2025 GMT
            Not After : Aug 18 14:04:02 2026 GMT
        Subject: CN=03D57D2F6E40675A00F8705041133F9771EFF819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:ad:81:52:82:40:8b:58:be:9c:b3:7c:fd:
                    1f:7d:c1:ef:a6:7c:d9:ae:fd:4a:39:e6:65:9f:2e:
                    71:3b:6d:83:66:12:63:1c:85:a3:0c:85:44:91:d2:
                    07:e4:f3:e6:e9:30:84:d8:23:74:58:36:a1:3e:63:
                    45:d5:c3:5b:cf:3d:33:3c:07:d0:78:35:a0:68:b0:
                    7d:0e:d2:27:52:9a:29:53:1f:a1:d8:a5:a4:64:f2:
                    a3:7c:cb:f3:ca:5f:39:6e:fd:21:9d:bf:de:5d:25:
                    cf:72:02:eb:f3:b5:14:e7:ee:03:72:2e:42:3c:39:
                    a5:e4:4d:cb:eb:d8:38:74:39:1a:f0:2d:41:65:67:
                    06:76:a0:2f:e3:85:6a:e6:a9:55:68:78:d5:b9:8f:
                    1b:b0:fd:69:0d:3b:ae:06:d1:19:16:cc:01:31:61:
                    51:81:8e:97:8d:5d:29:b0:c9:19:6a:80:91:b5:15:
                    ca:c3:b6:e0:9e:55:68:0d:f1:c6:bc:94:28:7f:d2:
                    78:12:fb:6d:44:30:70:41:4d:53:ab:7f:e0:da:76:
                    eb:9e:fc:a1:58:e1:8b:76:01:0f:75:d6:a0:ea:f5:
                    a7:24:77:15:55:5c:0d:a2:82:8e:7c:82:5c:99:6e:
                    04:57:d0:aa:8a:76:c6:10:cd:60:ee:11:63:bf:94:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D5:7D:2F:6E:40:67:5A:00:F8:70:50:41:13:3F:97:71:EF:F8:19
            X509v3 Authority Key Identifier:
                keyid:FC:32:F5:E7:7B:B5:53:A3:09:6A:33:BB:DE:76:82:87:D0:B1:4B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d313238203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:ff:7b:1e:f4:0e:45:01:9f:49:ef:9f:67:22:3b:88:dc:2b:
         f0:f2:74:7f:5b:b8:92:5c:d2:11:9f:bc:58:7e:3c:bb:39:81:
         c7:b2:12:6b:87:bb:45:1f:b3:aa:60:48:d2:7e:da:09:b4:18:
         a7:dc:95:fb:8d:40:7e:89:ef:5f:13:9c:fc:16:23:bb:89:86:
         f6:33:c4:fc:1c:e4:7a:2b:5d:4f:39:9b:5a:9d:35:13:6d:f2:
         8f:ad:e9:c6:22:2d:0e:88:f0:b5:d8:bf:b5:b9:f2:91:52:4e:
         2b:fa:d9:aa:65:33:c8:fd:b3:c8:7d:79:21:65:b3:c0:45:f7:
         7c:a3:d5:23:64:81:db:c0:6b:90:38:d1:64:cf:ee:3e:96:02:
         cc:71:28:58:4b:28:96:f2:b6:7b:cc:ab:75:f8:34:79:94:82:
         bd:51:98:8a:f6:a2:e9:55:c3:ab:dd:33:92:f1:65:ef:34:f9:
         60:c8:eb:8f:8d:e7:e5:db:e8:f5:4b:9a:40:e2:bf:9e:14:d4:
         51:56:e2:72:64:66:e1:0a:2e:d0:37:68:92:d6:25:9a:46:6b:
         88:d8:37:22:e0:32:66:a9:46:28:f2:2e:cf:98:12:cb:cc:7d:
         59:8b:6b:31:07:95:74:03:14:78:99:14:46:c3:fd:a7:39:00:
         26:b1:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:16 2025 by rpki-client