Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/323830343a3361343a3a2f33322d3438203d3e203238313538.roa
File:                     323830343a3361343a3a2f33322d3438203d3e203238313538.roa (raw, json)
Hash identifier:          XYfXP9f2DXk6uD5N2ssNnsePCrWZaeAJLaEUM/uJhKg=
Subject key identifier:   EF:A2:7A:38:D8:A8:11:6C:B2:AB:36:06:32:62:B4:AA:AE:1E:EC:95
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       174F5D087898E5314DFF1BD5D89751BB5B1CA389
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/323830343a3361343a3a2f33322d3438203d3e203238313538.roa
Signing time:             Thu 21 Aug 2025 15:08:28 +0000
ROA not before:           Thu 21 Aug 2025 15:03:28 +0000
ROA not after:            Thu 20 Aug 2026 15:08:28 +0000
asID:                     28158
IP address blocks:        2804:3a4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 20:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4f:5d:08:78:98:e5:31:4d:ff:1b:d5:d8:97:51:bb:5b:1c:a3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Aug 21 15:03:28 2025 GMT
            Not After : Aug 20 15:08:28 2026 GMT
        Subject: CN=EFA27A38D8A8116CB2AB36063262B4AAAE1EEC95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:66:c5:36:6f:83:59:58:20:32:f9:d9:97:54:
                    99:e5:3c:e7:7a:85:1d:99:90:f7:e3:98:a3:65:d2:
                    11:01:54:e7:3d:4a:02:83:a1:40:04:97:2d:cb:b4:
                    1e:d2:83:69:a8:d6:96:ad:ec:f7:ad:a5:5f:db:6c:
                    da:bd:f2:b7:01:5f:b8:db:db:86:cd:1f:ba:73:ad:
                    92:1d:63:1b:ff:ff:ef:e1:a7:73:e1:19:c4:04:0a:
                    25:89:ac:24:8b:45:52:a2:3f:43:24:14:a9:be:d0:
                    90:de:d0:81:9f:ed:fe:37:4b:77:d3:ce:25:e7:97:
                    15:36:a0:2a:46:7c:a9:58:5f:3c:c4:8b:5f:3b:fe:
                    c4:d2:68:09:81:b0:08:9e:74:aa:2e:78:e2:7e:e1:
                    93:49:ae:56:13:e9:60:3f:4a:ca:4a:d9:42:20:77:
                    a8:9e:26:db:0c:62:6a:e3:65:be:f4:c4:9c:3f:b9:
                    cb:89:d7:10:1a:1b:78:4d:c0:b9:0b:4b:46:07:7f:
                    be:7a:01:47:ec:20:06:3d:aa:ad:5e:53:ed:f0:cf:
                    aa:c8:dd:f2:0d:55:55:90:73:47:48:10:dc:2f:05:
                    2b:d3:d0:a8:ed:39:69:b7:14:83:ac:9a:f8:ed:28:
                    8f:87:e1:7e:90:11:f9:e4:1f:50:1b:4b:4f:f8:ab:
                    e3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A2:7A:38:D8:A8:11:6C:B2:AB:36:06:32:62:B4:AA:AE:1E:EC:95
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/323830343a3361343a3a2f33322d3438203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:b2:e1:9f:a6:67:9c:fb:c0:89:6b:f3:22:75:e5:af:73:6f:
         65:e4:13:40:3f:3e:5c:79:db:33:26:9e:7b:5a:96:84:02:fe:
         a1:93:eb:33:5c:b2:6d:d2:d2:30:6c:12:08:fe:e9:45:a1:55:
         11:5b:88:22:5c:aa:f5:1a:80:00:61:6c:55:b3:8d:17:ba:78:
         87:9e:e1:9f:ec:1e:50:43:c6:40:5c:1c:aa:31:a2:73:28:e9:
         1a:a1:cf:75:16:d7:36:cf:f1:ea:cf:8c:f2:0d:95:bc:fa:46:
         92:60:d9:33:19:4b:fe:70:a0:5c:0f:0f:bb:c0:82:8d:25:59:
         54:f5:90:d1:46:3a:46:4d:79:e7:e2:e3:49:74:dd:8b:25:f5:
         36:6e:a7:1b:65:1a:47:9d:ec:58:67:09:26:b3:32:4d:91:41:
         81:36:48:a4:58:fa:ee:5a:19:fb:a8:66:c2:3f:45:a8:32:84:
         31:8b:f4:75:83:8e:08:6f:88:d9:a4:33:8a:45:95:d4:54:97:
         66:f3:d7:cf:ab:ee:bc:50:f1:d3:47:05:3c:81:cb:f4:e0:6d:
         38:cc:52:ae:88:3e:96:82:73:d6:56:de:28:93:a1:4a:9f:36:
         2c:1c:f0:f2:c9:3e:91:dd:0f:88:16:6e:53:c4:53:5d:ce:dc:
         53:ec:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 03:02:53 2025 by rpki-client