Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/323830343a373830383a3a2f33322d3332203d3e20323731323136.roa
File:                     323830343a373830383a3a2f33322d3332203d3e20323731323136.roa (raw, json)
Hash identifier:          aP9w5LUb2eJVRnoNyFOvF8ygagN8phXJPyzq4MAIWds=
Subject key identifier:   93:5B:16:21:EB:2E:3B:E1:55:B9:88:44:B8:E6:51:85:8A:28:26:4D
Certificate issuer:       /CN=CBED2EB55FBF7DD2356D73471DF593AA7073D3FD
Certificate serial:       48EAFA24DE638F2306C77E3EBC9CE608023AC964
Authority key identifier: CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/323830343a373830383a3a2f33322d3332203d3e20323731323136.roa
Signing time:             Thu 21 Aug 2025 20:09:35 +0000
ROA not before:           Thu 21 Aug 2025 20:04:35 +0000
ROA not after:            Thu 20 Aug 2026 20:09:35 +0000
asID:                     271216
IP address blocks:        2804:7808::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl
                          rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 07:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ea:fa:24:de:63:8f:23:06:c7:7e:3e:bc:9c:e6:08:02:3a:c9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBED2EB55FBF7DD2356D73471DF593AA7073D3FD
        Validity
            Not Before: Aug 21 20:04:35 2025 GMT
            Not After : Aug 20 20:09:35 2026 GMT
        Subject: CN=935B1621EB2E3BE155B98844B8E651858A28264D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ce:f7:74:d3:50:ef:4c:24:8e:da:9c:09:b5:
                    99:00:f4:6e:b7:5d:f0:24:82:de:a8:79:a9:4f:19:
                    3a:74:a3:1b:e9:d0:33:ea:c4:48:ea:cb:ef:85:db:
                    29:53:3c:2c:5e:1d:77:70:1d:60:7e:0c:2f:ce:59:
                    c0:63:c9:b1:0b:81:5d:0c:35:03:40:ed:da:16:ef:
                    b5:28:45:59:48:5a:bb:cf:f5:e6:a9:a4:c5:33:d3:
                    fd:e8:7c:54:85:f9:8e:33:6e:e3:18:fc:8a:5c:f0:
                    85:ed:b5:8f:41:cb:97:24:7e:42:e7:50:d1:a4:86:
                    8e:b8:a9:36:c5:38:48:96:11:ee:cb:54:8f:11:93:
                    42:1a:fe:dc:8b:47:bd:8f:1e:7d:15:dd:fd:82:56:
                    1e:17:19:c3:7f:ce:f9:f6:dd:d9:33:90:79:18:c3:
                    9f:39:c4:f8:ed:c7:3b:b6:fc:f0:2a:7a:cf:7f:39:
                    5c:32:0c:ec:37:43:a3:9e:25:4a:d0:b0:ad:66:05:
                    d0:08:74:c0:57:28:05:89:5d:9d:86:96:3e:3b:83:
                    24:a8:90:3c:4b:1d:3a:04:ae:60:ce:31:ab:85:34:
                    73:ce:f9:21:2b:bd:72:f3:16:c8:d2:7e:e1:ec:78:
                    aa:0e:67:8d:41:02:a4:61:69:98:d6:30:f4:64:45:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5B:16:21:EB:2E:3B:E1:55:B9:88:44:B8:E6:51:85:8A:28:26:4D
            X509v3 Authority Key Identifier:
                keyid:CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/323830343a373830383a3a2f33322d3332203d3e20323731323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7808::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:76:58:f8:06:ea:17:6e:cd:9e:e0:29:ee:84:f6:6e:24:
         40:90:ed:58:9d:14:49:09:f3:55:a2:35:4d:04:ec:c3:de:17:
         12:39:57:80:5b:6d:00:74:58:06:f5:9f:06:0e:1a:27:1b:d9:
         6a:5d:3b:37:68:d9:4c:d8:c0:f8:71:84:d4:c1:50:75:08:d9:
         15:d3:94:b7:1a:13:a6:c4:ee:d0:07:da:33:dd:e5:b3:02:d0:
         16:37:b3:52:eb:69:c1:98:8a:87:cd:3e:23:1a:6a:ff:ae:82:
         d6:90:3d:a6:51:6f:3b:d3:cc:4e:d5:78:59:f7:39:2a:4a:42:
         29:e7:dd:c9:c8:36:ea:8b:6d:f1:f5:20:18:d7:0f:47:90:8a:
         42:99:b4:b7:58:14:bb:77:ab:8a:20:93:22:c9:8b:b7:01:50:
         df:80:6e:97:2c:19:32:78:e2:23:ff:e1:c9:cb:b0:38:be:4b:
         f5:c0:3d:4c:7e:2a:e6:7a:01:f3:c0:c4:15:42:6d:37:ce:54:
         96:69:1f:f4:94:79:ce:c4:b8:85:3e:dc:c3:9a:75:45:73:2d:
         91:47:66:b0:72:58:dc:5d:b3:78:a6:e8:60:7d:db:2a:4e:7c:
         00:2f:cb:ef:3e:14:5e:69:f4:79:f4:34:f3:40:10:0c:54:f4:
         28:ac:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:58 2025 by rpki-client