Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/323830343a363439343a3a2f33322d3332203d3e20323639343336.roa
File:                     323830343a363439343a3a2f33322d3332203d3e20323639343336.roa (raw, json)
Hash identifier:          Jmpg6VkjKkSsk6AAbTYjPr2WEbhQSGg8TSl6de0bzDs=
Subject key identifier:   DC:8E:8E:CF:88:28:E4:6A:D7:AF:88:B4:59:10:1B:C9:B8:50:54:92
Certificate issuer:       /CN=E16C601E16EC0A865BC4255275BA7116A46EA76B
Certificate serial:       58D6E495D415DC0151A8944D44F8FFC3782C8B95
Authority key identifier: E1:6C:60:1E:16:EC:0A:86:5B:C4:25:52:75:BA:71:16:A4:6E:A7:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16C601E16EC0A865BC4255275BA7116A46EA76B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/323830343a363439343a3a2f33322d3332203d3e20323639343336.roa
Signing time:             Mon 18 Aug 2025 20:07:07 +0000
ROA not before:           Mon 18 Aug 2025 20:02:07 +0000
ROA not after:            Mon 17 Aug 2026 20:07:07 +0000
asID:                     269436
IP address blocks:        2804:6494::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/E16C601E16EC0A865BC4255275BA7116A46EA76B.crl
                          rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/E16C601E16EC0A865BC4255275BA7116A46EA76B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16C601E16EC0A865BC4255275BA7116A46EA76B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 12:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d6:e4:95:d4:15:dc:01:51:a8:94:4d:44:f8:ff:c3:78:2c:8b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E16C601E16EC0A865BC4255275BA7116A46EA76B
        Validity
            Not Before: Aug 18 20:02:07 2025 GMT
            Not After : Aug 17 20:07:07 2026 GMT
        Subject: CN=DC8E8ECF8828E46AD7AF88B459101BC9B8505492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:eb:1e:87:f2:74:ce:21:f7:6e:b1:0b:a1:f4:
                    07:79:7a:bd:12:ee:57:73:aa:b5:25:ab:8b:fd:42:
                    27:ed:2b:e5:54:12:b3:cf:d3:56:24:5d:bd:8f:bf:
                    24:13:36:f9:8e:d8:35:5b:42:f6:51:dd:18:45:44:
                    f0:07:70:0c:b8:a4:86:4b:4b:b3:63:66:d9:12:1b:
                    d7:3b:f5:06:2d:5b:a8:f0:a1:b2:9b:aa:13:a7:a7:
                    ab:2a:c8:9b:4a:09:38:ee:56:1b:48:ae:ff:be:3b:
                    fe:44:20:4c:60:2e:b0:42:70:ec:72:e5:99:34:49:
                    55:2c:d1:06:64:fc:5d:05:88:25:fb:c2:1e:33:f6:
                    92:e0:4d:01:58:0c:8a:5e:8e:b0:d9:e3:cb:d7:33:
                    cd:30:ed:e4:6f:f7:02:88:bc:21:c8:0b:9b:f4:95:
                    9a:69:fb:cd:69:a4:c7:6c:15:10:4c:a7:e9:44:ca:
                    84:7a:81:88:de:3f:e7:0d:ab:28:ec:cb:b5:02:30:
                    c7:a8:79:dc:64:0d:62:c5:1e:98:70:b5:d0:3f:c2:
                    f4:91:fe:55:33:0d:1e:02:87:67:1c:c2:23:ca:af:
                    f9:99:e2:5a:aa:db:4e:06:c5:85:d1:88:77:b0:8e:
                    aa:36:4b:56:b3:50:ee:61:d7:ef:c9:f1:5a:b4:ad:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8E:8E:CF:88:28:E4:6A:D7:AF:88:B4:59:10:1B:C9:B8:50:54:92
            X509v3 Authority Key Identifier:
                keyid:E1:6C:60:1E:16:EC:0A:86:5B:C4:25:52:75:BA:71:16:A4:6E:A7:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/E16C601E16EC0A865BC4255275BA7116A46EA76B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16C601E16EC0A865BC4255275BA7116A46EA76B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/323830343a363439343a3a2f33322d3332203d3e20323639343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6494::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:fc:85:0e:b3:fd:5d:de:3a:a2:60:d4:8b:54:f3:d3:82:31:
         a9:3a:6d:9e:97:a1:0d:57:8e:5c:c3:63:fd:22:6b:38:f4:5b:
         05:f2:39:45:44:a3:7e:72:74:ca:86:cf:4a:9f:a9:15:48:78:
         cd:ce:40:52:17:a7:3c:93:0d:bf:c3:48:bd:fa:8d:f0:86:f1:
         0a:85:7d:43:70:61:80:a3:07:8d:34:34:41:6c:6d:18:ff:66:
         71:66:1e:31:75:a7:db:78:75:06:97:9b:43:94:37:6b:8c:01:
         97:74:a7:10:6a:10:17:91:c1:dd:93:95:98:48:62:93:9a:47:
         22:81:e3:90:f6:9e:d6:c6:b8:4b:f1:64:36:b3:ab:c0:8a:3f:
         e8:45:3d:d6:32:8a:06:64:8c:56:a6:f5:79:a1:20:3e:33:fd:
         48:c9:98:1f:3b:30:48:9c:b3:a5:66:25:49:44:18:e4:78:1f:
         3a:ad:13:81:d7:e7:c6:0c:37:c7:48:42:f1:1b:0a:1c:bb:2f:
         33:16:e8:61:c9:49:83:4a:ab:81:9f:ff:11:dc:55:28:90:9e:
         4c:8b:e6:ed:c6:8d:ec:05:53:95:db:2a:11:18:57:79:63:d1:
         a7:cc:fb:b0:b1:49:4e:99:27:67:4c:36:55:8e:ca:cc:ee:ca:
         6c:6d:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:24 2025 by rpki-client