Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/323830313a38383a3a2f33322d3438203d3e203533313636.roa
File:                     323830313a38383a3a2f33322d3438203d3e203533313636.roa (raw, json)
Hash identifier:          TZETc0ZAogG0PrWBp2XAptDcUHPRRcrGs/+hyYy+2cI=
Subject key identifier:   63:A6:E0:BC:1F:29:11:B7:6C:AD:CE:A4:1F:9C:8E:F0:9F:DE:2A:72
Certificate issuer:       /CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Certificate serial:       1A51E5017AA596D7E7D3E4D65DFCEC6786F89060
Authority key identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/323830313a38383a3a2f33322d3438203d3e203533313636.roa
Signing time:             Tue 09 Sep 2025 14:17:28 +0000
ROA not before:           Tue 09 Sep 2025 14:12:28 +0000
ROA not after:            Tue 08 Sep 2026 14:17:28 +0000
asID:                     53166
IP address blocks:        2801:88::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
                          rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:51:e5:01:7a:a5:96:d7:e7:d3:e4:d6:5d:fc:ec:67:86:f8:90:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725BCF70C08F4B2744E301141EF06513A96F28D6
        Validity
            Not Before: Sep  9 14:12:28 2025 GMT
            Not After : Sep  8 14:17:28 2026 GMT
        Subject: CN=63A6E0BC1F2911B76CADCEA41F9C8EF09FDE2A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:ef:3e:3f:50:a4:43:bb:7a:77:e3:53:7a:
                    dc:dd:1a:a7:95:77:6b:ce:3a:41:e1:bf:74:7f:e7:
                    cb:33:08:5f:ea:27:84:36:14:8e:6b:c9:5a:28:cf:
                    f5:6d:92:35:78:de:2b:33:34:b4:b3:72:f2:eb:c9:
                    69:b1:5b:c5:f0:a3:28:f4:2f:e2:20:cc:04:06:0e:
                    dd:0e:57:07:d7:41:44:22:4a:bb:42:6b:2f:f1:41:
                    2e:3a:f3:69:4c:90:e1:7f:16:f6:f4:54:9d:ba:58:
                    90:41:34:ee:4f:01:80:58:80:d3:bb:8c:79:49:09:
                    e7:54:72:d8:5f:07:38:53:9b:32:16:8c:2f:81:85:
                    c7:18:08:36:ad:8c:10:eb:9f:b9:a5:53:6a:df:68:
                    17:dd:f5:bf:3c:2d:5f:85:0b:b3:08:54:db:e7:16:
                    98:19:15:ba:c8:d1:9b:0c:2c:78:d6:e1:f4:d2:08:
                    cf:65:25:de:aa:2e:cb:21:13:99:75:59:5b:1a:c6:
                    f0:81:78:bf:1a:a3:68:59:f1:5b:ff:e8:6d:3d:30:
                    05:e4:cb:62:ab:c4:0f:ea:7c:96:5f:c2:ec:da:f9:
                    de:42:a0:18:b1:46:fa:cc:f4:da:c8:c3:7e:60:9a:
                    61:9c:8f:e1:7f:6d:84:3a:cc:3b:f6:49:c9:55:60:
                    8b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A6:E0:BC:1F:29:11:B7:6C:AD:CE:A4:1F:9C:8E:F0:9F:DE:2A:72
            X509v3 Authority Key Identifier:
                keyid:72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/323830313a38383a3a2f33322d3438203d3e203533313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:88::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:f2:6f:8b:69:be:8c:55:33:1c:a2:c9:e3:5b:3e:75:d3:c8:
         50:ec:85:91:d2:3d:e7:3a:bb:18:0c:02:33:3b:db:02:07:72:
         07:7a:13:8a:4d:26:fb:50:cc:4c:9a:c9:b2:86:05:9e:10:b5:
         28:d0:95:15:85:2e:db:96:16:5f:94:2b:1b:23:2b:61:87:0e:
         4f:2f:3f:9e:78:37:eb:65:ab:15:0a:f1:c5:e8:df:21:c3:d5:
         a0:c4:a0:6c:dc:e1:b9:32:a4:16:5e:bb:34:a2:12:56:cd:39:
         60:d8:07:5d:97:4c:a9:0a:c1:ae:81:92:b2:1d:25:22:70:04:
         b6:38:6f:57:7d:22:9c:c0:77:cf:2a:f6:ca:e1:c0:24:da:1c:
         f9:b8:e4:be:d9:e1:6d:d6:b6:18:65:1b:9b:61:c8:40:ca:5a:
         b5:61:31:72:30:e5:12:ed:a6:ed:90:2c:fc:f1:a1:02:46:53:
         e2:7d:5a:ba:4c:b8:5d:3e:c2:c3:4f:fd:85:3e:90:9a:57:a2:
         b0:5f:81:5e:99:d1:16:98:d6:8f:c8:56:c6:e3:39:02:fe:86:
         93:8a:78:db:34:cc:a1:21:4c:65:04:60:7d:68:55:be:bb:fe:
         44:90:c1:c2:99:0b:83:d8:33:0e:dc:5d:61:16:e3:23:97:fb:
         28:62:7d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:55:32 2025 by rpki-client