Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a3a2f33332d3333203d3e20323632383138.roa
File:                     323830343a333434633a3a2f33332d3333203d3e20323632383138.roa (raw, json)
Hash identifier:          klaqpFyEgae9tu/nglP2bssidu/OXkGksLzRwi04cdo=
Subject key identifier:   CD:67:78:E1:9B:18:2B:6C:54:71:97:3C:98:4C:04:63:5C:42:CA:B4
Certificate issuer:       /CN=F8A5885612DC8F082016099D6959B32B90C3706E
Certificate serial:       73C04FB37434B485F8A2C8B4DB980235B351DF7B
Authority key identifier: F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a3a2f33332d3333203d3e20323632383138.roa
Signing time:             Fri 08 Aug 2025 11:47:43 +0000
ROA not before:           Fri 08 Aug 2025 11:42:43 +0000
ROA not after:            Fri 07 Aug 2026 11:47:43 +0000
asID:                     262818
IP address blocks:        2804:344c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl
                          rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 06:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c0:4f:b3:74:34:b4:85:f8:a2:c8:b4:db:98:02:35:b3:51:df:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A5885612DC8F082016099D6959B32B90C3706E
        Validity
            Not Before: Aug  8 11:42:43 2025 GMT
            Not After : Aug  7 11:47:43 2026 GMT
        Subject: CN=CD6778E19B182B6C5471973C984C04635C42CAB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:6c:3a:74:22:5e:e9:8d:9f:c2:27:e5:68:
                    5e:c4:ec:54:8d:97:0a:63:33:e5:e4:9d:51:49:b7:
                    b2:23:f4:44:59:9b:d8:0c:b9:dc:54:4a:73:31:e1:
                    91:ae:9e:4c:e5:16:9c:f5:db:c6:2f:b0:d2:07:89:
                    50:ab:e1:e4:21:60:61:a2:e6:49:1c:d7:f2:bb:6f:
                    4d:65:d1:1b:c0:83:ad:6c:cf:37:fd:03:fe:e9:f1:
                    9d:7d:71:61:c1:58:a3:94:3c:be:39:2a:5d:4f:39:
                    c6:92:b3:8d:14:41:67:f9:d4:37:00:30:ec:0b:66:
                    12:cc:df:52:e7:03:0c:89:b0:35:9c:4d:b1:aa:36:
                    f0:c3:fb:dd:76:af:1d:f2:4e:4a:55:bb:37:6b:dc:
                    36:51:04:38:73:31:43:a6:7c:87:91:e9:8b:23:28:
                    06:5d:cb:57:8c:9f:2c:10:bc:52:a0:13:cd:53:b6:
                    95:62:73:f3:dc:04:51:5c:30:4c:b8:bd:5a:33:0e:
                    76:c4:ca:31:fb:08:e9:0a:6c:71:dd:e0:6b:e4:89:
                    10:f2:d9:e8:37:25:78:de:47:cf:db:9c:74:81:a7:
                    e6:af:37:e4:c5:64:bc:3b:f6:8e:d8:08:99:7e:2c:
                    82:a6:de:9a:c6:d6:52:28:00:67:74:e0:f4:55:58:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:67:78:E1:9B:18:2B:6C:54:71:97:3C:98:4C:04:63:5C:42:CA:B4
            X509v3 Authority Key Identifier:
                keyid:F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a3a2f33332d3333203d3e20323632383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:344c::/33

    Signature Algorithm: sha256WithRSAEncryption
         7d:ad:79:ed:bc:e9:70:5d:c9:09:05:7f:b6:db:72:30:95:8b:
         ff:4d:eb:71:45:46:d2:69:58:e0:e5:2f:19:41:89:94:e8:44:
         70:7b:55:fa:06:de:1a:57:4d:31:60:58:58:eb:04:b2:78:26:
         cc:2e:c5:64:02:c1:67:d9:34:58:a2:d4:5f:d6:77:06:64:ab:
         05:41:3e:6c:7e:8e:3e:60:02:41:e5:dd:97:b4:5b:b2:c9:32:
         e0:5a:9d:8f:13:84:75:f1:d7:9f:23:ee:b8:d6:14:86:58:4f:
         ca:49:ab:11:b0:22:ab:39:89:88:8c:42:c5:84:bc:f1:7d:b9:
         ac:9c:a6:e3:0c:13:83:0f:74:cf:be:2d:13:a3:e3:ca:a4:ae:
         8f:2f:f7:99:48:25:b8:e5:1f:9d:40:60:cc:dc:fb:a1:a4:b8:
         23:a3:fc:c9:84:0f:e7:03:31:c1:3b:55:85:9e:62:7d:aa:02:
         8d:34:f3:e7:15:bd:43:69:dd:d6:a7:be:8c:55:d0:50:90:a8:
         c1:f8:aa:39:80:5b:56:e6:bd:12:09:89:5f:f4:5f:85:8c:3e:
         a3:d5:d2:16:ae:f3:2a:7c:58:3d:03:f5:8b:b4:bc:c0:f7:c4:
         3d:96:1a:b3:e2:18:15:90:3c:ad:d6:cc:a3:4c:91:72:33:74:
         29:93:06:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:12:50 2025 by rpki-client