Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a633030303a3a2f33342d3334203d3e20323632383138.roa
File:                     323830343a333434633a633030303a3a2f33342d3334203d3e20323632383138.roa (raw, json)
Hash identifier:          nnBybxtK3+vJwSSULgy62Eg2e+vSqbyFDwJwvFjtFbo=
Subject key identifier:   14:35:C9:7A:99:F3:F5:5F:50:7D:92:D1:24:C1:1D:AD:A0:7B:6E:4C
Certificate issuer:       /CN=F8A5885612DC8F082016099D6959B32B90C3706E
Certificate serial:       79E42A1D08CA32345CBC1D8D8AF1073A4E43A579
Authority key identifier: F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a633030303a3a2f33342d3334203d3e20323632383138.roa
Signing time:             Fri 08 Aug 2025 11:47:42 +0000
ROA not before:           Fri 08 Aug 2025 11:42:42 +0000
ROA not after:            Fri 07 Aug 2026 11:47:42 +0000
asID:                     262818
IP address blocks:        2804:344c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl
                          rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 06:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e4:2a:1d:08:ca:32:34:5c:bc:1d:8d:8a:f1:07:3a:4e:43:a5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A5885612DC8F082016099D6959B32B90C3706E
        Validity
            Not Before: Aug  8 11:42:42 2025 GMT
            Not After : Aug  7 11:47:42 2026 GMT
        Subject: CN=1435C97A99F3F55F507D92D124C11DADA07B6E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:33:b1:b5:0e:c5:62:b0:a5:b6:19:e4:83:
                    af:74:6b:10:79:a5:3f:12:a2:b2:60:46:e4:32:5b:
                    da:62:73:b4:00:d8:8a:37:9e:11:9d:39:4c:1f:81:
                    e8:c7:a6:d2:1a:22:dd:d5:d2:ac:c6:cf:7d:00:f0:
                    b7:0a:29:98:77:2d:a1:58:b4:44:a1:06:e5:24:6a:
                    20:d1:c6:69:88:d2:20:34:6b:bc:54:7a:20:98:c9:
                    fe:3e:2b:e6:9d:98:36:ad:d2:80:97:b3:81:4e:74:
                    b6:12:63:a9:8f:56:b2:4f:b1:05:bf:f4:de:2f:b6:
                    95:2d:3f:0f:53:7a:c5:19:2f:38:d2:7b:e6:4f:d0:
                    27:85:77:15:70:bd:ae:fb:c5:fa:bc:af:2f:5b:91:
                    b7:9c:31:d3:00:90:02:aa:b7:dc:39:de:a8:3a:91:
                    c3:74:ac:c3:cc:02:99:70:28:b9:b9:0c:b7:c0:64:
                    2d:32:88:a6:c6:d8:ed:1e:fd:e3:65:58:b8:c6:73:
                    ad:2b:28:82:73:39:0c:4a:29:88:2b:3d:6b:0d:1c:
                    8c:a0:4a:48:bd:e5:68:79:97:bc:92:8d:84:2c:d9:
                    68:9e:81:63:fa:8d:8f:ca:59:c8:53:82:8b:50:73:
                    43:c2:19:32:03:50:48:b3:ca:7b:65:e2:47:7e:77:
                    c8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:35:C9:7A:99:F3:F5:5F:50:7D:92:D1:24:C1:1D:AD:A0:7B:6E:4C
            X509v3 Authority Key Identifier:
                keyid:F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a633030303a3a2f33342d3334203d3e20323632383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:344c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         49:19:60:d0:ef:51:e6:88:27:76:fe:e8:3e:61:96:78:0e:36:
         1b:76:9c:05:b0:58:68:f5:bf:4d:6a:f7:f1:8d:60:7f:3e:d1:
         9d:1b:d6:42:ba:6c:c5:ea:e1:3c:8b:e4:bd:6c:5a:8c:d5:00:
         94:95:0e:57:d6:43:86:7a:ed:c9:77:32:05:98:b0:fd:2c:e3:
         4e:2a:1d:6f:fc:86:33:a7:ff:b5:d6:ae:aa:d1:24:00:b4:d0:
         30:db:11:c5:e6:a1:ad:e9:f7:3a:ec:94:72:cf:57:bd:35:0f:
         ba:ee:d3:ce:f3:ac:0e:c9:10:90:7b:50:f7:5f:52:b3:9d:5e:
         9e:e3:19:bc:21:6b:ed:79:e1:4d:59:5d:e4:fc:b7:83:71:91:
         c5:f7:2e:70:0b:90:52:9b:bb:b8:58:d3:7a:f9:58:97:da:ca:
         6f:4f:25:2f:7e:0c:13:74:80:bf:5e:94:7a:08:8d:a7:87:79:
         b7:e4:bc:dc:a4:29:68:fb:e2:80:90:83:6c:4a:5b:e4:70:9b:
         e9:56:d0:4f:70:95:2a:dd:af:9a:7d:d1:c2:e9:c9:f9:a8:9d:
         64:7b:b1:5e:2d:19:a4:8b:ff:0b:b3:e9:de:4d:94:f5:68:d5:
         7d:88:d1:86:f9:35:76:35:01:40:e0:ae:9c:97:29:11:01:67:
         90:3f:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:12:51 2025 by rpki-client