Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/323830343a343935343a3a2f33322d3438203d3e20323637313738.roa
File:                     323830343a343935343a3a2f33322d3438203d3e20323637313738.roa (raw, json)
Hash identifier:          ohId124Tki/1YSrnuk4wfxRYQ7r3BCYak2fx6DjC/b8=
Subject key identifier:   A8:3D:42:6D:03:0B:62:CB:1B:40:72:75:E5:57:63:62:35:B9:3E:99
Certificate issuer:       /CN=ECABE999366C3D759F07776633849CF7F486B8D3
Certificate serial:       21013E9DF9A93EE69CB33848458FEBCB29FED34C
Authority key identifier: EC:AB:E9:99:36:6C:3D:75:9F:07:77:66:33:84:9C:F7:F4:86:B8:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECABE999366C3D759F07776633849CF7F486B8D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/323830343a343935343a3a2f33322d3438203d3e20323637313738.roa
Signing time:             Wed 13 Aug 2025 13:06:19 +0000
ROA not before:           Wed 13 Aug 2025 13:01:19 +0000
ROA not after:            Wed 12 Aug 2026 13:06:19 +0000
asID:                     267178
IP address blocks:        2804:4954::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/ECABE999366C3D759F07776633849CF7F486B8D3.crl
                          rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/ECABE999366C3D759F07776633849CF7F486B8D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECABE999366C3D759F07776633849CF7F486B8D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:01:3e:9d:f9:a9:3e:e6:9c:b3:38:48:45:8f:eb:cb:29:fe:d3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECABE999366C3D759F07776633849CF7F486B8D3
        Validity
            Not Before: Aug 13 13:01:19 2025 GMT
            Not After : Aug 12 13:06:19 2026 GMT
        Subject: CN=A83D426D030B62CB1B407275E557636235B93E99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:d7:dd:4e:37:10:41:93:b4:5a:9c:84:46:
                    99:d6:29:a1:f6:ae:d9:d1:9d:e3:72:50:2b:80:f9:
                    5f:88:5a:f7:29:aa:79:a9:ef:3c:e7:5d:c8:4e:98:
                    d4:40:03:68:64:07:2e:ec:0f:a8:09:72:8f:59:fe:
                    bf:ad:ba:43:0b:74:91:e5:64:6e:72:64:63:d4:d4:
                    b0:1e:88:87:87:d2:37:72:72:4d:b8:61:a4:e6:e0:
                    77:30:44:94:2d:67:5f:77:fe:19:f1:ec:38:48:99:
                    2c:1b:98:20:48:c4:da:7e:a6:22:b0:05:20:c1:f2:
                    56:58:4d:b6:a5:98:51:1d:15:ad:c7:67:c1:9f:58:
                    23:78:61:8f:9c:f9:88:ec:1c:58:6c:16:20:4d:c5:
                    08:0c:cf:59:94:a8:81:72:6b:62:16:99:4c:2f:eb:
                    41:7a:59:f7:7b:ff:6e:ec:db:17:2e:ae:39:41:b5:
                    bf:e0:de:5f:bf:8a:36:8b:5f:b1:15:5d:aa:a9:ca:
                    cf:f1:89:36:65:60:5b:74:49:45:e7:ec:ad:b4:55:
                    28:6b:fb:dd:52:75:fb:14:d1:26:13:cd:e3:b2:e6:
                    b6:d9:7c:88:94:85:1d:78:75:6b:dd:5d:5c:47:87:
                    94:ac:e6:6c:f6:94:8a:9b:03:61:77:3b:9d:18:74:
                    59:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3D:42:6D:03:0B:62:CB:1B:40:72:75:E5:57:63:62:35:B9:3E:99
            X509v3 Authority Key Identifier:
                keyid:EC:AB:E9:99:36:6C:3D:75:9F:07:77:66:33:84:9C:F7:F4:86:B8:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/ECABE999366C3D759F07776633849CF7F486B8D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECABE999366C3D759F07776633849CF7F486B8D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/323830343a343935343a3a2f33322d3438203d3e20323637313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4954::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:0a:35:2a:bd:ba:80:5a:53:eb:37:42:90:90:4a:87:61:32:
         2d:7c:74:5d:3a:1e:b1:84:93:b1:b4:85:02:84:3a:86:d4:6f:
         03:b4:23:aa:fd:c0:88:b9:50:86:63:2a:4c:88:63:f1:fc:4c:
         64:56:e0:55:52:93:fe:04:bc:0b:de:27:02:61:17:db:b7:d4:
         1a:3b:24:30:ee:25:88:03:3e:02:bf:a4:37:ab:15:43:53:2d:
         e6:4d:8c:2f:d1:85:ec:43:ff:67:50:85:30:96:f1:41:18:47:
         5f:bb:6a:33:20:57:14:81:c0:d7:76:63:62:3e:a7:1f:67:ae:
         5e:16:72:aa:c2:b5:12:c9:04:f1:d2:31:77:23:86:99:fe:50:
         2d:51:5a:bb:6e:c0:51:0b:3c:f4:fa:a2:99:fc:25:1c:28:a0:
         c1:b8:21:9f:9b:c8:58:64:49:74:70:61:93:fd:7d:f2:28:66:
         aa:80:04:44:13:e0:93:d2:5b:a7:9a:a5:36:00:3f:f0:b5:9a:
         39:a0:75:41:16:33:31:31:0f:15:22:f7:14:0b:21:dc:7a:94:
         5b:1c:1c:87:e4:b0:ac:99:c0:5b:d8:cd:3b:49:83:f5:82:c3:
         97:d9:94:47:1c:25:8d:78:60:87:ab:ce:fc:cd:a0:dc:02:a3:
         06:35:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:43:12 2025 by rpki-client