Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/323830343a313863343a3a2f33322d3438203d3e203533303439.roa
File:                     323830343a313863343a3a2f33322d3438203d3e203533303439.roa (raw, json)
Hash identifier:          urWgHhAVdeC5naHJSszwWKdmey+bUAJI1TglHeEwLP4=
Subject key identifier:   A9:31:45:08:66:E1:62:51:EC:EE:3A:5B:87:27:8C:9D:8B:55:D2:CA
Certificate issuer:       /CN=16474F800291002DD3C19B68FA7ADC4D0E8712BC
Certificate serial:       60FB3584D779D71E545DF60DFF0DB082008E6677
Authority key identifier: 16:47:4F:80:02:91:00:2D:D3:C1:9B:68:FA:7A:DC:4D:0E:87:12:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16474F800291002DD3C19B68FA7ADC4D0E8712BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/323830343a313863343a3a2f33322d3438203d3e203533303439.roa
Signing time:             Sat 26 Jul 2025 13:40:28 +0000
ROA not before:           Sat 26 Jul 2025 13:35:28 +0000
ROA not after:            Sat 25 Jul 2026 13:40:28 +0000
asID:                     53049
IP address blocks:        2804:18c4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/16474F800291002DD3C19B68FA7ADC4D0E8712BC.crl
                          rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/16474F800291002DD3C19B68FA7ADC4D0E8712BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16474F800291002DD3C19B68FA7ADC4D0E8712BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 15:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fb:35:84:d7:79:d7:1e:54:5d:f6:0d:ff:0d:b0:82:00:8e:66:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16474F800291002DD3C19B68FA7ADC4D0E8712BC
        Validity
            Not Before: Jul 26 13:35:28 2025 GMT
            Not After : Jul 25 13:40:28 2026 GMT
        Subject: CN=A931450866E16251ECEE3A5B87278C9D8B55D2CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:61:18:f5:69:56:68:71:2f:d0:22:7f:27:e8:
                    74:08:9c:e1:ce:a5:9a:8e:b5:60:d8:8f:54:df:26:
                    4c:ef:60:a3:2f:55:b0:2c:58:23:1e:e2:ba:8f:bb:
                    7b:5a:fc:a7:f2:76:25:e1:42:d1:e1:fb:53:d0:d0:
                    3f:3c:0c:0e:bd:fb:d0:16:42:61:7b:a7:3a:1f:b3:
                    3f:00:80:4a:fe:8e:45:80:e5:f5:bd:04:a5:60:aa:
                    df:b7:69:08:67:95:98:03:b1:39:c5:f3:21:32:85:
                    24:66:0a:a9:9a:81:8c:67:f9:e0:7d:2b:fe:3c:ec:
                    31:75:18:91:ad:4d:6d:a9:5a:94:ed:1c:25:6a:70:
                    ae:00:df:12:7b:fb:98:16:02:d9:66:19:26:35:ab:
                    0a:22:8d:90:d7:b7:a5:15:2b:6f:91:7e:0c:94:c1:
                    e0:0c:74:b0:53:a6:70:22:86:7b:0d:8c:c7:3f:71:
                    53:59:95:e8:15:ac:b4:5c:66:ba:9f:52:65:36:e9:
                    af:0b:06:87:99:bb:73:b8:9f:f2:a0:36:df:fb:a7:
                    e9:49:c6:88:a8:a5:96:91:6e:32:72:75:84:26:f6:
                    59:25:7a:b9:59:3a:03:a9:16:c4:7b:dc:38:29:d8:
                    45:fe:ee:25:58:12:3e:d3:b3:9c:26:96:fc:34:1e:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:31:45:08:66:E1:62:51:EC:EE:3A:5B:87:27:8C:9D:8B:55:D2:CA
            X509v3 Authority Key Identifier:
                keyid:16:47:4F:80:02:91:00:2D:D3:C1:9B:68:FA:7A:DC:4D:0E:87:12:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/16474F800291002DD3C19B68FA7ADC4D0E8712BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16474F800291002DD3C19B68FA7ADC4D0E8712BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/323830343a313863343a3a2f33322d3438203d3e203533303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:91:34:d6:95:41:e8:db:5a:97:b3:96:3a:4f:94:92:d4:1d:
         62:c3:9e:06:b0:66:76:26:b8:74:cb:9f:18:38:47:06:18:74:
         57:9e:84:8c:b2:18:d4:41:1e:47:2a:87:13:04:6d:11:7d:69:
         6a:b0:0d:1b:fe:52:37:bc:fd:9c:8a:91:eb:07:cd:fc:75:15:
         49:c7:3c:49:55:d7:51:61:50:de:cc:17:c9:3f:f1:06:d6:77:
         5c:67:07:85:f0:55:7f:a8:e4:b8:47:15:2e:8a:d1:47:ba:c2:
         6f:a4:e2:1c:a3:fd:b2:3d:c1:3d:cf:22:ff:41:f2:70:71:55:
         50:05:f9:99:f5:d4:d3:05:0d:de:2b:a2:90:94:51:4e:ab:ef:
         08:22:b8:2e:dd:a5:92:8d:57:51:f1:b0:24:2c:c3:89:70:9d:
         26:1d:6d:93:f1:eb:a9:3d:8e:91:63:07:a1:40:eb:df:84:0e:
         c2:5c:ab:83:67:ef:f1:2a:b0:10:6f:9b:cf:f2:6b:51:76:8e:
         2a:7b:e1:7c:34:46:4b:77:6f:3d:c7:30:08:4c:73:37:54:48:
         b7:6f:89:ae:08:33:8f:58:78:0c:fc:96:9c:7b:6d:c1:c3:cf:
         16:fe:3d:df:da:57:5e:d1:60:53:f3:8c:ef:2f:10:d3:c4:62:
         c8:ef:89:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:56:34 2025 by rpki-client