Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa
File:                     323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa (raw, json)
Hash identifier:          FbCpjBvAojjt7w4fwyVC24k2dsz3UpEkag6gfu0cU0I=
Subject key identifier:   E9:FF:E4:BD:68:83:5C:0F:5B:92:00:0E:04:A4:FC:3D:87:0C:A6:BB
Certificate issuer:       /CN=030432E293597EB9BE73A032AB1ED40C750C628E
Certificate serial:       0B381B8A5D3A819F15B7DF15C76870CBA0375FC2
Authority key identifier: 03:04:32:E2:93:59:7E:B9:BE:73:A0:32:AB:1E:D4:0C:75:0C:62:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030432E293597EB9BE73A032AB1ED40C750C628E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa
Signing time:             Tue 22 Jul 2025 13:34:55 +0000
ROA not before:           Tue 22 Jul 2025 13:29:55 +0000
ROA not after:            Tue 21 Jul 2026 13:34:55 +0000
asID:                     268746
IP address blocks:        2804:5a10:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030432E293597EB9BE73A032AB1ED40C750C628E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:38:1b:8a:5d:3a:81:9f:15:b7:df:15:c7:68:70:cb:a0:37:5f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030432E293597EB9BE73A032AB1ED40C750C628E
        Validity
            Not Before: Jul 22 13:29:55 2025 GMT
            Not After : Jul 21 13:34:55 2026 GMT
        Subject: CN=E9FFE4BD68835C0F5B92000E04A4FC3D870CA6BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:42:1c:6b:e5:34:56:85:2b:c7:a0:c3:85:e2:
                    18:76:98:9e:85:4f:ad:08:d3:b6:61:fe:fd:f3:bf:
                    d0:ee:7d:53:ae:ca:ce:fa:a5:10:ef:4d:f8:b4:aa:
                    ea:ca:d3:86:d2:1c:dc:8b:1c:a4:50:df:c4:8d:9c:
                    d0:1e:d7:cb:dd:52:29:42:9f:1d:99:de:90:e4:3d:
                    61:cf:d2:f3:b7:6d:de:52:32:47:9c:a0:e7:48:ad:
                    90:70:15:02:39:96:f0:19:9f:c4:6d:cf:48:ba:1b:
                    83:14:a8:29:bf:10:b4:c1:d2:76:fe:a8:76:b4:a6:
                    3f:a6:16:c6:e9:86:93:dd:e4:8a:f6:b6:7a:80:76:
                    9d:85:36:0a:3e:1e:bc:32:67:91:e2:80:bd:c0:ed:
                    8c:7d:23:11:33:58:cd:09:4c:1b:cd:4a:ef:eb:47:
                    de:4b:1a:b9:4d:b8:47:ef:20:8a:73:cf:7a:ed:29:
                    9d:2f:46:2d:9d:e9:e0:07:d7:94:e8:d6:85:88:d2:
                    39:d9:9b:bc:67:62:4f:da:b6:ea:ef:4a:78:f2:4c:
                    47:97:85:65:38:52:a7:5f:f3:13:6c:24:ef:1c:15:
                    05:1e:84:ee:a0:1c:45:18:d1:6d:41:d9:7e:1d:e3:
                    5f:99:2c:14:75:8a:ea:cb:c1:5c:dc:40:15:98:08:
                    56:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FF:E4:BD:68:83:5C:0F:5B:92:00:0E:04:A4:FC:3D:87:0C:A6:BB
            X509v3 Authority Key Identifier:
                keyid:03:04:32:E2:93:59:7E:B9:BE:73:A0:32:AB:1E:D4:0C:75:0C:62:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030432E293597EB9BE73A032AB1ED40C750C628E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b9:43:7a:a7:ac:16:f0:5d:c0:c9:dd:02:8e:60:f5:16:91:10:
         1d:96:b0:d5:a9:54:27:27:c6:f0:2b:8e:6f:cc:11:d6:47:be:
         7b:3c:f2:60:92:d5:53:b4:21:6c:d0:e6:20:d7:92:0d:4e:03:
         42:63:96:8d:ec:67:b5:fe:d6:fd:5a:cc:e7:a2:ac:73:31:05:
         6f:2f:b2:1b:e7:20:6f:79:01:05:55:c2:43:94:2f:87:57:d3:
         24:37:2e:03:6c:a0:45:60:ca:ae:66:24:ec:de:0a:07:21:0e:
         60:c4:f6:b0:48:b6:30:4b:71:5a:6d:41:86:63:c8:7c:c1:fe:
         bd:44:6c:7e:35:87:77:0d:5c:ad:48:fc:00:9f:eb:fc:83:fe:
         4c:d9:bd:03:a3:91:c5:85:bf:15:0b:bc:ac:37:28:39:45:3e:
         6a:fc:53:69:69:1e:5e:fa:ef:69:c5:c3:f6:bf:96:ac:9e:01:
         9a:b6:fc:0a:cd:50:55:9d:84:2b:e0:12:f2:30:f7:fc:38:b5:
         53:de:2a:98:03:7f:bb:ab:53:c2:8d:10:77:62:56:61:0c:3c:
         86:b7:ad:03:a7:79:fb:4b:fd:9a:37:4e:a9:25:71:89:2d:fa:
         5e:6a:8d:b4:d7:db:cb:f0:89:51:60:33:4e:ad:80:3f:c4:eb:
         bd:7c:bb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:52:05 2025 by rpki-client