Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/323830343a313465633a3a2f33322d3438203d3e20323633333539.roa
File:                     323830343a313465633a3a2f33322d3438203d3e20323633333539.roa (raw, json)
Hash identifier:          CKT9eq9db0hVQOzidpjrrVebkbB2gnWWQf20Hwx3JYg=
Subject key identifier:   EE:08:E9:4D:60:09:7F:F3:53:B7:5D:0E:7F:19:B3:F8:F6:C3:B8:F1
Certificate issuer:       /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0
Certificate serial:       25CC9E3872D193A976D7723DE0F4CE5F2DFE6ECD
Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/323830343a313465633a3a2f33322d3438203d3e20323633333539.roa
Signing time:             Fri 22 Aug 2025 13:51:36 +0000
ROA not before:           Fri 22 Aug 2025 13:46:36 +0000
ROA not after:            Fri 21 Aug 2026 13:51:36 +0000
asID:                     263359
IP address blocks:        2804:14ec::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl
                          rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cc:9e:38:72:d1:93:a9:76:d7:72:3d:e0:f4:ce:5f:2d:fe:6e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0
        Validity
            Not Before: Aug 22 13:46:36 2025 GMT
            Not After : Aug 21 13:51:36 2026 GMT
        Subject: CN=EE08E94D60097FF353B75D0E7F19B3F8F6C3B8F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b9:45:b2:e1:b8:89:3f:ae:e2:00:43:af:ba:
                    c9:69:2b:6e:02:91:eb:55:a0:b2:b2:7a:45:fe:8a:
                    45:6c:9e:93:78:45:27:bc:ad:10:9c:69:93:0e:38:
                    0c:89:cf:d9:82:6f:0c:73:fd:43:89:46:58:d8:8e:
                    19:be:f6:b9:62:bf:b8:99:a4:55:8f:d4:2f:e2:ad:
                    d8:c9:d6:b4:57:81:de:04:3f:36:d8:aa:ba:b1:d1:
                    e0:31:c4:cf:b3:7e:c9:99:c7:9c:16:89:49:3e:17:
                    7a:4e:a0:ad:d0:07:1e:b3:9c:30:19:8a:12:57:4c:
                    8c:e2:5c:41:bf:9f:2a:4e:f2:2f:9e:e5:b0:91:2f:
                    4a:0b:6d:62:1a:d0:8d:40:9a:c6:44:f1:af:c1:c7:
                    ef:7e:ac:c5:9e:79:be:79:bf:9b:83:e5:ba:62:6e:
                    a7:4d:c4:0b:35:95:13:e1:e5:b9:7c:d8:58:9e:7e:
                    1f:93:f6:1c:9e:0b:fa:6e:9b:de:46:d6:37:0b:60:
                    87:3e:5d:46:18:ba:80:c1:03:8a:83:e5:f1:41:28:
                    9e:c3:fa:97:95:30:62:59:68:a8:70:0b:99:28:ff:
                    7b:8a:96:ee:b2:de:43:ac:b9:62:7d:4e:cf:05:f1:
                    f4:d2:e3:ad:9b:88:9b:54:3e:02:29:40:e4:27:59:
                    ac:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:08:E9:4D:60:09:7F:F3:53:B7:5D:0E:7F:19:B3:F8:F6:C3:B8:F1
            X509v3 Authority Key Identifier:
                keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/323830343a313465633a3a2f33322d3438203d3e20323633333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:51:9b:70:bb:c5:bc:ee:82:f3:ab:6d:5b:39:29:d7:41:6e:
         25:c8:62:42:3d:9d:b0:5b:1d:79:2e:cf:8d:f7:ab:8c:43:c7:
         b5:db:6d:e2:5a:c6:29:98:57:b5:06:12:a7:ea:c6:45:21:89:
         0f:b6:b1:d7:ab:6d:41:1c:ab:bc:54:21:7c:a1:c7:9f:13:d7:
         ac:a2:14:e7:73:3c:54:b6:45:f6:6b:5c:70:78:d7:23:83:f9:
         8a:cb:24:80:60:71:6a:af:dc:bc:e2:7e:2f:7e:e4:c1:f9:b9:
         67:be:f9:bc:06:c8:59:a6:a9:32:5b:90:51:6e:2e:f1:5c:d0:
         c0:59:bf:9a:3e:65:b6:0a:8c:3f:76:d8:e3:e6:a3:98:02:77:
         d4:a4:b6:95:a5:3e:16:f9:38:67:1d:9c:cc:c7:f1:40:a5:20:
         0f:5f:78:ab:29:58:a8:b5:16:35:2c:9a:a1:5d:f1:51:c2:8a:
         ba:2b:2d:d9:be:1f:38:c3:a6:2e:25:dd:37:f4:3d:7b:68:10:
         7c:a8:6e:fe:a4:2c:f9:08:cf:ab:eb:f9:b1:3d:42:ed:f2:40:
         e3:34:3e:e4:aa:cd:dd:e3:cf:f5:5a:9e:7b:9a:6e:2b:d0:76:
         5c:1d:52:dd:35:76:00:c2:f5:08:9b:9f:1c:c0:71:fb:98:e6:
         23:18:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:03:02 2025 by rpki-client