Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33322d3332203d3e20323638343434.roa
File:                     323830343a353134633a3a2f33322d3332203d3e20323638343434.roa (raw, json)
Hash identifier:          MkNwHyBeHjjx6MrP4jlNocS//YBZt/fyVgQGGoUV9W8=
Subject key identifier:   2B:42:2B:38:B3:C5:E6:3C:E6:D3:D9:13:8C:68:79:C3:AD:0D:AC:E9
Certificate issuer:       /CN=86B2810A6C4EB421987C3396698910082BEA85F9
Certificate serial:       1BE623B9B8739E3B77011C1636D9CE1EA85496BC
Authority key identifier: 86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33322d3332203d3e20323638343434.roa
Signing time:             Mon 25 Aug 2025 11:49:27 +0000
ROA not before:           Mon 25 Aug 2025 11:44:27 +0000
ROA not after:            Mon 24 Aug 2026 11:49:27 +0000
asID:                     268444
IP address blocks:        2804:514c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl
                          rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 11:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e6:23:b9:b8:73:9e:3b:77:01:1c:16:36:d9:ce:1e:a8:54:96:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B2810A6C4EB421987C3396698910082BEA85F9
        Validity
            Not Before: Aug 25 11:44:27 2025 GMT
            Not After : Aug 24 11:49:27 2026 GMT
        Subject: CN=2B422B38B3C5E63CE6D3D9138C6879C3AD0DACE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:19:6d:e3:d7:06:7e:5c:c9:5c:a9:ba:30:
                    e3:05:b5:b6:d2:c5:b0:c0:b1:23:19:1d:66:e0:da:
                    01:f8:3d:94:74:e4:13:1a:8a:3b:ee:11:83:b8:d2:
                    4a:8a:30:5a:31:1e:b3:64:33:29:52:81:c8:e1:e8:
                    d4:16:16:a8:9d:ba:96:8e:5b:98:f8:8a:36:ea:32:
                    1f:e6:a0:9e:bd:e3:5b:1f:e4:48:ac:1e:63:1d:c8:
                    0a:6c:05:4e:57:e2:2a:ea:54:3c:03:33:6b:3f:c9:
                    04:42:64:a7:fd:5f:6c:82:8a:80:08:6f:70:42:af:
                    8e:87:df:b6:86:ae:06:77:40:36:c7:c9:ac:59:fa:
                    d4:c4:98:e9:3f:6f:d8:b6:35:8b:be:bb:af:b7:40:
                    77:d5:a8:6f:c8:6f:7f:16:d6:a7:e6:40:13:49:ce:
                    2f:aa:d8:3a:7c:de:4a:d2:5b:0a:e0:45:79:ae:eb:
                    fd:f9:5c:c8:23:03:58:cd:a7:35:2e:ce:f8:35:a8:
                    f7:94:87:9e:c3:78:08:6c:bb:d8:06:c8:f1:46:6d:
                    e9:1e:07:1b:33:52:b9:69:5e:f6:82:5b:61:3c:01:
                    a1:0f:21:52:04:52:e4:41:e5:2e:25:34:58:8c:b1:
                    be:88:9e:75:af:11:42:69:ed:e3:cf:46:d3:69:2b:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:42:2B:38:B3:C5:E6:3C:E6:D3:D9:13:8C:68:79:C3:AD:0D:AC:E9
            X509v3 Authority Key Identifier:
                keyid:86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33322d3332203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:514c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:b0:2f:b2:2e:d1:47:8d:89:8d:6d:0b:0f:c3:35:0d:73:33:
         51:5e:78:ad:3f:44:d5:4f:95:85:c0:cf:00:17:02:94:42:5c:
         6f:c5:16:e2:d5:32:3e:46:c8:7e:be:2d:b6:52:1a:ba:99:39:
         30:27:28:a6:64:19:d1:2b:03:19:a2:3b:9c:67:84:64:41:f6:
         35:e5:2e:2c:3a:be:56:22:eb:72:f2:60:da:88:e9:e5:0a:f5:
         2b:9e:4c:1a:21:83:32:24:7a:7d:6b:2d:0b:ae:ce:90:7e:6e:
         d9:53:58:14:a9:b1:63:b5:02:90:42:24:bc:2f:93:2f:72:e5:
         a6:fd:8c:a1:c8:62:2f:4f:10:0e:25:63:17:16:47:57:da:b7:
         96:95:e8:1c:a3:35:0a:7a:dd:fe:1d:94:c2:e1:74:33:82:08:
         1b:e6:a0:7f:cb:be:c3:47:33:b5:8e:41:df:9d:a9:af:7b:d4:
         ab:dc:be:3e:15:20:7d:47:9c:11:85:fd:1e:ee:12:5b:0b:56:
         f8:f7:78:2f:49:f4:99:fe:9e:da:31:28:af:26:2e:27:8c:fc:
         21:7c:18:d8:e8:9b:50:51:5d:3f:96:83:a8:46:97:87:06:95:
         bd:b1:70:74:69:0b:54:14:77:3e:03:a7:54:87:4a:cf:6e:bb:
         60:2b:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:05:27 2025 by rpki-client