Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33332d3333203d3e20323638343434.roa
File:                     323830343a353134633a3a2f33332d3333203d3e20323638343434.roa (raw, json)
Hash identifier:          0tKT0hmw4ukQ0+/EyfsQekM38ZKvZKpvXHeczBv3RtU=
Subject key identifier:   BD:E3:5D:09:5B:2A:3E:E5:C4:1C:B4:91:B6:81:E0:18:2F:F9:8B:94
Certificate issuer:       /CN=86B2810A6C4EB421987C3396698910082BEA85F9
Certificate serial:       1CC6EC1FD00C58E3D87CCAEDFE1499CCC4B1F053
Authority key identifier: 86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33332d3333203d3e20323638343434.roa
Signing time:             Mon 25 Aug 2025 11:49:27 +0000
ROA not before:           Mon 25 Aug 2025 11:44:27 +0000
ROA not after:            Mon 24 Aug 2026 11:49:27 +0000
asID:                     268444
IP address blocks:        2804:514c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl
                          rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 06:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c6:ec:1f:d0:0c:58:e3:d8:7c:ca:ed:fe:14:99:cc:c4:b1:f0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B2810A6C4EB421987C3396698910082BEA85F9
        Validity
            Not Before: Aug 25 11:44:27 2025 GMT
            Not After : Aug 24 11:49:27 2026 GMT
        Subject: CN=BDE35D095B2A3EE5C41CB491B681E0182FF98B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:28:9a:cf:2c:80:5f:f2:ca:3b:9f:4c:98:09:
                    da:1c:66:68:19:9f:dd:e0:f4:b5:da:c7:b5:d9:b4:
                    ad:46:43:95:e7:5b:42:72:b7:66:43:db:75:ba:a0:
                    44:5b:1a:68:d0:63:46:8e:98:59:b8:12:07:ad:68:
                    f1:d3:e5:e1:14:b2:5f:dd:1c:66:57:73:6e:c2:48:
                    46:b8:f6:a9:09:dd:5c:df:73:3d:65:a3:ca:da:5c:
                    1b:73:5d:b5:43:3d:2d:0a:e6:4b:76:ce:f5:1b:a5:
                    53:e6:94:f7:ab:4b:ec:6b:7c:5c:73:3e:4c:db:d0:
                    dd:be:65:3c:4e:cf:de:66:78:73:aa:47:aa:46:75:
                    18:bc:0d:09:d9:cd:25:91:8f:37:d9:1b:a8:b9:f0:
                    c9:cf:8f:b8:5e:3a:e5:1a:d8:2d:ea:1b:47:12:50:
                    1d:0e:2e:f3:27:72:b1:c8:e8:73:db:83:f5:ed:11:
                    b6:57:4d:b5:5b:a4:3b:7f:99:84:e5:b9:1a:d7:c3:
                    18:c8:43:7e:66:52:96:52:35:33:6b:56:61:6b:73:
                    24:c4:eb:db:43:50:71:ce:f7:93:f4:0f:ac:f5:11:
                    b6:68:1e:5a:9f:47:9b:ad:71:d2:06:da:17:5d:63:
                    bb:c0:b1:98:af:ec:8a:d9:f5:0e:0a:72:5d:1a:75:
                    b3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E3:5D:09:5B:2A:3E:E5:C4:1C:B4:91:B6:81:E0:18:2F:F9:8B:94
            X509v3 Authority Key Identifier:
                keyid:86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33332d3333203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:514c::/33

    Signature Algorithm: sha256WithRSAEncryption
         40:b6:05:0c:2a:7c:61:83:8b:f4:a0:59:7d:84:5f:1e:7e:a5:
         e8:19:3f:e4:cd:db:79:4b:93:37:8a:48:41:9f:c3:47:40:a4:
         71:0e:68:f7:f5:f7:9b:23:fc:01:64:e4:9a:63:27:54:8f:c7:
         d3:ec:8c:c7:4b:50:20:4b:34:64:76:06:d9:ab:f4:ec:ac:c7:
         f5:a7:05:bf:6b:24:33:e5:66:56:cb:6d:c6:be:df:27:48:0c:
         40:8c:e1:b7:cf:aa:9b:01:2c:c1:50:59:43:de:ce:72:8e:43:
         6d:05:fa:ba:9d:a5:bb:40:19:72:0d:32:10:87:f1:5d:d5:ac:
         f3:10:fe:09:a4:b3:dc:8f:81:8d:2b:3a:4e:fb:8c:06:bd:73:
         ab:6c:1b:d7:42:0f:06:9f:a6:23:d7:45:12:84:4b:f8:d1:19:
         59:32:c4:4b:4c:bf:cf:a3:e3:a4:f6:83:98:cc:73:c9:ec:a9:
         85:e1:8c:64:31:f2:4e:ee:9d:e6:19:43:1c:4f:7f:b0:85:ba:
         64:f8:e3:b1:b6:70:e3:d1:e7:81:c8:69:5e:14:5e:4e:a0:f1:
         fc:37:96:2a:44:75:34:9a:7b:ff:83:32:f1:bc:fd:c4:e0:ae:
         2f:0c:de:c1:a6:d9:31:f0:85:05:eb:a0:c6:aa:02:85:da:72:
         d8:20:c6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:54:58 2025 by rpki-client