Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a343030303a3a2f33342d3334203d3e20323731333837.roa
File:                     323830343a376162343a343030303a3a2f33342d3334203d3e20323731333837.roa (raw, json)
Hash identifier:          SuACBoWbU6mq/C38/6jTV7Cgoy0FEeq/uE++c3UeUJk=
Subject key identifier:   3F:D0:20:FA:B6:C7:0E:AD:16:B5:83:05:22:32:4D:48:24:4C:50:CD
Certificate issuer:       /CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
Certificate serial:       7A61914F2B9D89605D76E649B228CAB174EADBD8
Authority key identifier: E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a343030303a3a2f33342d3334203d3e20323731333837.roa
Signing time:             Tue 02 Sep 2025 02:02:07 +0000
ROA not before:           Tue 02 Sep 2025 01:57:07 +0000
ROA not after:            Tue 01 Sep 2026 02:02:07 +0000
asID:                     271387
IP address blocks:        2804:7ab4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl
                          rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 21:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:61:91:4f:2b:9d:89:60:5d:76:e6:49:b2:28:ca:b1:74:ea:db:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
        Validity
            Not Before: Sep  2 01:57:07 2025 GMT
            Not After : Sep  1 02:02:07 2026 GMT
        Subject: CN=3FD020FAB6C70EAD16B5830522324D48244C50CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:20:51:74:af:b3:df:4c:dd:25:32:b4:39:
                    7f:2c:4a:2f:6f:33:b0:28:aa:50:8f:ec:7c:be:d2:
                    d0:e9:97:00:52:d4:1c:44:b8:4f:1b:c9:81:9c:1a:
                    23:a3:c4:f1:71:8e:8d:fc:ef:7e:04:c6:fc:44:b9:
                    6d:bd:bc:0e:19:5c:32:80:32:82:53:41:5a:40:64:
                    c9:cd:cb:74:b6:6e:5a:40:a2:47:89:1d:76:f7:5d:
                    79:08:2b:f5:d9:7e:9f:43:dd:01:e8:fd:9a:dd:d0:
                    cc:35:eb:5f:66:08:47:a0:36:8b:5f:4f:b0:74:47:
                    ed:00:67:a5:50:18:c2:ab:e9:f5:8b:ad:22:f7:44:
                    c0:95:82:ed:d3:8f:ce:d2:3b:9b:ea:c6:d6:87:f3:
                    b8:97:b5:49:72:9d:07:a8:12:03:50:1c:f6:f4:80:
                    d5:ba:cf:b9:33:f9:a2:b3:08:bc:14:ca:b6:8c:b5:
                    16:72:33:2a:14:e7:cf:15:3f:f5:b4:8b:9c:11:8b:
                    ce:0d:29:66:ca:c6:59:b6:cc:82:81:a7:7a:79:e0:
                    65:12:f4:c9:47:58:9d:f5:a3:d3:04:e7:43:13:34:
                    93:fb:10:b6:a8:a3:8f:d8:c7:fd:6f:b1:1e:87:25:
                    78:d6:71:1c:1e:9c:94:76:a4:07:88:82:df:0d:8d:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D0:20:FA:B6:C7:0E:AD:16:B5:83:05:22:32:4D:48:24:4C:50:CD
            X509v3 Authority Key Identifier:
                keyid:E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a343030303a3a2f33342d3334203d3e20323731333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ab4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         63:7e:b9:7c:b1:61:e6:87:f5:6c:6c:8b:b8:ad:f6:ca:46:4a:
         bb:4d:9b:67:bd:0a:fa:92:8d:9b:e9:bb:fb:cb:3b:ef:db:b8:
         5d:47:77:da:95:78:69:b8:70:53:aa:c4:c9:62:3d:a2:d8:1d:
         da:35:f2:f5:cd:70:ed:96:77:e8:34:89:74:f7:00:b4:b0:36:
         15:7b:cf:cb:0e:e1:2b:64:b0:b2:70:d6:fe:c0:ec:ae:a8:78:
         ba:e1:5d:65:bf:fa:69:cf:f8:32:c2:1b:45:5a:e1:2b:f8:45:
         79:37:5a:9f:f0:09:e8:77:33:0f:5b:c0:3f:af:59:b7:1b:6d:
         b4:3e:92:4f:cc:76:f5:d8:6e:f2:af:57:6a:ff:7c:95:aa:d9:
         3b:0e:d8:ad:3e:97:6c:e9:65:e7:a6:d5:53:44:9d:56:9e:a2:
         26:43:a7:1e:40:d3:f1:ae:2f:01:71:06:49:59:0b:8c:9b:93:
         f4:28:b6:ad:42:d4:18:e7:7d:72:51:8f:35:ff:a3:c6:43:47:
         14:f9:1c:36:55:e5:ef:cf:47:52:c3:b9:f8:c8:9c:42:13:a8:
         02:8d:d4:c0:82:08:ba:b6:84:ac:fc:38:db:ac:21:ad:01:05:
         40:7a:2b:6e:8a:26:c2:b1:da:88:a6:e8:00:96:77:a6:77:8d:
         49:7e:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:56:51 2025 by rpki-client