Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33342d3334203d3e20323731333837.roa
File:                     323830343a376162343a3a2f33342d3334203d3e20323731333837.roa (raw, json)
Hash identifier:          aWBCb7atEGsfEIpXr+JvPZ5ykonbWnakcaa79t7kBnM=
Subject key identifier:   C0:E0:4B:F9:EA:38:C9:A7:44:40:15:62:DE:20:9F:5A:32:B0:33:7B
Certificate issuer:       /CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
Certificate serial:       2D3A2915D860BED3EA3FF392668068E7DD2AFF6D
Authority key identifier: E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33342d3334203d3e20323731333837.roa
Signing time:             Tue 02 Sep 2025 02:01:41 +0000
ROA not before:           Tue 02 Sep 2025 01:56:41 +0000
ROA not after:            Tue 01 Sep 2026 02:01:41 +0000
asID:                     271387
IP address blocks:        2804:7ab4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl
                          rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3a:29:15:d8:60:be:d3:ea:3f:f3:92:66:80:68:e7:dd:2a:ff:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
        Validity
            Not Before: Sep  2 01:56:41 2025 GMT
            Not After : Sep  1 02:01:41 2026 GMT
        Subject: CN=C0E04BF9EA38C9A744401562DE209F5A32B0337B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:f2:10:4a:d7:bc:f5:65:65:bb:e2:45:03:
                    e9:7c:61:42:f4:a5:c7:7a:a9:ce:5a:62:a6:9a:7b:
                    ec:b3:a5:dd:1b:c2:69:ee:c4:4a:1e:93:ac:f5:76:
                    fa:4f:ee:93:35:7e:d4:9b:91:54:3b:95:55:aa:1e:
                    65:5f:a6:bd:a2:f6:eb:a3:0a:3d:5e:b4:b8:3a:6e:
                    55:06:5a:fe:c0:9a:60:1e:7c:e9:5e:4b:b2:32:6c:
                    10:c3:3f:c2:9f:90:7e:06:ba:37:68:c4:f2:60:55:
                    3d:00:7b:a7:4a:23:c6:54:a6:ed:b8:90:27:fd:15:
                    71:18:0e:f2:84:23:c7:aa:53:f5:83:32:20:c1:46:
                    33:dd:a6:03:62:70:b8:84:21:65:b1:30:4d:08:dc:
                    de:57:83:48:9a:bd:b4:01:45:1a:c4:58:06:ed:4c:
                    2f:01:50:01:5e:3f:2c:84:33:ea:f8:eb:06:32:a5:
                    8f:df:46:a1:f7:50:46:d1:85:2c:94:90:c2:26:1c:
                    80:d9:95:a2:f2:5c:1f:51:77:70:0b:43:4b:aa:c5:
                    0e:08:18:d3:ec:aa:f2:34:1b:44:b3:f5:75:16:78:
                    10:5c:93:fc:9c:8e:98:38:60:97:1a:01:02:a0:fc:
                    97:6e:e7:0a:22:11:59:b2:c0:49:f8:b2:54:9f:0f:
                    ca:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E0:4B:F9:EA:38:C9:A7:44:40:15:62:DE:20:9F:5A:32:B0:33:7B
            X509v3 Authority Key Identifier:
                keyid:E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33342d3334203d3e20323731333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ab4::/34

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:2b:57:68:20:41:9f:0f:25:7f:c2:2e:5f:04:38:6c:d9:
         56:f0:de:a1:52:7f:7a:a7:03:48:43:b7:e5:5d:03:20:8e:a4:
         02:3e:58:27:3b:80:a5:ff:8b:0b:d0:50:80:39:99:5e:94:c1:
         97:ce:97:ed:14:0c:62:03:87:e9:2a:be:6c:9b:e1:8b:7c:41:
         2e:ac:96:3f:b6:85:83:0b:64:99:1c:97:8a:a0:17:75:1c:92:
         f9:31:e4:a2:48:33:d8:44:96:73:d1:7c:70:6f:d9:18:c7:35:
         4a:63:dd:81:88:11:60:ef:97:27:92:63:6b:e7:8a:d2:af:be:
         29:12:b8:68:b6:3c:88:f0:12:e1:83:e1:74:ae:62:9a:5a:84:
         7d:89:60:b2:0e:24:73:e1:77:6f:94:5a:6b:72:92:cf:4b:c7:
         db:57:d1:ca:f8:bc:70:94:2a:18:76:df:dd:10:46:b6:54:7b:
         3a:d5:2f:a3:cd:15:d2:10:90:7b:47:42:79:4f:06:14:fc:b5:
         24:c8:b1:c9:40:c6:27:11:c2:04:2e:74:55:ee:4e:c6:78:18:
         69:aa:52:71:92:f4:7f:28:8e:af:6d:56:56:f7:18:78:5f:85:
         2c:47:cd:0f:59:3e:e8:8d:ed:f3:83:fb:99:c8:cb:4f:af:ce:
         99:eb:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:08:29 2025 by rpki-client