Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3a2f33322d313238203d3e20323632343934.roa
File:                     323830343a6164383a3a2f33322d313238203d3e20323632343934.roa (raw, json)
Hash identifier:          LLpsl5AluF6zIZvfxcI+d9Aanspc96/DnuBc2GMgxqs=
Subject key identifier:   B8:D8:33:57:C8:68:6D:04:58:37:F9:BB:06:98:60:D7:55:AC:72:0C
Certificate issuer:       /CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
Certificate serial:       4EC6359F61200683245696504C428BFBCDEE9906
Authority key identifier: A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3a2f33322d313238203d3e20323632343934.roa
Signing time:             Mon 04 Aug 2025 20:22:03 +0000
ROA not before:           Mon 04 Aug 2025 20:17:03 +0000
ROA not after:            Mon 03 Aug 2026 20:22:03 +0000
asID:                     262494
IP address blocks:        2804:ad8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 20:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c6:35:9f:61:20:06:83:24:56:96:50:4c:42:8b:fb:cd:ee:99:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
        Validity
            Not Before: Aug  4 20:17:03 2025 GMT
            Not After : Aug  3 20:22:03 2026 GMT
        Subject: CN=B8D83357C8686D045837F9BB069860D755AC720C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:60:4e:0a:28:25:b5:6c:8f:7a:b9:29:cf:56:
                    fd:e2:0b:fa:d5:7a:47:52:97:0f:f9:c8:9c:85:6e:
                    00:af:ae:c0:66:ad:68:37:eb:79:5f:82:dd:a3:77:
                    37:bc:0f:3e:ec:30:fd:11:25:f8:e6:43:83:27:5e:
                    16:18:5a:cf:8c:b4:9c:9f:5b:1c:69:65:de:b2:f6:
                    e8:16:cc:63:7c:95:7d:15:21:66:e8:b7:72:fa:e9:
                    d3:05:0d:d7:9b:c1:c0:f2:86:7f:e4:92:0e:2a:35:
                    0d:b7:d5:ad:f5:af:15:a1:b5:43:e2:8d:c2:91:36:
                    e2:43:88:86:34:a3:8f:cd:5f:70:d1:14:31:2b:de:
                    73:03:81:48:4f:28:49:85:a3:be:5c:c3:60:24:1d:
                    4c:f0:01:f4:a1:eb:59:44:14:03:07:48:00:77:9c:
                    08:03:a1:25:08:d5:7e:95:ce:7e:a5:82:f0:5a:05:
                    28:6f:1b:a2:5c:e5:85:7d:c4:15:95:21:fa:27:bb:
                    86:57:d3:51:d2:92:83:4a:1c:c5:87:4d:36:64:04:
                    a4:16:3a:27:60:b3:cb:8c:f0:ad:89:9d:73:c0:f8:
                    bf:29:0a:18:6b:65:5d:86:05:ea:d4:f3:d5:89:29:
                    da:e2:27:27:72:7d:ad:2b:22:21:b5:e5:e5:20:b2:
                    93:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D8:33:57:C8:68:6D:04:58:37:F9:BB:06:98:60:D7:55:AC:72:0C
            X509v3 Authority Key Identifier:
                keyid:A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3a2f33322d313238203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:11:a7:35:4a:f7:95:e4:83:77:70:f0:32:69:09:32:16:f8:
         87:15:13:ab:5c:fb:ad:4e:36:44:8e:9c:c2:a6:71:eb:a1:c1:
         93:14:21:7a:b4:24:e5:bb:0a:c0:71:ff:eb:ba:45:4d:45:21:
         b5:55:25:85:06:e6:57:59:a5:14:41:0d:11:7f:31:08:55:ae:
         a2:b1:bb:b4:2c:65:f3:1a:ba:03:50:fc:0c:4d:1e:a5:72:da:
         a3:93:d0:0e:dc:04:d1:63:28:fa:6f:87:77:19:01:62:97:08:
         e9:12:19:3e:22:fe:f5:4d:17:c2:ed:2b:62:89:2a:cc:df:99:
         c8:54:72:51:57:7f:ed:79:ae:da:41:9a:ec:08:71:69:07:20:
         f0:21:eb:d2:5f:64:2c:3b:92:7c:eb:ae:c2:e7:a8:d5:c9:68:
         ff:f6:b1:19:bc:8d:16:3e:83:b3:54:60:4e:27:bb:28:30:8f:
         c8:4b:2f:ac:3e:69:26:ef:28:b8:e0:85:02:1b:9f:e0:5b:bd:
         e1:aa:e0:9c:72:05:33:7a:49:03:7a:d3:8b:71:03:20:29:14:
         62:33:18:f7:4e:92:ff:42:a5:7b:f9:06:f7:d9:03:36:0c:e0:
         be:3a:ea:de:6c:4f:f2:b6:1f:b4:9e:cc:85:95:4d:59:e0:6c:
         21:1e:fb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:03:27 2025 by rpki-client