Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a3a2f33322d3332203d3e20323731343733.roa
File:                     323830343a376331303a3a2f33322d3332203d3e20323731343733.roa (raw, json)
Hash identifier:          +PO/ZAtHv2R84ROJGEUB9gZRa8Xjk1D0edBI3AukGNA=
Subject key identifier:   47:44:A8:F5:88:7A:EC:56:8C:18:AA:86:2B:2D:A7:6E:95:D4:8F:CF
Certificate issuer:       /CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
Certificate serial:       47060CB7A245569684993B213E898CF445BD08CD
Authority key identifier: C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a3a2f33322d3332203d3e20323731343733.roa
Signing time:             Sat 23 Aug 2025 10:15:31 +0000
ROA not before:           Sat 23 Aug 2025 10:10:31 +0000
ROA not after:            Sat 22 Aug 2026 10:15:31 +0000
asID:                     271473
IP address blocks:        2804:7c10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl
                          rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:06:0c:b7:a2:45:56:96:84:99:3b:21:3e:89:8c:f4:45:bd:08:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
        Validity
            Not Before: Aug 23 10:10:31 2025 GMT
            Not After : Aug 22 10:15:31 2026 GMT
        Subject: CN=4744A8F5887AEC568C18AA862B2DA76E95D48FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:1d:d1:eb:8d:26:4e:c0:fb:84:af:35:95:
                    64:93:69:e2:7b:77:97:2b:3a:dc:4d:28:e4:a1:65:
                    f2:b3:3a:3d:16:5f:70:21:22:62:ed:0a:19:86:78:
                    5f:0c:2a:ff:24:49:30:df:47:20:e2:2a:ad:92:0d:
                    41:ec:51:bb:3f:0a:af:89:cb:33:a2:a2:76:6c:25:
                    97:c4:bc:fe:aa:a6:74:14:dc:0c:15:ff:3f:31:e8:
                    83:b0:32:9a:3a:3d:2e:cc:ad:55:69:10:a2:99:bc:
                    96:a5:0b:99:88:4f:b4:72:ce:cd:d9:e8:b7:68:e2:
                    e3:21:3e:ab:2c:64:a1:02:94:de:19:00:33:27:3f:
                    bd:31:e3:0d:35:78:0c:6f:15:65:5a:e9:17:fc:a0:
                    4c:2d:ae:cb:71:9a:6e:78:34:58:b0:7a:b7:43:02:
                    f9:c4:95:c6:a4:ce:68:7b:a5:4a:f6:86:ce:fb:68:
                    4b:4f:16:d4:e9:06:9c:dd:8d:44:c4:c5:d9:f0:3e:
                    83:5a:3f:81:7d:28:45:2d:56:55:f3:49:d5:3e:69:
                    30:2d:65:33:e8:ec:f4:66:3b:61:7f:8f:7e:16:83:
                    5b:51:4d:e7:0d:1a:1c:76:66:5c:14:9d:ce:44:b5:
                    d8:c7:2e:5f:2d:ed:d1:6d:23:35:90:d1:f6:3d:3d:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:44:A8:F5:88:7A:EC:56:8C:18:AA:86:2B:2D:A7:6E:95:D4:8F:CF
            X509v3 Authority Key Identifier:
                keyid:C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a3a2f33322d3332203d3e20323731343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:43:91:89:6f:ec:5c:e8:52:d6:80:dc:b5:59:88:18:28:16:
         66:53:d7:fe:7a:5c:99:95:ed:03:95:31:b8:8d:be:d5:bb:dc:
         56:94:32:21:d0:dd:ff:a8:12:e3:19:6a:a7:41:81:ed:e6:72:
         13:31:0f:24:06:bb:39:a3:fa:21:77:6f:ff:20:c2:3a:80:87:
         b8:60:5f:b2:48:c4:5f:9d:77:d9:19:98:f4:f0:1d:d9:f2:75:
         08:c3:b7:1b:bd:da:24:60:a0:c7:1d:38:04:78:5c:b1:64:c4:
         df:0b:f2:7b:d1:56:6d:0b:93:a9:7e:b3:c6:ba:8d:ef:ca:20:
         e4:54:9d:40:9d:47:d9:57:8b:f9:7b:7e:65:26:42:61:50:0d:
         95:dd:ff:ce:8a:fc:f7:6d:89:4c:f7:69:78:61:a1:85:7d:c7:
         c4:08:5a:83:73:0e:4f:4b:8b:4e:df:e2:37:4f:a4:9a:50:73:
         e8:4b:7a:46:20:de:2b:9f:45:9f:91:32:b0:b0:db:e3:cf:be:
         ea:df:b2:f4:4d:4e:13:5d:92:15:7e:d4:4d:95:73:39:88:6c:
         25:e4:89:6e:fa:af:d8:1a:66:60:f9:80:20:c9:ca:9d:47:c6:
         b1:e1:f9:bd:bf:a7:9c:36:c1:ee:03:71:ad:f5:b7:cf:e2:21:
         b8:ad:fa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:57:44 2025 by rpki-client