Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a3a2f33332d3333203d3e20323731343733.roa
File:                     323830343a376331303a3a2f33332d3333203d3e20323731343733.roa (raw, json)
Hash identifier:          OpVHAlqhglT0sCkzR+HhYX870IRx0cw+X1+yaP8eR8I=
Subject key identifier:   5A:16:16:0F:14:3C:C1:3D:34:8C:A9:7F:63:8D:B3:DF:01:CA:1C:E2
Certificate issuer:       /CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
Certificate serial:       79721CF4A22E1DB73270E9F18578D478FC6C96B2
Authority key identifier: C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a3a2f33332d3333203d3e20323731343733.roa
Signing time:             Sat 23 Aug 2025 10:15:31 +0000
ROA not before:           Sat 23 Aug 2025 10:10:31 +0000
ROA not after:            Sat 22 Aug 2026 10:15:31 +0000
asID:                     271473
IP address blocks:        2804:7c10::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl
                          rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:72:1c:f4:a2:2e:1d:b7:32:70:e9:f1:85:78:d4:78:fc:6c:96:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
        Validity
            Not Before: Aug 23 10:10:31 2025 GMT
            Not After : Aug 22 10:15:31 2026 GMT
        Subject: CN=5A16160F143CC13D348CA97F638DB3DF01CA1CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4b:ae:38:d1:36:5e:e6:65:6c:4a:47:44:66:
                    3d:e0:56:ac:b4:6c:11:f5:eb:04:89:b6:c0:ae:d1:
                    33:32:33:60:60:b7:bb:3b:04:05:98:57:c2:a0:e8:
                    00:aa:43:90:1d:bf:f1:58:c5:82:4d:48:a9:85:56:
                    ad:9c:72:0a:8c:c8:8b:44:9f:af:91:d2:12:a5:d9:
                    88:0f:ac:e7:47:89:f5:b9:92:a2:61:0e:7b:ba:c8:
                    89:79:7d:52:81:95:a6:56:8c:eb:de:6a:c3:c5:6a:
                    30:29:9c:b9:69:7e:82:b2:7c:74:38:b0:0c:8a:cb:
                    15:01:43:0a:60:84:c3:1a:fa:df:a3:c7:71:66:94:
                    cd:0b:99:e9:de:bf:a6:cd:d6:f3:e9:3f:e9:4f:51:
                    ba:83:3d:29:43:e8:b6:d6:82:7b:96:0f:77:8e:e6:
                    d5:55:71:0f:e1:ea:fc:5f:8a:58:05:b2:dd:3b:40:
                    8d:3a:c4:d2:28:53:4a:a0:80:f1:b5:03:e3:54:40:
                    53:56:fe:6e:e6:96:e5:13:4a:26:d4:38:3b:a4:b6:
                    00:b0:cb:2f:c3:ef:ea:34:55:ff:9e:47:99:a4:34:
                    04:aa:0e:80:ba:df:0b:e2:05:6b:eb:3f:d3:ac:09:
                    8a:f9:88:09:cb:45:c3:37:ed:66:25:1e:81:77:23:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:16:16:0F:14:3C:C1:3D:34:8C:A9:7F:63:8D:B3:DF:01:CA:1C:E2
            X509v3 Authority Key Identifier:
                keyid:C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a3a2f33332d3333203d3e20323731343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c10::/33

    Signature Algorithm: sha256WithRSAEncryption
         9f:71:44:e9:04:3d:21:93:e5:a0:54:b5:37:a1:c9:0b:43:73:
         8d:4b:c0:66:b6:21:79:46:e1:0e:12:c1:ed:7f:68:fc:08:90:
         9c:fd:88:54:33:4d:f9:cf:98:c8:aa:69:6d:1d:e5:4b:1c:b5:
         d9:3d:4d:3b:21:22:7d:3f:9f:0e:94:e4:31:72:fb:ff:38:48:
         f4:8e:40:14:0e:8f:da:cd:06:64:07:6f:01:77:36:62:45:82:
         56:70:7d:03:a7:08:b5:ce:ee:2e:c8:3c:45:7b:aa:b2:b9:e6:
         16:6d:ef:c8:2b:5d:98:2e:9a:b1:93:d9:02:1b:36:ba:7c:54:
         80:42:32:d9:28:5d:47:89:0a:f0:97:4c:29:42:f1:f7:72:38:
         e8:20:52:c8:6b:05:1e:50:2e:39:cd:47:75:6d:48:f4:e3:65:
         e4:27:eb:6a:bf:a6:e3:eb:bc:1d:6f:f3:e8:d1:db:38:31:72:
         8e:76:79:6f:ed:f6:e1:66:9d:27:85:fa:d7:f3:00:22:5a:39:
         27:e2:7e:72:a2:68:32:23:e5:0d:76:8b:62:20:fe:ac:e5:11:
         09:b2:93:66:ae:52:17:4b:4b:a1:69:ef:52:6f:b2:60:5b:12:
         11:68:b4:a1:c7:9c:14:f4:7c:39:8c:bc:00:ae:2c:7f:66:50:
         00:f7:c5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:57:10 2025 by rpki-client