Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a313030303a3a2f34382d3438203d3e20323733353134.roa
File:                     323830343a386664303a313030303a3a2f34382d3438203d3e20323733353134.roa (raw, json)
Hash identifier:          ZSATkRfM4t0OqNNtWmzeAJh+xg8e9gfUD8IvR2hyjO4=
Subject key identifier:   97:44:09:9B:09:00:DB:61:EC:55:E5:B7:05:AC:F6:D5:B4:79:3D:6E
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       69551ACAD5964ABCDB96398C465D9FE6C3B401EF
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a313030303a3a2f34382d3438203d3e20323733353134.roa
Signing time:             Sat 06 Sep 2025 17:01:50 +0000
ROA not before:           Sat 06 Sep 2025 16:56:50 +0000
ROA not after:            Sat 05 Sep 2026 17:01:50 +0000
asID:                     273514
IP address blocks:        2804:8fd0:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl
                          rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 16:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:55:1a:ca:d5:96:4a:bc:db:96:39:8c:46:5d:9f:e6:c3:b4:01:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Sep  6 16:56:50 2025 GMT
            Not After : Sep  5 17:01:50 2026 GMT
        Subject: CN=9744099B0900DB61EC55E5B705ACF6D5B4793D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:25:fe:ad:c3:b1:6f:9e:10:6f:e2:06:12:
                    a3:5b:d9:33:31:46:52:d8:00:bf:43:79:e3:30:87:
                    67:ca:a5:ad:4e:46:67:1c:1d:ea:ce:ec:55:46:4c:
                    be:5b:94:a1:66:ee:ff:99:eb:5a:cd:ab:e1:82:d0:
                    07:a4:f2:14:ef:34:b0:27:0a:6b:0c:e4:41:b6:b1:
                    43:0b:cb:19:0e:1f:41:22:cd:48:f7:80:58:07:31:
                    d7:ec:3f:66:f3:d3:81:74:4f:52:26:db:2e:d9:28:
                    2c:91:a0:3a:2b:5e:20:79:90:c5:73:de:06:ec:9b:
                    7e:f8:1f:ca:5d:51:74:3a:bd:30:14:c7:ee:59:41:
                    b5:90:fa:86:f2:4f:f5:45:bb:df:79:c5:73:b4:c7:
                    20:b6:61:f6:c0:f6:b5:ad:2e:d2:63:47:e4:c0:7f:
                    a8:23:55:06:92:55:78:cd:bf:c6:76:0a:5c:7a:c4:
                    5a:2b:c2:2c:fa:b2:85:83:19:76:59:c6:b1:9c:b4:
                    cc:c1:c7:90:02:c3:90:3a:07:aa:39:be:44:83:24:
                    99:0a:9f:a0:6a:37:88:e0:c9:30:94:8f:16:da:b6:
                    4a:53:2b:bd:69:7c:01:a4:8d:c0:04:50:13:d8:a3:
                    4a:d0:20:b3:68:91:5c:7e:20:9e:af:b8:ed:bb:7a:
                    8c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:44:09:9B:09:00:DB:61:EC:55:E5:B7:05:AC:F6:D5:B4:79:3D:6E
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a313030303a3a2f34382d3438203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fd0:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:8a:5f:f7:5e:26:45:57:66:fa:a1:8a:ee:52:fc:b0:45:9a:
         51:31:28:f7:e4:e9:da:9c:85:60:95:bc:b5:2e:3d:3b:b6:fa:
         0d:ae:70:f3:8a:5a:6f:f9:8c:07:94:6b:1b:93:7d:16:f8:f5:
         7c:25:58:53:b9:3b:2a:cc:1f:67:fa:ef:e1:1b:45:f1:82:ad:
         cf:d2:0b:35:2b:8c:61:c3:8b:85:59:79:82:fa:27:16:2e:bb:
         29:13:f1:64:59:65:ed:c4:0c:bd:28:80:24:fe:35:d2:63:ce:
         97:0b:93:bf:c3:15:d3:40:70:9b:43:4c:ec:49:51:0a:0e:57:
         21:32:7f:27:06:ea:a5:31:be:49:6a:d9:db:14:d7:42:fd:4d:
         0f:00:ca:87:da:3c:84:15:3f:5b:71:d4:cc:98:88:4f:f8:32:
         0e:bc:f4:0d:2b:99:e8:9d:8f:fc:9b:64:25:28:77:f9:5c:3e:
         19:fb:5f:10:d6:de:a3:31:af:8e:1e:cc:1c:0e:09:12:e8:f8:
         4f:42:9f:f2:75:c6:62:6d:8e:61:7a:0b:72:99:0b:02:74:3f:
         8e:a8:7e:fb:d4:24:d1:cb:29:29:5b:1b:2f:e1:26:6a:66:86:
         6b:2f:da:c8:c3:0b:be:53:35:0b:4e:00:2c:3c:ff:98:d6:07:
         60:2c:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:34:15 2025 by rpki-client