Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a3a2f33342d3334203d3e20323733353134.roa
File:                     323830343a386664303a3a2f33342d3334203d3e20323733353134.roa (raw, json)
Hash identifier:          oOLFukmK9iLMxYXFDf8zH9qqjdu8hM0H+Jva8nfRLPI=
Subject key identifier:   D7:3E:4C:B6:41:28:DC:D6:21:7A:76:12:74:69:CD:1D:A8:37:19:46
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       2E50986FF973F3E1EEC98393AE1625CEC2B7A945
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a3a2f33342d3334203d3e20323733353134.roa
Signing time:             Sat 06 Sep 2025 17:01:50 +0000
ROA not before:           Sat 06 Sep 2025 16:56:50 +0000
ROA not after:            Sat 05 Sep 2026 17:01:50 +0000
asID:                     273514
IP address blocks:        2804:8fd0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl
                          rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 16:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:50:98:6f:f9:73:f3:e1:ee:c9:83:93:ae:16:25:ce:c2:b7:a9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Sep  6 16:56:50 2025 GMT
            Not After : Sep  5 17:01:50 2026 GMT
        Subject: CN=D73E4CB64128DCD6217A76127469CD1DA8371946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:03:81:ca:0e:7a:5d:b3:ea:07:d5:68:f0:e7:
                    03:3d:6c:dc:23:b3:af:6d:b5:f8:6d:6d:75:6d:ff:
                    a5:61:57:c2:91:28:24:70:25:6a:27:6a:95:11:3b:
                    ec:d9:9b:f2:5c:a5:5e:5a:33:5f:3e:61:70:80:b9:
                    c6:17:52:aa:ef:cb:ce:c1:a9:81:c1:e8:32:26:6d:
                    fc:d3:d4:c6:95:67:e6:6a:7a:f4:9b:c5:5d:f3:13:
                    53:f7:66:13:ed:a8:91:48:1d:d3:72:ec:61:48:72:
                    fc:aa:f8:57:4d:e5:9d:63:e1:b3:6c:ac:b4:68:0f:
                    54:50:85:3f:7e:ca:d0:a6:68:cb:70:9e:65:2b:53:
                    d5:f5:92:84:fc:b6:04:a5:95:a0:27:f4:48:b5:3d:
                    88:51:b2:eb:db:51:67:b2:a2:8f:08:be:4d:67:75:
                    19:c5:ac:45:d3:5a:66:d7:24:16:93:53:9d:22:79:
                    be:bd:c6:86:b5:25:84:b3:77:63:d4:ee:7e:06:72:
                    0f:e5:05:12:75:68:8b:1f:36:80:0a:b7:bd:d6:87:
                    05:20:d4:e0:e4:3b:eb:dd:cc:df:b0:06:cc:06:c7:
                    b8:73:ec:9a:75:05:f1:eb:cf:1b:e6:2a:8d:77:81:
                    ed:f4:90:84:45:b2:c0:ea:98:39:7f:c2:14:a7:93:
                    fc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3E:4C:B6:41:28:DC:D6:21:7A:76:12:74:69:CD:1D:A8:37:19:46
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a3a2f33342d3334203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fd0::/34

    Signature Algorithm: sha256WithRSAEncryption
         61:d4:bc:f2:7e:6a:b4:90:1e:bb:32:d1:86:c5:39:77:cc:88:
         bf:3b:e2:65:9f:5b:f2:97:a4:7a:4a:94:3e:48:e3:70:82:1b:
         c9:40:b8:9b:80:db:15:c2:72:1b:da:84:97:c6:30:91:3f:e0:
         ad:bc:26:57:7f:c1:f1:38:67:7b:43:57:f1:0f:b3:23:95:bb:
         d2:d6:d5:de:7e:c4:a3:f8:f5:cc:3c:13:4f:2a:6b:e6:a5:0c:
         9e:55:33:99:81:77:d4:fc:4e:91:c6:41:aa:c1:6c:33:17:9e:
         a3:ec:90:30:eb:cc:5d:9c:ea:79:bb:72:39:42:11:1b:12:27:
         88:de:08:41:02:13:a3:ca:fb:b8:11:09:b2:fa:73:9a:3d:77:
         59:36:bb:4a:83:15:43:17:55:b6:90:43:cd:31:30:2a:f1:a0:
         b6:60:e2:e7:83:05:2a:28:1e:e6:20:d8:ed:55:36:4b:01:5f:
         69:d8:00:98:74:12:ed:af:36:9f:78:b3:d0:c0:04:87:fd:7c:
         fa:e2:9e:d4:40:57:dc:c0:1c:ce:36:2d:95:46:b5:ea:6b:c0:
         33:4c:70:11:c2:46:3e:03:c4:10:41:58:ec:b6:0d:6e:aa:e0:
         4e:40:27:f5:01:50:98:5d:f0:39:ec:c9:e0:40:aa:aa:a3:7c:
         e1:8a:74:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:32:15 2025 by rpki-client