Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/323830343a373966303a3a2f33322d313238203d3e20323731333337.roa
File:                     323830343a373966303a3a2f33322d313238203d3e20323731333337.roa (raw, json)
Hash identifier:          7JOsyAvXXm4sba6PaOCGgjCahzBFIy5C1I6O2V6KZII=
Subject key identifier:   06:DE:B0:64:2F:53:74:2D:80:7F:EF:8E:46:39:D5:EF:E5:D9:56:A1
Certificate issuer:       /CN=230621F0568B19CE05FE2306C094C84B666D6C54
Certificate serial:       5E377565BE31FE565D3192EFAC77B583DCF50153
Authority key identifier: 23:06:21:F0:56:8B:19:CE:05:FE:23:06:C0:94:C8:4B:66:6D:6C:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230621F0568B19CE05FE2306C094C84B666D6C54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/323830343a373966303a3a2f33322d313238203d3e20323731333337.roa
Signing time:             Thu 04 Sep 2025 14:18:17 +0000
ROA not before:           Thu 04 Sep 2025 14:13:17 +0000
ROA not after:            Thu 03 Sep 2026 14:18:17 +0000
asID:                     271337
IP address blocks:        2804:79f0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.crl
                          rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230621F0568B19CE05FE2306C094C84B666D6C54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:37:75:65:be:31:fe:56:5d:31:92:ef:ac:77:b5:83:dc:f5:01:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230621F0568B19CE05FE2306C094C84B666D6C54
        Validity
            Not Before: Sep  4 14:13:17 2025 GMT
            Not After : Sep  3 14:18:17 2026 GMT
        Subject: CN=06DEB0642F53742D807FEF8E4639D5EFE5D956A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:5c:70:81:cc:9a:fb:35:de:4f:2f:58:b8:
                    09:8b:16:92:20:3b:4a:9c:5a:4b:f6:b5:50:35:fd:
                    89:ab:6c:2e:6d:51:db:c6:5e:9e:c5:23:f9:f9:4c:
                    d9:0b:6c:0b:72:99:60:fa:8c:51:5b:55:c3:d7:e8:
                    06:a0:8c:27:17:00:78:36:39:d6:8f:ef:2b:e8:6a:
                    c7:1d:ea:0a:fa:36:a5:cb:9a:b5:c6:7d:86:e3:8f:
                    31:92:ea:9f:94:71:2b:90:32:9f:12:49:d0:85:20:
                    24:04:28:19:8f:26:8a:28:ca:d9:40:41:df:cd:3e:
                    de:03:1b:32:80:f6:cb:d7:fd:f3:de:f5:83:d7:fd:
                    52:f7:ac:bf:3d:f1:64:00:5e:89:63:93:c3:b2:09:
                    c5:56:b7:81:02:20:ac:48:5c:36:e0:4c:36:ce:22:
                    ce:36:7a:3d:1c:c9:41:8a:32:27:b8:72:13:14:61:
                    b4:32:59:53:1a:23:17:ca:84:b4:2b:b5:ed:ca:f1:
                    9e:6b:bc:c9:f5:b1:9d:4b:ff:6f:68:f7:5a:37:4f:
                    0f:a6:77:fa:6a:7e:fa:55:65:2e:f6:59:af:6c:81:
                    79:7a:93:93:03:e6:57:39:b9:ba:3f:82:98:30:72:
                    f5:b2:35:af:60:e8:ec:3a:3a:59:fb:32:2c:27:bc:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DE:B0:64:2F:53:74:2D:80:7F:EF:8E:46:39:D5:EF:E5:D9:56:A1
            X509v3 Authority Key Identifier:
                keyid:23:06:21:F0:56:8B:19:CE:05:FE:23:06:C0:94:C8:4B:66:6D:6C:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230621F0568B19CE05FE2306C094C84B666D6C54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/323830343a373966303a3a2f33322d313238203d3e20323731333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:9e:54:b1:49:e2:0d:23:f6:2b:5a:a8:04:c4:c3:1c:b2:b3:
         ab:b3:ee:e5:2e:24:3e:0a:93:7f:ad:2f:e3:89:e3:cd:f7:23:
         c4:9e:6e:ea:b1:c8:e6:41:35:4b:62:db:6b:7d:f7:c2:c6:c5:
         51:d1:40:29:12:c4:00:74:0c:a9:6f:83:65:41:72:a0:7e:58:
         d3:ad:63:e1:92:11:f2:e8:ef:62:25:f0:33:6d:e6:96:2a:3e:
         4c:34:16:31:71:c9:90:4d:6a:85:46:5f:e9:52:ef:2d:12:dc:
         a7:a0:27:ed:bb:fc:f6:e3:37:24:b3:b9:53:5a:45:30:d0:b4:
         c4:94:0b:ac:eb:29:91:73:7c:ea:88:f1:d8:1b:79:b3:46:8d:
         87:09:2c:aa:97:91:ba:06:bd:49:1b:38:6f:30:68:c1:e7:f8:
         62:26:1a:45:22:cb:6a:e6:90:9a:aa:31:54:c4:5f:b5:e0:26:
         ff:4c:d7:b4:be:1b:28:62:13:1d:8b:0c:86:cb:d9:be:53:a5:
         7b:e3:ae:67:d0:f2:27:ba:8e:67:68:e1:35:76:e0:b8:9d:04:
         e3:2a:7d:68:da:f8:bf:50:08:a2:bf:04:1b:9f:23:86:8a:ea:
         4b:4c:fd:26:95:a7:e8:af:70:e3:75:68:9a:83:ed:61:2e:fd:
         22:41:9c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:52:05 2025 by rpki-client