Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/323830343a323665383a3a2f33322d313238203d3e20323632353733.roa
File:                     323830343a323665383a3a2f33322d313238203d3e20323632353733.roa (raw, json)
Hash identifier:          sEct7WazJ9NL5q8i/4cAYK9VZFlZIucJWXbCf8si3iM=
Subject key identifier:   15:76:AB:DF:3D:25:D3:A3:31:D4:C7:78:BF:7E:30:F5:2C:9B:43:3A
Certificate issuer:       /CN=EF8E653F55597910A76FC271E222514D7CDB9D90
Certificate serial:       03FEA1D14EC351F83A91EF25CD0DA55B02A24B36
Authority key identifier: EF:8E:65:3F:55:59:79:10:A7:6F:C2:71:E2:22:51:4D:7C:DB:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF8E653F55597910A76FC271E222514D7CDB9D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/323830343a323665383a3a2f33322d313238203d3e20323632353733.roa
Signing time:             Mon 18 Aug 2025 12:52:34 +0000
ROA not before:           Mon 18 Aug 2025 12:47:34 +0000
ROA not after:            Mon 17 Aug 2026 12:52:34 +0000
asID:                     262573
IP address blocks:        2804:26e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/EF8E653F55597910A76FC271E222514D7CDB9D90.crl
                          rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/EF8E653F55597910A76FC271E222514D7CDB9D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF8E653F55597910A76FC271E222514D7CDB9D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 20:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fe:a1:d1:4e:c3:51:f8:3a:91:ef:25:cd:0d:a5:5b:02:a2:4b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF8E653F55597910A76FC271E222514D7CDB9D90
        Validity
            Not Before: Aug 18 12:47:34 2025 GMT
            Not After : Aug 17 12:52:34 2026 GMT
        Subject: CN=1576ABDF3D25D3A331D4C778BF7E30F52C9B433A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:0c:86:2f:60:96:5b:5b:62:15:32:ff:11:
                    63:c7:4b:27:ad:03:f5:86:69:8e:c9:87:ff:32:72:
                    26:27:d7:79:8f:92:f8:16:b6:ac:6c:35:5f:e3:7a:
                    70:de:d8:a5:50:d9:45:25:b0:2c:45:89:38:6d:19:
                    f8:cd:0e:47:b8:9c:25:80:da:5c:7a:2d:df:33:09:
                    2a:fb:3b:99:34:ef:c2:fb:fd:af:a0:49:a3:ad:d9:
                    eb:c3:8e:0b:68:41:40:91:77:16:8b:8f:24:88:07:
                    50:3f:bb:5c:12:f1:4b:92:de:e5:56:12:c1:5e:ec:
                    46:1f:5a:44:c6:cb:e7:eb:09:03:fa:ef:01:0e:c2:
                    d7:9b:dc:6e:4c:71:ff:23:a8:a1:f9:e1:dd:55:42:
                    11:15:5e:b8:a6:5a:ee:d0:10:bc:24:b5:a3:a0:89:
                    d8:bb:9e:d2:e8:90:e7:92:37:d2:99:3d:dd:08:08:
                    14:1f:a7:8d:2d:0f:76:3b:bc:37:12:bf:cf:83:3a:
                    4c:37:f5:62:28:6d:f0:06:56:ff:ad:96:9b:09:b7:
                    49:14:2f:6b:9e:fe:49:af:fd:e2:42:ec:05:28:51:
                    96:11:2c:49:bb:ca:ce:d1:80:6a:0e:b5:1b:61:51:
                    36:14:04:d2:0f:cf:3c:f1:bd:a8:8e:72:97:b3:28:
                    49:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:76:AB:DF:3D:25:D3:A3:31:D4:C7:78:BF:7E:30:F5:2C:9B:43:3A
            X509v3 Authority Key Identifier:
                keyid:EF:8E:65:3F:55:59:79:10:A7:6F:C2:71:E2:22:51:4D:7C:DB:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/EF8E653F55597910A76FC271E222514D7CDB9D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF8E653F55597910A76FC271E222514D7CDB9D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/323830343a323665383a3a2f33322d313238203d3e20323632353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:75:a9:77:98:d7:87:e8:b1:12:56:26:28:c0:5c:b6:f9:30:
         58:7d:b2:06:be:9b:37:54:34:e6:ac:2e:04:40:a5:d6:81:6c:
         4e:52:e0:80:4a:16:69:fc:14:b2:35:6a:df:cf:95:cc:3c:96:
         ad:5d:74:64:aa:33:d9:72:a8:87:0f:22:3c:bb:8e:ab:57:23:
         15:5a:25:3d:0b:80:41:6d:82:a0:c4:c8:96:a0:5a:06:c8:ec:
         12:65:d0:e2:d8:c7:bb:9e:af:dc:64:cd:38:e5:9e:56:5a:1a:
         d5:1d:20:a5:f8:7d:c1:b0:fe:0e:aa:26:3e:f1:3f:4c:11:72:
         5f:8b:03:7c:9f:d6:bc:ad:d0:66:d5:8b:48:00:b3:1c:0b:2b:
         1f:58:c1:d6:88:34:97:55:28:9a:28:55:df:66:47:ab:cb:77:
         f9:78:9f:c4:93:09:c5:d0:d8:33:10:ba:67:2a:e6:a4:17:7f:
         69:97:0a:8d:e8:87:85:64:29:12:5d:a0:c3:3e:2e:e8:45:0c:
         7d:b3:87:d6:b5:eb:c7:e1:ed:9f:55:d9:5e:de:8d:0a:51:55:
         3c:89:22:6a:c0:7e:40:e5:35:8a:df:f5:2c:0f:49:20:73:ad:
         da:2f:f1:a4:26:8b:e0:e3:81:e7:61:4e:52:d3:1e:07:a0:32:
         9f:64:ee:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 22:34:22 2025 by rpki-client