Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3438203d3e20323632353530.roa
File:                     323830343a323865303a3a2f33322d3438203d3e20323632353530.roa (raw, json)
Hash identifier:          V0Y443gQe8HrwpV+an6sJUOLALHA9Zwo3MSJlshh1dU=
Subject key identifier:   04:D5:9B:37:D9:0E:E9:0F:B8:C5:08:FE:EB:7C:4A:96:F1:80:44:84
Certificate issuer:       /CN=9B54308B9152DD415CBD122B076FA6C8D2B993B5
Certificate serial:       3F1C812684FB5B6D0B1FF7D7ACC1767E26604BE8
Authority key identifier: 9B:54:30:8B:91:52:DD:41:5C:BD:12:2B:07:6F:A6:C8:D2:B9:93:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3438203d3e20323632353530.roa
Signing time:             Tue 22 Jul 2025 14:40:39 +0000
ROA not before:           Tue 22 Jul 2025 14:35:39 +0000
ROA not after:            Tue 21 Jul 2026 14:40:39 +0000
asID:                     262550
IP address blocks:        2804:28e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 04:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1c:81:26:84:fb:5b:6d:0b:1f:f7:d7:ac:c1:76:7e:26:60:4b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B54308B9152DD415CBD122B076FA6C8D2B993B5
        Validity
            Not Before: Jul 22 14:35:39 2025 GMT
            Not After : Jul 21 14:40:39 2026 GMT
        Subject: CN=04D59B37D90EE90FB8C508FEEB7C4A96F1804484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:0d:39:1c:77:c6:47:f7:75:d3:07:e5:7a:
                    18:ba:95:d2:01:b1:a8:9d:3e:47:ab:88:00:00:4c:
                    8e:97:2a:35:96:6d:87:1c:8c:66:2c:d2:59:0f:a1:
                    50:ec:7a:5a:09:e1:0f:48:8a:55:12:a9:f4:11:1c:
                    76:17:1c:ad:c9:2c:c6:65:c9:c7:6a:f3:62:1c:89:
                    33:f3:77:f3:4b:5f:8e:f5:da:00:8e:2e:5f:d9:05:
                    19:f4:02:c3:5e:e1:88:f8:dc:dc:f6:90:4a:fa:57:
                    29:d0:8b:25:e1:8b:10:8f:cb:fb:d1:99:84:b8:cc:
                    73:04:1b:b3:1c:c5:8e:3d:c0:8f:d1:ca:d8:94:ef:
                    ed:6d:ed:3c:03:99:40:1f:ec:7f:06:c7:bc:12:38:
                    c1:51:ea:96:be:93:34:d4:51:a2:5d:52:da:17:d4:
                    22:43:00:60:0c:4b:0f:a5:65:4b:18:88:0e:c4:f2:
                    33:60:46:e3:db:e2:89:a7:13:e8:22:7f:a3:49:78:
                    a6:9e:26:e1:7a:6a:c8:fb:49:27:4e:28:bd:11:fa:
                    5d:c8:24:83:43:5e:25:5e:d7:f6:63:0a:4e:b4:d0:
                    82:8e:2a:09:8c:3b:47:43:3f:1d:3b:84:c7:94:5b:
                    ea:72:d6:cc:9c:05:4d:79:60:25:13:38:7b:16:b0:
                    59:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D5:9B:37:D9:0E:E9:0F:B8:C5:08:FE:EB:7C:4A:96:F1:80:44:84
            X509v3 Authority Key Identifier:
                keyid:9B:54:30:8B:91:52:DD:41:5C:BD:12:2B:07:6F:A6:C8:D2:B9:93:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3438203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:24:1d:63:f2:ae:12:f0:6a:5c:ad:2e:8b:a2:fa:0a:06:aa:
         41:4b:7f:c3:ba:e5:11:fe:ed:88:c2:98:26:e8:ba:3f:c1:ef:
         22:51:38:92:c7:f3:e8:b1:f9:4e:ef:42:60:70:8b:ce:b3:93:
         38:6e:9d:40:43:47:b7:00:ab:24:d9:cd:58:51:06:e0:dc:95:
         96:d9:27:b1:40:74:3f:6e:c9:e3:bd:c6:23:5b:12:88:63:72:
         6d:72:e5:4e:25:19:a6:9c:98:75:40:15:1f:07:05:77:74:1b:
         24:98:f9:81:3f:36:6c:45:bb:f7:61:c4:31:b0:b1:88:0d:ad:
         31:77:15:55:76:c0:a9:da:b9:0d:d0:ff:1a:bb:16:37:83:35:
         89:07:46:3d:d4:b2:8e:fe:60:97:f0:4a:be:98:24:03:30:af:
         9d:03:90:99:9d:f1:6f:1b:53:a3:ca:dd:34:0e:79:89:a5:e6:
         c5:99:31:f7:1d:91:fd:bc:5f:82:36:7c:ed:11:1e:9e:c6:9c:
         3e:23:d3:2d:3f:09:99:f0:0b:8e:0b:e0:e2:e2:fb:be:fa:bd:
         0d:67:6c:b3:10:0b:83:8f:bd:d5:c6:d6:dc:3c:e1:9a:82:65:
         db:af:79:9a:64:73:35:80:a1:c3:17:72:51:87:e9:db:ac:a3:
         6e:11:99:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:46:48 2025 by rpki-client