Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/323830343a316464383a3a2f33322d313238203d3e20323634333938.roa
File:                     323830343a316464383a3a2f33322d313238203d3e20323634333938.roa (raw, json)
Hash identifier:          kX9Bzb586Bj/r/ntaaAh2QFdMp1ikLDxNQg0TlD57L0=
Subject key identifier:   C8:78:05:51:DF:84:69:0A:7B:72:15:91:69:6F:3A:EA:98:FA:D2:3F
Certificate issuer:       /CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
Certificate serial:       7649279AEDE7F91ECF4178D26EF27CC0B7E434D5
Authority key identifier: 98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/323830343a316464383a3a2f33322d313238203d3e20323634333938.roa
Signing time:             Wed 18 Jun 2025 18:19:16 +0000
ROA not before:           Wed 18 Jun 2025 18:14:16 +0000
ROA not after:            Wed 17 Jun 2026 18:19:16 +0000
asID:                     264398
IP address blocks:        2804:1dd8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl
                          rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 18:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:49:27:9a:ed:e7:f9:1e:cf:41:78:d2:6e:f2:7c:c0:b7:e4:34:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
        Validity
            Not Before: Jun 18 18:14:16 2025 GMT
            Not After : Jun 17 18:19:16 2026 GMT
        Subject: CN=C8780551DF84690A7B721591696F3AEA98FAD23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:72:35:a5:3c:c5:fb:f6:0c:aa:47:4b:27:
                    68:87:af:d2:d1:17:8e:75:87:73:51:49:6b:77:25:
                    3b:e2:f4:1e:dc:12:83:77:9d:fa:dc:f6:d7:4d:41:
                    ca:d1:63:cc:76:f3:ae:c0:73:c9:f9:0d:78:da:66:
                    10:e9:df:77:d5:b2:77:28:63:94:af:8e:21:9a:ca:
                    15:62:b0:a3:61:72:01:ad:0b:4c:76:ef:64:be:37:
                    bd:3b:b4:f7:61:ed:f3:2a:22:7d:31:1c:8a:a9:27:
                    62:0f:fa:22:bb:fb:eb:bd:d3:cd:47:6d:a6:9f:ff:
                    7e:4c:76:8a:c4:25:fc:f3:a0:bd:41:0a:80:3d:65:
                    d3:89:54:6a:27:40:19:3c:8b:47:4f:4c:8b:04:54:
                    b4:a6:40:f5:9f:63:25:9a:64:c5:a3:b7:26:6f:71:
                    fa:a4:75:12:37:5a:54:a4:56:63:f0:56:be:d8:b3:
                    0a:04:4d:eb:44:2d:e2:33:2c:4e:0f:e3:f9:0c:a0:
                    33:98:5a:a0:de:ff:2f:65:dd:78:48:9a:ba:cb:b6:
                    dd:bf:28:3f:ec:05:55:7a:9f:bf:f5:36:90:45:a4:
                    8a:d1:0c:ca:64:a7:4f:55:00:e6:f7:30:f2:49:e1:
                    72:80:85:77:1f:61:b8:55:08:ef:c3:b1:79:34:d5:
                    68:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:78:05:51:DF:84:69:0A:7B:72:15:91:69:6F:3A:EA:98:FA:D2:3F
            X509v3 Authority Key Identifier:
                keyid:98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/323830343a316464383a3a2f33322d313238203d3e20323634333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:44:54:d0:cd:0d:46:b4:70:ea:96:43:c5:c0:15:66:cf:c4:
         07:8e:48:af:31:3a:c2:97:3a:1e:bb:30:84:f9:b5:a9:ac:1d:
         93:dc:67:46:26:ab:7e:0b:35:cc:3e:6c:46:a5:62:ce:78:17:
         ee:e1:ca:f2:99:57:15:15:d8:80:7a:91:ba:16:cb:a2:e6:56:
         8d:61:1d:c2:61:bb:31:de:ce:10:4d:e9:5e:0e:00:24:64:be:
         ed:9e:75:70:96:24:17:bc:66:30:2f:c3:c3:0a:b1:a1:aa:86:
         25:99:ad:75:40:cc:40:dc:18:e3:ca:c4:8d:12:4f:dd:fd:c8:
         b0:4c:bf:b9:b5:1a:5d:f0:c5:97:2b:59:85:1d:45:2b:77:8d:
         4e:2e:72:97:e4:08:1b:7b:bc:dd:93:20:35:f8:47:3e:4f:e2:
         bc:45:01:4f:4b:af:4c:3f:10:e7:d2:68:0c:9b:de:16:11:ff:
         25:32:9f:5c:4e:e8:2a:38:29:e4:91:20:e6:6e:6c:f9:0f:cf:
         51:2b:82:73:f2:88:fc:f8:b1:d6:2c:60:08:c3:93:08:00:42:
         72:a8:2d:ac:6c:67:e4:9d:d5:8a:6c:d6:50:b0:87:bf:95:c6:
         f6:82:cd:4e:ed:80:a5:10:27:ba:5b:6f:de:90:0d:4d:4a:fa:
         eb:86:68:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:56:59 2025 by rpki-client