Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/323830343a326332343a3a2f33322d3438203d3e20323635313938.roa
File:                     323830343a326332343a3a2f33322d3438203d3e20323635313938.roa (raw, json)
Hash identifier:          CKYKtj7HbYq0VNZyORgpw1NAhn542ZQmRyRkfj1klj0=
Subject key identifier:   77:74:67:8E:BA:C6:75:B8:5D:99:D6:CF:EE:2B:23:72:0C:9D:A7:B6
Certificate issuer:       /CN=08B96662A0C7D84FF28CAF0BBAC15478F1C89C04
Certificate serial:       3A01D7E3196083D5AC4810A2810FAFF3A0F194F5
Authority key identifier: 08:B9:66:62:A0:C7:D8:4F:F2:8C:AF:0B:BA:C1:54:78:F1:C8:9C:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/323830343a326332343a3a2f33322d3438203d3e20323635313938.roa
Signing time:             Mon 15 Sep 2025 16:58:19 +0000
ROA not before:           Mon 15 Sep 2025 16:53:19 +0000
ROA not after:            Mon 14 Sep 2026 16:58:19 +0000
asID:                     265198
IP address blocks:        2804:2c24::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.crl
                          rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:01:d7:e3:19:60:83:d5:ac:48:10:a2:81:0f:af:f3:a0:f1:94:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B96662A0C7D84FF28CAF0BBAC15478F1C89C04
        Validity
            Not Before: Sep 15 16:53:19 2025 GMT
            Not After : Sep 14 16:58:19 2026 GMT
        Subject: CN=7774678EBAC675B85D99D6CFEE2B23720C9DA7B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:90:ab:52:52:95:5c:3b:1f:64:df:ea:79:
                    17:ae:b7:03:7d:45:6b:a3:d0:46:e0:c4:1f:d7:fd:
                    d3:fd:cd:de:35:c7:42:2f:3c:4c:a5:5e:85:e7:10:
                    c5:87:67:b1:3e:51:80:70:82:5d:c5:2c:18:9d:7a:
                    c6:c4:9d:d1:a0:88:be:07:68:79:a2:5d:f0:4a:d0:
                    79:38:dc:94:b9:de:0f:a5:31:03:fd:16:6b:0a:5b:
                    6e:0a:e8:22:1b:4a:06:2e:b4:a3:54:42:1e:09:4b:
                    99:b9:f4:01:4a:51:50:36:72:41:4c:ea:27:d2:60:
                    de:14:0d:f2:cc:6d:37:b1:1e:5e:de:db:94:1f:9d:
                    98:29:19:d7:5f:fa:aa:cd:69:70:5d:60:f7:a3:1f:
                    93:57:0a:c2:c6:f5:24:a2:db:86:3c:b2:bf:5b:43:
                    fd:37:c2:e6:f0:1d:04:13:a3:7a:e6:b8:18:a2:4d:
                    bf:f6:32:be:c1:d7:32:4f:5a:60:26:f3:9f:1a:a6:
                    14:c7:72:10:a3:2e:0e:99:fa:e3:a0:28:0b:85:ff:
                    d0:a2:2c:78:ea:0b:c7:7a:e8:de:ca:06:60:46:08:
                    f8:c2:a8:ee:45:96:a9:83:76:fe:6f:e3:cb:f0:40:
                    bf:2f:54:f4:18:2f:df:28:67:d2:07:f7:cc:5d:19:
                    49:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:74:67:8E:BA:C6:75:B8:5D:99:D6:CF:EE:2B:23:72:0C:9D:A7:B6
            X509v3 Authority Key Identifier:
                keyid:08:B9:66:62:A0:C7:D8:4F:F2:8C:AF:0B:BA:C1:54:78:F1:C8:9C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/323830343a326332343a3a2f33322d3438203d3e20323635313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c24::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:f9:7d:3a:77:55:fb:06:91:f4:0e:e5:5e:c8:fc:eb:8c:df:
         73:2c:f6:e6:7f:27:42:49:9b:27:ea:a2:63:74:0d:02:d3:cd:
         cb:ce:5f:fe:88:41:39:eb:36:91:81:47:9c:4a:ee:86:2d:0e:
         6c:de:5b:63:e8:2b:b2:f0:89:e0:aa:55:52:7a:80:de:c6:f4:
         7b:83:38:b7:43:7a:68:83:4b:a5:eb:e3:bb:a1:cc:3b:c6:81:
         5b:2c:2e:fe:b5:1b:03:05:49:a0:20:fd:b2:a8:2e:d1:14:34:
         49:2b:d6:06:c0:00:54:e5:4b:52:3b:fe:c3:a0:c6:01:9d:76:
         2c:74:43:4f:b1:13:e9:44:35:c3:45:b5:39:da:3c:17:80:d7:
         ef:05:26:5c:41:a5:ee:13:e8:3b:af:7c:86:30:2a:e6:04:9e:
         a1:f7:6f:bf:82:20:82:78:e9:bf:15:c7:7c:08:0c:6f:8b:68:
         a3:0a:ed:ce:36:14:f1:4c:ac:74:14:c9:66:71:5d:f1:58:18:
         7f:5a:87:90:c5:7a:47:e8:7c:25:ea:43:7c:82:19:7d:d6:24:
         1b:1c:2f:5d:31:4e:ff:17:2e:af:8e:83:9b:c7:8c:5f:68:2a:
         9d:b3:12:21:15:68:9c:e9:c7:4a:b9:77:f8:6a:d2:17:e3:05:
         1a:bb:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:37:03 2025 by rpki-client