Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d3430203d3e20323731353532.roa
File:                     323830343a376434633a3a2f33322d3430203d3e20323731353532.roa (raw, json)
Hash identifier:          f+bA54ZvwvVgVSPvClxP3LCYVr08a+q/y2ITfpwob68=
Subject key identifier:   AE:EE:38:94:05:81:4B:39:34:CF:9C:7A:DE:EA:D6:62:27:EA:9D:FC
Certificate issuer:       /CN=D3B2B50FFE147528A6BDBFA97590C52FA78DB496
Certificate serial:       1AC4AECAEE314C49A22F37F9D4FB04B76EF89A15
Authority key identifier: D3:B2:B5:0F:FE:14:75:28:A6:BD:BF:A9:75:90:C5:2F:A7:8D:B4:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d3430203d3e20323731353532.roa
Signing time:             Tue 09 Sep 2025 20:24:47 +0000
ROA not before:           Tue 09 Sep 2025 20:19:47 +0000
ROA not after:            Tue 08 Sep 2026 20:24:47 +0000
asID:                     271552
IP address blocks:        2804:7d4c::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.crl
                          rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c4:ae:ca:ee:31:4c:49:a2:2f:37:f9:d4:fb:04:b7:6e:f8:9a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B2B50FFE147528A6BDBFA97590C52FA78DB496
        Validity
            Not Before: Sep  9 20:19:47 2025 GMT
            Not After : Sep  8 20:24:47 2026 GMT
        Subject: CN=AEEE389405814B3934CF9C7ADEEAD66227EA9DFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ee:e6:72:47:30:c0:ba:3f:76:04:78:4e:fa:
                    c2:cd:f0:bd:3b:e4:b6:26:dc:2c:7a:b3:3a:2c:b6:
                    72:04:f6:d4:aa:e3:92:0a:e6:ce:6a:a6:27:f7:f7:
                    ab:9d:ae:cc:0d:b0:7f:8d:9d:f2:98:e5:0a:61:35:
                    b3:96:29:9a:d9:87:9f:68:41:26:a7:bb:1d:22:0d:
                    7b:c7:dd:48:9c:8f:4d:71:e4:01:bf:0e:d9:db:e3:
                    89:a8:77:1c:02:a2:3b:86:38:c7:68:88:3b:48:5a:
                    56:a8:49:be:bf:96:e6:4d:51:a0:b8:31:d0:47:99:
                    08:15:2d:81:eb:76:05:05:de:f4:ec:1f:71:59:41:
                    1f:90:da:3b:e8:4f:f6:d2:23:1a:fd:27:1b:5c:31:
                    cc:db:45:54:f6:fe:d7:34:8e:d1:6c:6b:e2:bd:5f:
                    f0:f3:56:ea:42:83:ab:3b:69:86:31:23:ed:49:ed:
                    b4:0e:e2:df:44:73:98:ed:da:eb:83:3c:8d:2e:e6:
                    c0:82:3c:5d:a0:24:b1:cc:67:17:f1:9f:75:70:ca:
                    f0:0c:55:6c:3c:44:43:9c:e3:90:9d:60:3d:d3:b1:
                    5a:42:4c:2e:67:15:cf:26:bb:02:16:29:c3:54:b0:
                    fb:a9:ff:a3:3e:71:69:ff:f7:51:63:5f:cb:be:15:
                    0c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EE:38:94:05:81:4B:39:34:CF:9C:7A:DE:EA:D6:62:27:EA:9D:FC
            X509v3 Authority Key Identifier:
                keyid:D3:B2:B5:0F:FE:14:75:28:A6:BD:BF:A9:75:90:C5:2F:A7:8D:B4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d3430203d3e20323731353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:b9:60:c6:da:b1:4e:0e:14:7f:1f:53:a6:21:dd:34:d3:8b:
         19:25:b2:07:18:5f:f5:cb:fb:0d:6e:50:dd:43:6a:ba:cd:3e:
         c0:75:e2:92:86:5e:26:79:49:ce:25:05:cb:15:7d:63:09:91:
         26:d6:58:ec:23:52:1f:34:68:0f:22:3f:43:c5:72:ad:8d:fa:
         d5:9e:7c:43:82:88:4e:ab:06:e7:ca:57:8c:41:54:38:ba:ea:
         37:b6:01:10:7f:97:45:9e:a7:c9:a8:3c:2e:49:81:85:8c:95:
         ed:4b:30:d8:00:2b:d5:04:7e:4d:92:dd:37:7b:7a:77:ea:2d:
         f1:6f:80:28:33:ae:39:78:cf:a3:ad:60:38:e9:6a:76:86:38:
         c8:17:79:96:47:6a:17:fa:2f:f9:bb:b7:19:a9:52:c1:16:be:
         ca:20:15:60:8f:46:be:fa:0c:4f:77:79:ca:3b:19:89:52:30:
         d8:a4:6e:86:5d:bc:96:4b:3a:bd:b0:3f:47:2d:c5:d0:07:67:
         bc:d5:85:f7:f0:67:b3:70:e4:59:01:90:04:fa:49:04:15:39:
         b9:fd:59:15:95:91:71:5f:e4:54:23:83:bb:96:01:2d:b5:33:
         08:71:9d:8a:75:90:e3:67:7c:8a:40:c5:45:cb:cc:e8:8b:fe:
         6b:79:db:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:32:31 2025 by rpki-client