Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/323830343a313338303a313a3a2f34382d3438203d3e20323633353336.roa
File:                     323830343a313338303a313a3a2f34382d3438203d3e20323633353336.roa (raw, json)
Hash identifier:          wu2+VQGmnQmVY3Mm6x+4ZNZjfWBsZ0Njo8jzUJvP4jI=
Subject key identifier:   03:99:2C:E6:74:B0:AD:5E:11:83:FF:DD:BB:AC:A3:13:D4:2B:78:F2
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       5C214CA92D41A23D8910022A0B96C5BF9B14B35D
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/323830343a313338303a313a3a2f34382d3438203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 16:46:50 +0000
ROA not before:           Tue 09 Sep 2025 16:41:50 +0000
ROA not after:            Tue 08 Sep 2026 16:46:50 +0000
asID:                     263536
IP address blocks:        2804:1380:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 00:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:21:4c:a9:2d:41:a2:3d:89:10:02:2a:0b:96:c5:bf:9b:14:b3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 16:41:50 2025 GMT
            Not After : Sep  8 16:46:50 2026 GMT
        Subject: CN=03992CE674B0AD5E1183FFDDBBACA313D42B78F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:ad:9d:38:a1:8e:da:e2:27:2c:04:95:d1:
                    c3:b9:03:72:7d:aa:d3:4e:a9:d4:53:f1:16:0f:b0:
                    3d:28:17:23:4c:30:5b:fa:45:68:84:16:a7:9d:fd:
                    19:3d:88:09:ac:5a:b1:e5:85:9e:eb:5a:97:5c:0e:
                    96:7a:28:10:08:52:59:e3:fe:39:ef:f6:34:10:e4:
                    d6:12:e6:93:5c:a3:b3:99:88:e0:13:2a:f5:cc:05:
                    aa:cc:2c:45:ee:38:e2:09:35:97:a3:bc:ad:07:9d:
                    4f:62:d7:50:44:19:fc:a6:88:ba:cd:13:b8:f3:d0:
                    c6:24:2a:28:cb:38:0b:e3:8c:99:52:ce:17:ad:d0:
                    1b:54:bf:62:9f:b3:48:ed:28:95:c3:be:64:70:6e:
                    cf:4e:e2:b1:59:c8:fe:84:43:2b:9d:aa:14:bf:ae:
                    3c:b2:5c:8e:7e:40:7b:4b:1f:ed:fb:42:11:f8:09:
                    de:d4:cb:37:6e:5f:b5:bb:8d:96:8a:36:97:fc:e1:
                    94:1a:29:61:2c:9c:ed:a0:19:2c:21:cf:52:a2:e9:
                    ef:e2:3a:0e:ef:70:9b:73:59:eb:25:27:0a:2d:a7:
                    8e:b1:fd:a2:23:03:e8:20:cc:4e:f2:fe:1f:9e:ad:
                    f2:d1:cd:28:7d:5b:75:6d:cd:7c:8d:b1:68:03:b4:
                    86:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:99:2C:E6:74:B0:AD:5E:11:83:FF:DD:BB:AC:A3:13:D4:2B:78:F2
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/323830343a313338303a313a3a2f34382d3438203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1380:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:12:d1:9e:29:fc:4b:e9:4e:77:70:5b:ea:0f:71:ea:d3:85:
         e7:6b:35:fc:d2:6e:91:1c:1a:89:9d:f0:bb:b6:dd:29:c8:18:
         96:87:9a:31:c0:0a:8e:8b:c2:4c:e9:4c:c7:65:45:c9:b3:72:
         09:bd:5e:9a:60:04:3a:e0:5e:91:b0:f9:0a:e6:37:5f:73:90:
         7f:d2:34:1e:d0:72:0c:5f:e1:a4:2f:d8:24:c6:79:ee:08:5e:
         83:90:da:75:29:cb:f4:e5:24:5d:d6:d0:e6:6a:0f:f3:70:52:
         a1:84:9f:2d:00:37:66:8a:25:99:94:30:09:5b:f6:cb:65:e8:
         8e:ff:de:33:95:c6:5b:72:50:b1:af:62:e7:c9:85:3c:96:e1:
         9a:18:6f:e7:42:34:2a:c8:68:45:70:17:66:91:09:53:d9:e1:
         62:f7:6a:20:67:91:4f:a1:56:7a:e8:80:4a:5e:d9:5c:a6:e5:
         1b:af:d5:03:c3:7c:a4:3e:5e:76:fd:5b:f7:3f:62:1e:b8:64:
         98:75:f6:b9:94:47:d7:0b:73:ee:d4:a0:fc:f6:53:3e:9a:69:
         3e:fd:57:ff:b0:d8:07:1d:21:4c:83:72:13:b1:12:56:82:e8:
         16:3c:7c:be:a0:40:a7:83:04:5d:c2:1a:78:9e:98:a5:a4:f7:
         03:30:66:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:48:40 2025 by rpki-client