Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FU5KdckzVLBY8bZUNK7WYXofUsmEeQgqL28g62VQdur/0/323830343a376334383a3a2f33322d313238203d3e20323731343836.roa
File:                     323830343a376334383a3a2f33322d313238203d3e20323731343836.roa (raw, json)
Hash identifier:          LRZXwqEcc6r0UG5ojv/EZt5k/2kx1Qg+06HEHl7GEvE=
Subject key identifier:   68:3B:E1:8B:37:DF:4B:2B:99:8E:9B:62:0D:EB:3D:5E:5C:0A:7B:60
Certificate issuer:       /CN=E8944CFD4746CFC68D069B4C05FCD9B08909B8A6
Certificate serial:       2098767A13D3A36C1854C3D5F7C6D475C615531B
Authority key identifier: E8:94:4C:FD:47:46:CF:C6:8D:06:9B:4C:05:FC:D9:B0:89:09:B8:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8944CFD4746CFC68D069B4C05FCD9B08909B8A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FU5KdckzVLBY8bZUNK7WYXofUsmEeQgqL28g62VQdur/0/323830343a376334383a3a2f33322d313238203d3e20323731343836.roa
Signing time:             Sun 07 Sep 2025 22:52:35 +0000
ROA not before:           Sun 07 Sep 2025 22:47:35 +0000
ROA not after:            Sun 06 Sep 2026 22:52:35 +0000
asID:                     271486
IP address blocks:        2804:7c48::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7FU5KdckzVLBY8bZUNK7WYXofUsmEeQgqL28g62VQdur/0/E8944CFD4746CFC68D069B4C05FCD9B08909B8A6.crl
                          rsync://rpki-repo.registro.br/repo/7FU5KdckzVLBY8bZUNK7WYXofUsmEeQgqL28g62VQdur/0/E8944CFD4746CFC68D069B4C05FCD9B08909B8A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8944CFD4746CFC68D069B4C05FCD9B08909B8A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:98:76:7a:13:d3:a3:6c:18:54:c3:d5:f7:c6:d4:75:c6:15:53:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8944CFD4746CFC68D069B4C05FCD9B08909B8A6
        Validity
            Not Before: Sep  7 22:47:35 2025 GMT
            Not After : Sep  6 22:52:35 2026 GMT
        Subject: CN=683BE18B37DF4B2B998E9B620DEB3D5E5C0A7B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:64:07:d1:51:45:1d:8f:ac:b1:07:66:dc:
                    27:9c:73:a7:1d:df:74:ba:25:ce:a3:a7:47:7a:ce:
                    51:9e:11:83:30:79:e6:e7:0d:01:19:a7:50:b0:90:
                    fb:24:e2:9c:8c:b4:81:7b:05:3f:10:66:29:45:eb:
                    85:29:6e:8b:dc:64:8b:5f:36:e1:21:e1:8c:b6:14:
                    42:33:84:f8:0e:78:93:18:82:52:99:14:2b:90:a8:
                    09:52:0d:2f:5d:c7:5e:8f:41:9c:dc:e4:09:9b:bc:
                    f7:2c:f8:76:3e:38:7b:6b:4e:fa:7d:3b:ed:53:72:
                    3b:8e:90:55:da:2e:75:fd:57:78:bc:4f:cb:32:40:
                    2e:15:d8:5d:aa:5a:ee:bd:02:2b:e7:60:bb:ec:66:
                    f2:d7:39:69:8a:8d:3b:01:92:19:cf:ad:60:32:b1:
                    df:53:03:7b:b5:7c:44:8a:78:ae:07:9a:e1:e5:5f:
                    97:32:cd:8d:e3:cd:04:45:db:9e:68:d6:df:5f:99:
                    63:ca:3d:74:c6:2a:ed:b1:22:97:44:11:a1:c0:0a:
                    df:28:91:86:b3:6e:4c:14:18:11:6b:2e:20:b4:68:
                    32:c7:93:81:d4:b6:7a:28:8a:35:c5:11:3e:5c:83:
                    0b:ca:19:ad:9c:a1:9d:fe:1c:03:c8:4e:dd:f8:f4:
                    d4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3B:E1:8B:37:DF:4B:2B:99:8E:9B:62:0D:EB:3D:5E:5C:0A:7B:60
            X509v3 Authority Key Identifier:
                keyid:E8:94:4C:FD:47:46:CF:C6:8D:06:9B:4C:05:FC:D9:B0:89:09:B8:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FU5KdckzVLBY8bZUNK7WYXofUsmEeQgqL28g62VQdur/0/E8944CFD4746CFC68D069B4C05FCD9B08909B8A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8944CFD4746CFC68D069B4C05FCD9B08909B8A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FU5KdckzVLBY8bZUNK7WYXofUsmEeQgqL28g62VQdur/0/323830343a376334383a3a2f33322d313238203d3e20323731343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c48::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:b9:23:c8:47:c4:45:c0:89:d2:ab:e4:71:3a:71:aa:0d:c3:
         7f:ca:6a:f6:72:d2:6c:12:e6:03:b5:d8:af:2f:77:e7:40:41:
         16:fd:97:c1:2b:aa:04:b3:07:47:4d:0e:df:47:b6:6c:f0:c0:
         69:20:0a:cc:f1:01:0c:af:2f:2a:a2:58:43:d0:34:8c:7c:c3:
         ed:12:45:35:82:6c:7e:19:40:73:b2:b6:64:7b:13:96:88:7a:
         8b:18:59:44:dd:b6:25:81:db:e9:f3:12:77:5d:f0:7d:aa:51:
         df:d6:27:0b:f0:f6:21:56:48:32:1c:e8:29:91:b8:42:d5:a0:
         75:65:30:bd:bd:9a:14:95:52:4d:08:d8:cb:60:43:1b:22:a7:
         22:42:2d:b4:97:f6:65:d8:73:91:43:59:69:d0:1a:b1:b0:4f:
         2b:4c:61:48:a2:1d:61:a2:6b:61:09:ef:d9:dc:cd:aa:d3:0b:
         21:f9:da:20:a9:39:86:60:9e:ff:bd:d5:64:af:83:d0:50:7b:
         4f:b4:d9:52:0a:b3:0c:21:40:59:b4:a1:a9:d2:93:0f:a2:59:
         13:ba:de:a1:95:bb:54:e8:af:ea:fa:3d:68:88:11:fa:0a:a3:
         ee:75:61:36:bd:9f:7a:42:ee:45:e4:83:1d:56:ec:36:75:c3:
         5e:ac:2b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:56:13 2025 by rpki-client