Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a3a2f33322d3333203d3e20323635303933.roa
File:                     323830343a333262303a3a2f33322d3333203d3e20323635303933.roa (raw, json)
Hash identifier:          StTDcuD0GdZAz7falHHgWbnPTsDVQVO4LGK8ovW3eio=
Subject key identifier:   43:9C:96:D9:57:BE:EC:8B:0B:61:77:E8:57:1D:08:63:FA:8B:C0:16
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       5561EB8CF16FF75CAB95EEA7ADD3EB61416FE8D8
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a3a2f33322d3333203d3e20323635303933.roa
Signing time:             Wed 03 Sep 2025 01:19:56 +0000
ROA not before:           Wed 03 Sep 2025 01:14:56 +0000
ROA not after:            Wed 02 Sep 2026 01:19:56 +0000
asID:                     265093
IP address blocks:        2804:32b0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:61:eb:8c:f1:6f:f7:5c:ab:95:ee:a7:ad:d3:eb:61:41:6f:e8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Sep  3 01:14:56 2025 GMT
            Not After : Sep  2 01:19:56 2026 GMT
        Subject: CN=439C96D957BEEC8B0B6177E8571D0863FA8BC016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:58:f7:dd:bb:c5:c3:05:12:25:5e:6e:6c:
                    97:c0:f3:d9:6a:5d:04:e1:9b:3b:1d:85:44:2f:4d:
                    d5:b4:3b:75:01:31:f2:45:d7:6c:e4:1c:74:23:5f:
                    58:8b:4c:c9:88:1c:79:a9:b7:a4:9e:22:ed:eb:47:
                    78:33:97:da:06:83:91:f5:49:9b:b3:73:b7:1c:e7:
                    0e:10:d6:d6:90:70:6a:95:5a:82:d9:64:a0:4a:72:
                    63:3f:5d:97:e7:f7:13:23:a2:b7:f8:ca:20:49:39:
                    56:2c:80:3e:6b:6f:ef:e5:e0:56:d9:83:4d:e7:f2:
                    f4:50:88:17:c1:a2:7a:2e:d2:22:86:49:82:6f:c7:
                    52:b6:ac:a3:6e:22:01:ec:2d:84:57:5f:8d:f1:6f:
                    80:21:e7:d3:bc:21:5e:8b:48:4b:3f:19:a9:6b:b5:
                    e2:bc:2d:0f:ee:5e:1f:71:35:00:7d:36:bc:47:d1:
                    33:82:7d:ee:22:ea:12:b6:61:4a:2d:8c:57:f2:8a:
                    68:da:d8:51:1c:2e:41:65:92:7e:2e:01:97:10:b8:
                    ee:81:e8:44:b2:eb:69:37:ff:d3:b9:fb:dd:5f:75:
                    0f:55:f2:4b:45:fc:ca:d6:0f:b4:27:46:f6:4e:ca:
                    29:08:86:37:be:30:ab:2c:e9:61:75:97:eb:5e:03:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9C:96:D9:57:BE:EC:8B:0B:61:77:E8:57:1D:08:63:FA:8B:C0:16
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a3a2f33322d3333203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:a8:71:99:77:42:6d:cc:e8:e5:f0:f4:ba:3d:c9:7a:f8:e1:
         d1:c3:72:db:92:41:47:26:8f:0b:e4:c2:c8:1c:9e:1b:9e:b7:
         8a:6b:78:43:30:60:9a:59:56:1b:e5:8c:56:ac:72:2c:c3:f4:
         e2:79:58:71:5b:79:cb:ef:d4:50:54:eb:50:a3:db:dd:0a:4e:
         99:dd:d5:3e:44:3f:c3:c3:83:28:06:68:df:b3:0a:f6:17:fb:
         42:85:f6:49:16:d3:3c:55:e6:ec:40:e6:dd:3b:42:a3:e9:d9:
         2f:90:ac:d7:e9:8c:cf:c9:37:38:b7:8f:04:e4:ae:3d:06:91:
         d2:7c:f6:d7:5b:e4:3a:3b:87:7b:0f:88:55:64:71:a1:88:38:
         49:be:1d:25:f8:99:58:9b:37:cb:23:9a:72:a4:fa:52:e0:e2:
         88:9c:dd:e7:b8:22:a9:79:dc:69:71:2f:f4:c6:62:ec:6e:51:
         76:7a:07:c5:38:5c:b2:4b:c8:34:c0:37:9b:7c:63:9b:e7:7c:
         d2:9e:90:94:ae:13:ce:af:b6:c3:87:87:5a:d9:2b:f4:96:9d:
         2b:e2:50:95:be:01:bd:16:f2:dc:21:ff:81:42:68:37:76:45:
         c4:fa:d8:f4:74:d9:70:00:db:f9:10:9e:57:90:50:c2:bd:90:
         45:bc:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:37:48 2025 by rpki-client