Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393830303a3a2f34302d3430203d3e20323632353033.roa
File:                     323830343a326265303a393830303a3a2f34302d3430203d3e20323632353033.roa (raw, json)
Hash identifier:          b1fEgT8WJEJ0toZI4a8Bg9Nc4AGmgq3bf6jCDigb6+g=
Subject key identifier:   EB:2F:BD:E6:2C:F7:36:85:99:EC:4E:4C:90:15:72:D5:0C:9C:A0:1A
Certificate issuer:       /CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Certificate serial:       5C1159A64AA543A83E67CCA8568213C824B2C63A
Authority key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393830303a3a2f34302d3430203d3e20323632353033.roa
Signing time:             Tue 19 Aug 2025 20:06:20 +0000
ROA not before:           Tue 19 Aug 2025 20:01:20 +0000
ROA not after:            Tue 18 Aug 2026 20:06:20 +0000
asID:                     262503
IP address blocks:        2804:2be0:9800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:11:59:a6:4a:a5:43:a8:3e:67:cc:a8:56:82:13:c8:24:b2:c6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
        Validity
            Not Before: Aug 19 20:01:20 2025 GMT
            Not After : Aug 18 20:06:20 2026 GMT
        Subject: CN=EB2FBDE62CF7368599EC4E4C901572D50C9CA01A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7e:2f:c3:0e:dd:7e:24:65:b5:f7:32:69:97:
                    fb:4b:aa:81:7c:c4:38:53:c6:5c:58:ef:8d:3e:c2:
                    24:3d:11:36:3b:71:38:cb:00:26:e3:52:f4:b5:af:
                    1e:80:2c:c0:b0:76:ff:de:31:8c:65:e0:01:62:cc:
                    cf:72:eb:98:24:e7:91:e6:69:0a:13:0a:08:94:e2:
                    33:76:48:3f:86:d1:9f:a8:38:42:89:e4:55:ff:15:
                    03:0a:cd:7f:22:47:08:0f:cc:45:77:2a:87:53:49:
                    17:79:4b:26:5e:3e:f3:54:47:a5:73:b9:ff:a3:f6:
                    c6:60:32:55:09:24:b0:f5:90:18:7a:91:ce:49:95:
                    89:2f:37:03:0a:b9:c9:62:d7:6a:a3:71:56:ba:0a:
                    d1:b9:09:6c:fa:c0:27:3e:89:fc:9c:db:52:99:5e:
                    87:6d:4c:67:c9:c5:c4:01:5e:6e:0f:f9:7f:f9:5e:
                    86:16:08:a5:fd:a1:9c:d3:d4:8b:cb:15:90:f1:0d:
                    df:f1:30:60:b9:58:cb:47:72:27:f4:b7:94:b3:3e:
                    1c:9c:d8:d8:54:97:04:3a:20:92:cc:29:d7:ec:91:
                    00:0c:17:f6:8f:cc:03:66:26:d0:52:78:86:48:ff:
                    0b:84:1f:20:c7:22:3a:73:7e:7b:19:1d:4b:1d:f3:
                    0e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:BD:E6:2C:F7:36:85:99:EC:4E:4C:90:15:72:D5:0C:9C:A0:1A
            X509v3 Authority Key Identifier:
                keyid:12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393830303a3a2f34302d3430203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2be0:9800::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:7b:88:ff:45:54:a8:30:3f:c5:00:93:40:c0:55:42:c1:99:
         59:0d:40:c6:3b:b2:e7:01:68:9e:60:9b:5f:b4:59:84:fc:44:
         b0:ba:63:70:48:ce:47:85:b7:2f:34:f6:7b:06:f4:44:bb:35:
         86:db:ef:52:09:cb:9f:c6:5c:da:3a:d4:e4:c7:df:df:7b:c8:
         4e:56:05:75:4c:ee:9f:0a:6a:85:14:31:ed:d8:4a:2e:9e:ae:
         0e:4f:39:31:c3:8d:65:44:fb:77:8f:15:fb:5c:09:24:16:18:
         d8:37:6c:16:c9:fa:ae:7b:a8:c9:67:46:e0:36:a5:00:24:ea:
         10:16:02:e7:9d:e1:ce:3b:fd:c0:7c:dc:df:86:e6:ed:c4:e3:
         32:86:b0:1e:6c:41:32:bb:15:f5:90:be:5a:f9:29:94:7e:3a:
         37:62:3b:18:0c:26:11:5f:3a:73:fb:81:6e:84:ac:e0:a1:15:
         c8:e8:74:2d:3f:03:6c:a5:55:f0:a7:d1:d4:61:cf:e8:9b:be:
         53:c5:76:fb:47:c8:0c:78:05:81:63:c5:a5:5e:62:39:d7:07:
         04:00:83:72:ee:53:6c:ef:99:11:3b:ed:c6:af:37:41:a7:82:
         64:8c:4d:a6:07:71:53:43:15:05:3b:ca:cc:f5:98:c3:ee:4a:
         cf:a2:c4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:24:43 2025 by rpki-client