Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/323830343a373565383a3a2f33322d313238203d3e20313938393439.roa
File:                     323830343a373565383a3a2f33322d313238203d3e20313938393439.roa (raw, json)
Hash identifier:          oJP+fJSVcIBbQgdRtR1OJ3a8dXz/ZN0F/YAMwY18SvI=
Subject key identifier:   28:43:6D:D9:55:96:0B:8C:BD:B4:F6:FC:C0:90:CA:2B:64:DA:01:3A
Certificate issuer:       /CN=319FF5BA89FB9CFBBD7B60CBE191D270697568A8
Certificate serial:       19958EC029968A583CA91AE42C5EABA7F1CF3059
Authority key identifier: 31:9F:F5:BA:89:FB:9C:FB:BD:7B:60:CB:E1:91:D2:70:69:75:68:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FF5BA89FB9CFBBD7B60CBE191D270697568A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/323830343a373565383a3a2f33322d313238203d3e20313938393439.roa
Signing time:             Fri 12 Sep 2025 18:52:21 +0000
ROA not before:           Fri 12 Sep 2025 18:47:21 +0000
ROA not after:            Fri 11 Sep 2026 18:52:21 +0000
asID:                     198949
IP address blocks:        2804:75e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/319FF5BA89FB9CFBBD7B60CBE191D270697568A8.crl
                          rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/319FF5BA89FB9CFBBD7B60CBE191D270697568A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FF5BA89FB9CFBBD7B60CBE191D270697568A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:95:8e:c0:29:96:8a:58:3c:a9:1a:e4:2c:5e:ab:a7:f1:cf:30:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FF5BA89FB9CFBBD7B60CBE191D270697568A8
        Validity
            Not Before: Sep 12 18:47:21 2025 GMT
            Not After : Sep 11 18:52:21 2026 GMT
        Subject: CN=28436DD955960B8CBDB4F6FCC090CA2B64DA013A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:1b:7b:e3:2b:34:f0:79:86:a9:31:b3:55:
                    10:78:d1:c3:cd:46:4b:9b:04:66:e9:c3:fb:26:9d:
                    21:92:10:24:be:bd:35:57:e0:7e:c1:fd:ea:4a:8d:
                    61:59:47:09:7f:28:3e:6a:d5:92:ac:91:6a:7e:f9:
                    0a:99:d7:8a:bb:28:9d:6c:a0:54:45:ea:dd:bf:5b:
                    ad:2d:e8:d4:75:4d:f5:5c:1f:3e:66:45:ce:6c:29:
                    1e:d2:5a:90:48:8a:f2:4d:64:a9:42:f6:59:79:bc:
                    84:9e:84:c5:e6:4b:f8:bf:20:8b:1b:11:f8:9b:98:
                    9d:fc:01:86:1d:76:ab:28:c3:94:c2:25:b0:32:c6:
                    bf:6b:7b:39:a7:b4:e5:88:b4:95:60:ed:a6:1d:f2:
                    f5:78:35:89:3c:98:72:38:8e:db:f1:c9:72:d1:ab:
                    10:73:0a:23:11:58:0b:52:ce:a3:c8:19:9b:d2:e1:
                    2a:62:d8:5e:51:3a:c5:3f:b5:41:1b:f7:1a:87:41:
                    10:14:17:ff:f2:32:97:6c:1e:9a:6b:77:fb:13:57:
                    7b:a8:89:6f:c1:7b:c1:7f:45:eb:09:e3:71:80:f7:
                    05:a9:2e:78:2e:bc:86:de:62:d7:72:fb:26:67:3a:
                    d1:1b:cf:50:03:4f:33:52:41:83:f5:8e:f9:29:94:
                    98:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:43:6D:D9:55:96:0B:8C:BD:B4:F6:FC:C0:90:CA:2B:64:DA:01:3A
            X509v3 Authority Key Identifier:
                keyid:31:9F:F5:BA:89:FB:9C:FB:BD:7B:60:CB:E1:91:D2:70:69:75:68:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/319FF5BA89FB9CFBBD7B60CBE191D270697568A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FF5BA89FB9CFBBD7B60CBE191D270697568A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/323830343a373565383a3a2f33322d313238203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:67:13:c1:ed:5e:5a:40:c6:62:86:64:4d:47:ec:da:5b:fc:
         44:4b:aa:95:a2:1e:b8:65:a0:0b:63:b2:d1:07:1e:3f:38:19:
         f4:d1:3b:9c:1d:3a:e6:d3:fc:d8:36:c7:1d:75:a5:4a:8e:58:
         6f:4d:81:61:67:fe:21:38:fa:85:5a:08:4c:d9:61:db:c9:59:
         bc:f7:2f:83:47:ab:62:a2:c2:7d:e4:30:8b:39:96:f9:f7:38:
         bc:cd:28:b6:20:a4:d2:9b:b6:d7:62:48:50:11:20:0e:c2:ec:
         ec:64:cf:e8:c5:85:7e:ca:b8:a1:ab:a6:b7:36:23:94:4d:75:
         13:ca:34:4d:1d:7c:c5:2c:8d:9d:85:d9:30:b8:6c:30:29:0b:
         61:81:75:c8:89:9c:13:0e:7d:dd:26:f6:90:97:2b:00:28:50:
         62:0c:42:56:61:5c:12:8f:3c:90:4a:99:47:72:1d:78:65:5d:
         d0:d0:51:1c:fe:7f:5f:3e:8f:f8:93:da:04:56:f8:18:22:d2:
         92:b5:67:b4:10:5f:ca:8f:68:36:05:e7:52:23:64:07:c6:11:
         2e:1b:ca:28:b0:20:5d:82:d2:b3:0d:6a:cc:f8:92:42:9c:13:
         6b:c4:dc:e9:7e:9e:67:70:87:cd:2d:5d:5e:02:e3:b5:2c:1a:
         7d:1d:be:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:04:51 2025 by rpki-client