Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/323830343a323664383a3a2f33322d3438203d3e203533313630.roa
File:                     323830343a323664383a3a2f33322d3438203d3e203533313630.roa (raw, json)
Hash identifier:          s5gP2SwgtFH9/Ax8MQ+pdd68GIBml4izDvDulIhoACk=
Subject key identifier:   DB:29:A9:31:F2:B5:DD:F5:26:44:7A:36:9F:48:8D:04:07:DB:2D:D4
Certificate issuer:       /CN=ED3B3BA45546351061AEEB665480B9D38FE9066C
Certificate serial:       189698A4A2F116E62F9197217A2C06524B1F6041
Authority key identifier: ED:3B:3B:A4:55:46:35:10:61:AE:EB:66:54:80:B9:D3:8F:E9:06:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED3B3BA45546351061AEEB665480B9D38FE9066C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/323830343a323664383a3a2f33322d3438203d3e203533313630.roa
Signing time:             Fri 05 Sep 2025 19:07:59 +0000
ROA not before:           Fri 05 Sep 2025 19:02:59 +0000
ROA not after:            Fri 04 Sep 2026 19:07:59 +0000
asID:                     53160
IP address blocks:        2804:26d8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/ED3B3BA45546351061AEEB665480B9D38FE9066C.crl
                          rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/ED3B3BA45546351061AEEB665480B9D38FE9066C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED3B3BA45546351061AEEB665480B9D38FE9066C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:96:98:a4:a2:f1:16:e6:2f:91:97:21:7a:2c:06:52:4b:1f:60:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED3B3BA45546351061AEEB665480B9D38FE9066C
        Validity
            Not Before: Sep  5 19:02:59 2025 GMT
            Not After : Sep  4 19:07:59 2026 GMT
        Subject: CN=DB29A931F2B5DDF526447A369F488D0407DB2DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:94:e7:c1:a3:d2:da:14:46:fa:37:b7:8d:
                    80:8f:fd:f3:17:4f:55:3f:93:26:40:30:0a:b9:e3:
                    97:ab:d7:97:7a:cf:fb:3a:97:6a:9e:24:99:02:db:
                    33:05:14:3a:77:fd:5c:26:66:87:8a:24:c0:a1:6c:
                    4f:4c:de:d7:66:92:75:cc:a4:6e:72:c1:39:7d:f8:
                    16:c5:8f:80:12:45:c3:40:83:d7:df:e0:f9:98:d2:
                    63:97:12:b7:d7:02:62:0c:20:69:47:61:1a:75:ca:
                    c1:79:9f:50:f6:dd:c7:4f:71:87:e6:8a:b0:cf:73:
                    4b:60:05:63:8a:fa:61:67:88:ec:25:f2:3d:d3:69:
                    ed:a7:fd:5f:af:7c:34:28:28:23:b1:f6:f7:ad:86:
                    a2:b2:a2:e8:e3:12:f8:c4:ab:67:f5:c1:80:58:9b:
                    e1:10:0d:97:d8:e1:b9:e4:5b:c5:e8:98:90:e4:c6:
                    b2:1e:ba:38:b8:79:74:f3:97:74:b8:3d:e5:e2:ed:
                    46:da:10:10:c0:bd:07:e3:8b:c7:90:02:08:57:1e:
                    e6:b0:ed:d7:e8:b4:62:22:ab:26:d8:61:9c:15:7a:
                    95:ff:c0:62:99:f0:c7:f3:a8:d2:bf:52:81:6f:60:
                    a1:2b:26:0e:15:bd:a4:4e:5e:ef:bc:d2:80:27:15:
                    88:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:29:A9:31:F2:B5:DD:F5:26:44:7A:36:9F:48:8D:04:07:DB:2D:D4
            X509v3 Authority Key Identifier:
                keyid:ED:3B:3B:A4:55:46:35:10:61:AE:EB:66:54:80:B9:D3:8F:E9:06:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/ED3B3BA45546351061AEEB665480B9D38FE9066C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED3B3BA45546351061AEEB665480B9D38FE9066C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/323830343a323664383a3a2f33322d3438203d3e203533313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:e7:24:9e:c4:d9:80:50:0a:98:09:62:29:88:8a:90:a9:4f:
         fb:1e:f7:74:1e:0d:97:bb:f3:7b:07:8d:23:3c:b9:dd:e3:c0:
         00:fb:a1:fe:75:12:2c:cb:7e:4f:e4:01:59:84:60:bb:f2:3d:
         a8:7c:bb:46:bb:dd:9b:d8:9a:c6:94:16:8f:d6:3e:c0:dc:18:
         64:88:a0:24:4c:8a:01:77:dc:93:1d:90:fc:fb:91:dc:a7:ea:
         62:2a:b2:18:b8:27:05:8a:b1:f9:36:b3:9f:4e:74:d2:e2:af:
         79:98:21:ae:4d:65:d1:b7:52:86:32:6e:25:e0:f6:8c:f1:a6:
         e1:f1:c8:09:f9:3a:21:de:6b:15:30:24:69:59:31:8f:ab:9b:
         ba:57:27:ca:45:f3:cc:96:5b:b6:2e:fb:5b:04:f5:77:27:d5:
         f0:de:61:f0:43:27:ae:63:ab:b9:6c:6e:29:8c:19:dd:40:5b:
         1d:b2:5b:45:36:82:d9:bd:79:65:7f:2d:56:01:98:27:a4:b2:
         b8:63:2a:47:da:e3:da:ff:10:e4:7c:d9:e4:a1:c0:ff:b2:6a:
         db:f4:8e:c6:61:af:aa:4b:dc:69:96:52:6b:42:91:57:27:67:
         da:c9:f6:73:0a:bb:db:10:8a:d1:30:07:3f:3c:78:07:d6:53:
         6b:0e:bc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:34:42 2025 by rpki-client