Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030303a3a2f33352d3335203d3e203533303532.roa
File:                     323830343a326634383a343030303a3a2f33352d3335203d3e203533303532.roa (raw, json)
Hash identifier:          bJTlkydbXUGBFokn1m1/Z4uHnSRjk6Hkb7sXiET52kk=
Subject key identifier:   5C:96:F1:B9:3D:5E:88:44:04:D6:D6:99:D9:59:84:52:C4:18:55:10
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       107C65B7F7EE34E2EE825B7EA1AA560E1B72C029
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030303a3a2f33352d3335203d3e203533303532.roa
Signing time:             Mon 01 Sep 2025 18:45:29 +0000
ROA not before:           Mon 01 Sep 2025 18:40:29 +0000
ROA not after:            Mon 31 Aug 2026 18:45:29 +0000
asID:                     53052
IP address blocks:        2804:2f48:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 19:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7c:65:b7:f7:ee:34:e2:ee:82:5b:7e:a1:aa:56:0e:1b:72:c0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep  1 18:40:29 2025 GMT
            Not After : Aug 31 18:45:29 2026 GMT
        Subject: CN=5C96F1B93D5E884404D6D699D9598452C4185510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d3:85:7a:e6:b6:f0:65:82:cf:0b:cb:9d:b5:
                    18:0c:dc:81:d4:ac:e9:ab:1a:1f:ec:43:a5:59:29:
                    9a:90:29:98:00:6d:6b:10:45:ec:c6:9c:16:fc:78:
                    ff:9c:06:73:4e:2e:41:46:cf:50:6c:bb:c4:d3:3d:
                    07:d3:89:bf:eb:cc:bf:e9:29:76:47:7b:5a:72:d0:
                    4c:06:ca:de:ae:55:cd:19:71:48:04:74:85:ef:84:
                    d1:d9:9d:d9:8a:ec:11:21:85:4d:7c:56:57:dc:32:
                    29:87:ec:9a:c1:96:7d:77:3b:c7:ff:ef:af:96:c5:
                    f9:c3:28:6c:5e:a0:0f:ba:c5:ed:25:49:b7:02:d7:
                    ed:fc:f6:77:47:60:ee:bd:9e:7d:78:93:03:dd:04:
                    02:f6:eb:02:7e:40:d0:bd:e8:05:39:a1:19:42:50:
                    2f:ee:3e:d3:d5:2a:9d:05:d6:a6:dc:ec:53:7d:ea:
                    b0:a1:6d:4e:48:27:bc:f1:d3:5b:5d:42:92:86:6d:
                    c9:15:25:7c:62:01:7a:37:e7:96:31:fd:87:af:73:
                    9a:8b:bc:5f:d3:14:66:85:77:d9:ea:f5:be:d1:d8:
                    16:79:39:5d:d9:a1:be:b4:aa:14:c7:3e:d6:f7:73:
                    04:04:c6:f6:b2:f3:d1:62:a7:03:98:83:21:83:09:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:96:F1:B9:3D:5E:88:44:04:D6:D6:99:D9:59:84:52:C4:18:55:10
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a343030303a3a2f33352d3335203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f48:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         08:7b:ba:9c:0e:98:52:1f:33:b9:87:55:8b:99:c0:e5:fe:5f:
         fb:aa:5e:74:4d:7c:d2:60:cd:87:10:21:29:a7:85:6c:5c:17:
         54:a8:be:15:56:18:9a:a3:47:b9:da:68:e1:9b:0a:7f:05:09:
         a5:95:0f:23:f7:24:6a:8e:9a:16:fa:bf:ea:48:1b:f3:e5:c2:
         22:75:e9:9d:57:f3:3c:ed:f5:eb:d3:9a:c9:e4:26:9f:8d:e0:
         bd:50:ba:d0:0d:85:91:47:ae:aa:de:67:9d:0a:94:d9:4f:73:
         04:16:7b:1d:91:a9:fb:11:16:93:57:90:6a:74:f2:f8:ca:4b:
         d7:e1:5f:df:03:6d:fc:cf:d7:54:ce:c5:34:47:70:34:30:27:
         a3:32:c8:af:18:f0:c8:17:10:ff:5b:c6:ab:03:3b:a7:52:b6:
         0c:9f:67:c0:ad:44:af:1d:9c:e3:da:d0:ca:c9:6a:29:55:9f:
         de:c1:c8:5f:02:1c:b2:12:75:f7:38:44:74:18:9a:62:e4:cc:
         b6:67:60:c0:3c:8c:c5:a1:8b:58:11:89:f3:53:02:3d:cd:c0:
         1b:91:7a:5a:7c:f9:b3:ad:80:d1:f3:94:21:dc:01:9c:47:e5:
         72:53:50:26:f9:40:05:bd:01:a8:5e:eb:61:f9:a8:8b:a1:93:
         26:87:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:39:01 2025 by rpki-client