Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a3a2f33332d3333203d3e203631373734.roa
File:                     323830343a313932343a3a2f33332d3333203d3e203631373734.roa (raw, json)
Hash identifier:          +ZRXSyM40SqRQWBFh4Za9nLLYqCWuLMTHFUxouXOC18=
Subject key identifier:   B1:91:0F:B6:27:FA:E7:8A:F2:E8:94:56:44:C9:44:B2:95:C0:9C:E3
Certificate issuer:       /CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
Certificate serial:       7564C8F031675AEB82D1EE215102FC5812467C2A
Authority key identifier: E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a3a2f33332d3333203d3e203631373734.roa
Signing time:             Sun 31 Aug 2025 00:46:12 +0000
ROA not before:           Sun 31 Aug 2025 00:41:12 +0000
ROA not after:            Sun 30 Aug 2026 00:46:12 +0000
asID:                     61774
IP address blocks:        2804:1924::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 20:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:64:c8:f0:31:67:5a:eb:82:d1:ee:21:51:02:fc:58:12:46:7c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
        Validity
            Not Before: Aug 31 00:41:12 2025 GMT
            Not After : Aug 30 00:46:12 2026 GMT
        Subject: CN=B1910FB627FAE78AF2E8945644C944B295C09CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c8:63:90:c1:82:e7:51:37:c3:4a:20:b5:e3:
                    d8:d0:b3:48:0c:33:12:cc:8a:e0:30:15:29:b7:61:
                    6e:ae:f9:dd:12:5e:18:a4:1d:fc:23:8c:c2:84:f3:
                    ec:fc:e4:82:63:38:3c:df:36:12:36:b3:ea:80:23:
                    3c:f2:a8:b9:d4:6d:05:5b:6e:49:fb:98:ad:50:93:
                    d8:26:88:5a:6d:f6:af:94:37:c9:a8:4f:fa:69:30:
                    18:f3:9e:27:a2:f0:14:03:bd:29:49:fa:fb:f7:cb:
                    fa:c2:c3:fc:89:2e:f8:f6:ef:78:38:27:34:de:cf:
                    76:5f:92:7d:9d:a9:93:7c:39:68:8c:be:af:ad:b7:
                    8d:12:99:3a:80:e1:d7:86:93:24:da:34:47:c3:38:
                    45:34:f1:b6:bb:5f:4f:5e:3f:cc:7e:54:be:75:d1:
                    fb:bf:d9:7e:76:93:25:b9:27:e8:ea:7d:99:0d:50:
                    54:96:04:a5:27:84:b4:14:47:68:39:e4:43:ce:ce:
                    ce:48:91:65:0e:75:e7:cc:32:64:6e:51:75:d9:f7:
                    83:b0:90:fe:aa:20:ed:43:83:73:78:d2:c5:5f:bf:
                    36:55:4f:d9:20:c6:63:2c:be:11:7a:38:51:95:b0:
                    f1:83:54:b7:dd:a7:f8:03:14:82:73:56:48:71:f8:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:91:0F:B6:27:FA:E7:8A:F2:E8:94:56:44:C9:44:B2:95:C0:9C:E3
            X509v3 Authority Key Identifier:
                keyid:E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a3a2f33332d3333203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1924::/33

    Signature Algorithm: sha256WithRSAEncryption
         b4:3c:74:36:46:50:f2:a6:c9:30:7c:54:98:a7:f6:49:02:3f:
         55:7e:50:0b:95:98:f2:68:7e:42:2a:ac:60:42:df:31:2f:41:
         21:99:c2:6b:26:37:b6:18:a3:31:99:8c:97:7c:06:46:43:33:
         12:cb:6d:67:06:54:c2:ab:f0:15:fc:c1:88:57:65:f9:c6:88:
         ed:bb:77:ff:70:89:46:26:a6:4c:a4:94:28:e4:69:dd:19:22:
         13:97:f6:16:20:94:dd:4e:9c:5c:4a:21:2a:b0:71:ec:ac:42:
         af:d6:73:99:a0:09:96:53:24:47:2c:6d:1d:99:d9:ff:76:3d:
         95:27:42:aa:63:3d:38:34:82:4b:ea:75:9a:2d:b2:75:0c:d6:
         b5:9a:25:fa:0d:f6:6a:9a:eb:b2:71:b6:18:48:90:c8:8e:42:
         af:97:28:5f:b8:c3:af:77:39:0f:6f:b2:2c:2c:0c:8e:94:bf:
         ca:66:c7:b3:5a:6f:98:fc:8f:47:e1:8f:cd:e1:72:25:db:b7:
         80:16:05:de:15:71:08:70:c6:17:52:18:40:ca:d3:74:cf:ea:
         28:90:cd:a6:0c:71:ff:f2:09:79:42:35:f1:ed:4b:ed:a4:df:
         11:3b:94:55:0a:ef:5d:36:4c:eb:65:5c:64:9f:04:68:76:9c:
         26:b0:58:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:49:25 2025 by rpki-client