Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/323830343a346437343a3a2f33322d313238203d3e20323638313937.roa
File:                     323830343a346437343a3a2f33322d313238203d3e20323638313937.roa (raw, json)
Hash identifier:          zfj4BAtxxfpv9yeZqU0bCdMPpJvgpAQwlVjRwwyHAQw=
Subject key identifier:   98:28:48:85:F8:F6:86:E4:9D:ED:60:5F:AF:F6:EC:97:35:2D:55:D4
Certificate issuer:       /CN=E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F
Certificate serial:       2478748C5A583A61A7CCBD95B5B2495C31737FA6
Authority key identifier: E2:5C:D2:A4:A3:97:9D:30:BC:2F:FF:CF:02:4D:BE:94:CD:0D:8D:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/323830343a346437343a3a2f33322d313238203d3e20323638313937.roa
Signing time:             Mon 11 Aug 2025 17:09:50 +0000
ROA not before:           Mon 11 Aug 2025 17:04:50 +0000
ROA not after:            Mon 10 Aug 2026 17:09:50 +0000
asID:                     268197
IP address blocks:        2804:4d74::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.crl
                          rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 23:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:78:74:8c:5a:58:3a:61:a7:cc:bd:95:b5:b2:49:5c:31:73:7f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F
        Validity
            Not Before: Aug 11 17:04:50 2025 GMT
            Not After : Aug 10 17:09:50 2026 GMT
        Subject: CN=98284885F8F686E49DED605FAFF6EC97352D55D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:1b:a2:4f:ac:70:27:58:b3:a4:cb:ce:ac:
                    2e:e3:22:4c:bf:26:85:61:85:78:65:6f:4c:9a:ec:
                    39:5d:7b:96:f5:61:bd:77:8f:46:b8:71:84:89:72:
                    41:41:37:68:68:43:c4:02:04:5f:68:d0:8d:a8:bc:
                    96:2a:70:66:cc:ff:7f:8f:3c:92:94:25:4b:2c:7d:
                    91:74:80:43:7b:78:47:2e:b9:a0:06:45:6f:35:bc:
                    7e:61:b0:e8:34:18:cf:67:74:11:f9:23:80:83:e6:
                    37:1f:ca:50:de:0a:92:32:e9:ef:71:06:a1:ba:6b:
                    56:78:eb:6b:e9:ac:ab:b2:b2:1b:8e:b3:dc:32:08:
                    d5:85:b8:7d:0b:00:c6:3a:34:d5:66:8a:27:9a:5c:
                    66:76:5f:70:35:45:13:17:41:49:ef:0c:98:a2:1b:
                    b2:04:fc:69:01:37:52:1a:9a:35:00:82:55:76:80:
                    a3:80:a8:2c:95:6d:ba:d2:7c:a5:20:a6:be:17:fa:
                    1f:1d:3e:78:bc:59:e5:00:60:da:70:ad:fe:d9:56:
                    8e:ed:ac:cf:c8:d2:53:1a:9a:37:13:93:8e:37:4f:
                    34:10:87:f0:b1:e0:9e:ce:b5:34:da:77:5d:7e:43:
                    2f:f7:09:e6:0e:0f:87:b4:16:71:7d:ea:2e:4d:2a:
                    ff:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:28:48:85:F8:F6:86:E4:9D:ED:60:5F:AF:F6:EC:97:35:2D:55:D4
            X509v3 Authority Key Identifier:
                keyid:E2:5C:D2:A4:A3:97:9D:30:BC:2F:FF:CF:02:4D:BE:94:CD:0D:8D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/323830343a346437343a3a2f33322d313238203d3e20323638313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d74::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:52:07:98:ae:96:ae:22:3c:6c:41:f1:d8:f2:65:85:d0:c7:
         97:ce:d8:1a:ad:d4:91:c8:f6:1f:94:a9:7a:41:28:d2:d6:ae:
         28:30:9c:1e:0f:07:51:c2:fd:9d:eb:ac:5f:a3:db:ae:d0:e1:
         2c:70:ac:c3:36:b1:5f:ef:72:fd:df:60:51:97:5c:7c:73:93:
         17:2e:27:6a:8f:6a:bd:79:7c:e0:6d:fe:06:1c:58:20:4f:74:
         d7:6f:09:b5:44:c9:e3:61:01:5c:d7:fb:b1:ee:53:80:de:74:
         6d:31:08:34:0c:5e:f8:46:a2:03:82:78:42:56:fb:af:b2:01:
         93:3d:64:61:15:5a:61:b1:a2:1b:44:c2:d3:d0:32:8d:f5:24:
         f6:c0:1e:fc:80:79:69:b3:28:01:4b:cf:da:c5:1b:98:3c:df:
         b5:d4:9e:6b:bc:de:18:89:b7:49:6d:36:b4:52:79:bd:44:a5:
         39:cf:a9:55:94:56:e9:50:9b:5a:7e:fb:f5:0d:94:c1:5e:d9:
         21:1b:d8:b9:52:66:ec:5d:70:07:47:28:3b:61:a5:39:bb:12:
         6f:ae:a3:24:82:57:91:19:d0:93:aa:d7:2f:20:26:8e:85:4d:
         2f:21:ae:58:ab:ac:87:b5:2d:18:3e:8a:4b:fd:09:68:ad:f3:
         d0:6e:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:18:09 2025 by rpki-client