Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/323830343a316165633a3a2f33322d3438203d3e203631363938.roa
File:                     323830343a316165633a3a2f33322d3438203d3e203631363938.roa (raw, json)
Hash identifier:          IFrUYpuj0d1bgr14YmgI4By335jGYf5cwE1I2H0w90A=
Subject key identifier:   87:B7:16:5D:23:F1:5A:CE:F4:02:BB:48:CD:D6:81:68:AB:DF:ED:B3
Certificate issuer:       /CN=CA9298E26EC7D83F990DD29EFD395097A928590F
Certificate serial:       095FD6E348E776A3E3E801E450EE2617FFB5CEF5
Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/323830343a316165633a3a2f33322d3438203d3e203631363938.roa
Signing time:             Tue 19 Aug 2025 18:53:01 +0000
ROA not before:           Tue 19 Aug 2025 18:48:01 +0000
ROA not after:            Tue 18 Aug 2026 18:53:01 +0000
asID:                     61698
IP address blocks:        2804:1aec::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl
                          rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5f:d6:e3:48:e7:76:a3:e3:e8:01:e4:50:ee:26:17:ff:b5:ce:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F
        Validity
            Not Before: Aug 19 18:48:01 2025 GMT
            Not After : Aug 18 18:53:01 2026 GMT
        Subject: CN=87B7165D23F15ACEF402BB48CDD68168ABDFEDB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:1c:07:50:22:b7:73:6d:77:70:f8:0b:4a:
                    a0:ff:1a:3a:4e:6e:bb:de:2c:fd:c8:3f:91:5a:f7:
                    64:3b:15:e4:f8:8c:ee:70:ed:67:a7:19:0b:c2:9f:
                    8d:39:3c:e4:16:04:aa:71:a0:00:52:bb:7f:a2:2a:
                    aa:9f:99:8a:62:b2:f3:37:e9:fa:72:e5:b6:08:a0:
                    38:1d:27:c3:f5:f9:9a:1c:26:50:80:ba:a8:f1:56:
                    ef:72:95:08:d3:a8:6d:3a:fe:b2:52:91:65:bb:75:
                    3b:3f:d9:59:9a:f2:51:10:e1:c6:5a:e4:9a:83:39:
                    5f:ec:31:93:46:a3:53:9a:f4:f4:87:f2:00:6b:af:
                    5b:db:c1:09:42:11:4b:82:8b:0c:e0:01:cf:1b:fe:
                    75:c5:00:d4:23:39:62:30:76:b7:4c:0b:66:d1:de:
                    a6:a5:fe:6b:a9:2a:89:5d:e5:78:87:60:3e:b8:30:
                    a2:75:7c:e1:06:42:aa:67:8e:fa:82:fb:ae:c8:76:
                    83:5e:05:2d:6f:54:8f:ba:75:44:38:fc:89:57:f0:
                    02:e4:bf:8a:0a:c9:0c:0e:0c:82:c8:00:8c:da:99:
                    1a:88:77:70:32:21:fb:69:70:eb:e5:b0:b6:07:8c:
                    da:22:e2:85:72:8f:f9:74:4b:6b:ef:c8:ef:0d:e8:
                    aa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B7:16:5D:23:F1:5A:CE:F4:02:BB:48:CD:D6:81:68:AB:DF:ED:B3
            X509v3 Authority Key Identifier:
                keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/323830343a316165633a3a2f33322d3438203d3e203631363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1aec::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:f2:69:f1:19:75:18:a3:91:50:96:cd:9a:7a:39:b5:80:de:
         69:38:08:b8:bc:8b:b5:1a:60:99:ff:61:0f:fc:c0:01:be:fc:
         c5:68:53:eb:8a:28:74:0f:64:49:28:80:87:d0:33:e8:86:5d:
         26:cf:35:b5:2c:3a:0a:77:3c:f2:7e:a1:99:37:bb:34:cc:25:
         67:0f:b6:9a:bf:08:ae:ab:06:82:52:0d:b4:28:24:03:f5:b0:
         0d:2c:6a:93:89:fb:c6:ed:1b:c0:97:10:1b:c0:2b:0a:97:74:
         c6:a0:fe:9f:a1:88:c1:97:94:8d:a2:11:ca:58:e3:62:46:b9:
         f9:89:cd:e0:63:d4:39:10:f9:21:2f:e9:08:5c:fa:a2:bc:61:
         7a:53:b6:fe:c9:50:28:b3:2c:cb:f1:d5:9c:78:a8:30:52:33:
         4e:9a:4d:f1:06:25:53:78:92:8d:a7:4d:4b:6d:bd:d6:48:26:
         93:01:ae:cd:5f:b1:1e:df:3c:60:29:de:78:54:af:87:66:32:
         da:ab:29:4e:d2:f9:9e:3b:e1:9c:4f:30:b6:03:4e:91:1f:bd:
         8b:3c:b8:eb:f7:c3:06:9d:bb:1e:1c:0c:89:96:6a:37:3a:e0:
         84:ea:d0:27:b0:18:8a:c3:d1:19:77:56:b1:bf:2d:f7:df:11:
         92:e4:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:09:39 2025 by rpki-client