Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/323830343a34343a3a2f33322d3332203d3e203238363036.roa
File:                     323830343a34343a3a2f33322d3332203d3e203238363036.roa (raw, json)
Hash identifier:          T5cOXY09dJtkiT3kBRHWNb9Y8IDqrluuL7WWqxxdriY=
Subject key identifier:   98:8B:5F:F6:DD:33:21:93:51:48:85:60:43:79:49:0B:9D:E5:3F:B3
Certificate issuer:       /CN=E7BD7FB5338C0533B7C507F4CA3932E8D54C7040
Certificate serial:       54F533482322564741E73B6E74AD69F64BEE4F27
Authority key identifier: E7:BD:7F:B5:33:8C:05:33:B7:C5:07:F4:CA:39:32:E8:D5:4C:70:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/323830343a34343a3a2f33322d3332203d3e203238363036.roa
Signing time:             Thu 28 Aug 2025 21:41:32 +0000
ROA not before:           Thu 28 Aug 2025 21:36:32 +0000
ROA not after:            Thu 27 Aug 2026 21:41:32 +0000
asID:                     28606
IP address blocks:        2804:44::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.crl
                          rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f5:33:48:23:22:56:47:41:e7:3b:6e:74:ad:69:f6:4b:ee:4f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7BD7FB5338C0533B7C507F4CA3932E8D54C7040
        Validity
            Not Before: Aug 28 21:36:32 2025 GMT
            Not After : Aug 27 21:41:32 2026 GMT
        Subject: CN=988B5FF6DD332193514885604379490B9DE53FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f3:ed:43:c8:2a:bc:f5:5e:a2:63:7d:cb:ad:
                    f5:4e:05:fd:d9:a6:09:f9:85:b1:9a:7f:de:99:63:
                    91:f1:93:2f:32:d7:58:47:aa:18:93:e5:81:ef:0d:
                    e4:c2:9e:9f:ef:08:16:3c:40:a7:6e:d1:cd:e7:5a:
                    8d:ae:1b:f7:36:a2:06:24:e1:aa:af:ab:b0:0c:81:
                    33:ed:1a:62:b3:09:6e:bf:42:6d:32:06:75:29:6c:
                    30:ee:54:db:a4:d5:2c:af:a2:61:a0:db:83:a3:23:
                    b6:36:09:b1:33:b9:29:ca:21:9c:d4:23:9a:cb:b7:
                    90:c4:4c:b1:51:53:bf:f7:12:52:bb:5b:67:6d:8e:
                    66:03:00:f6:4b:1f:6f:4f:18:bb:72:c0:de:ee:02:
                    1f:a5:64:3a:ee:a2:71:3a:b4:1d:d5:de:19:91:9d:
                    e3:9b:30:af:2f:bc:cb:3b:50:44:b4:91:b1:9b:e7:
                    62:c2:3e:56:e9:16:58:cf:70:0a:90:6e:ce:f4:01:
                    35:5f:04:94:2f:5a:01:23:1d:cc:48:dd:88:47:be:
                    dd:2d:6d:1d:0d:79:25:47:79:95:26:c7:25:ef:42:
                    15:e9:c1:2d:8f:ac:f5:cd:54:7d:36:0c:1e:82:10:
                    7f:1a:d3:77:ff:a0:3b:70:fa:e7:00:cf:10:16:75:
                    37:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8B:5F:F6:DD:33:21:93:51:48:85:60:43:79:49:0B:9D:E5:3F:B3
            X509v3 Authority Key Identifier:
                keyid:E7:BD:7F:B5:33:8C:05:33:B7:C5:07:F4:CA:39:32:E8:D5:4C:70:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/323830343a34343a3a2f33322d3332203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:a1:ee:e4:af:c4:d7:13:60:14:ed:83:a9:4e:db:f8:8a:4f:
         35:03:be:84:99:87:07:3f:b3:82:7e:1c:e8:8c:16:e1:2a:44:
         6b:c5:77:ab:89:19:ab:6b:9f:4f:b8:f7:76:bd:2c:53:50:33:
         03:a3:59:7b:ba:80:46:91:c1:f4:13:d3:25:fe:81:10:da:84:
         f9:b9:32:f1:80:f2:5f:60:8c:82:09:2b:11:d4:1e:e4:c8:00:
         0a:e9:66:4f:d5:11:21:86:e8:a9:45:19:e2:27:20:07:f7:de:
         7c:c0:9d:80:80:e1:22:90:9a:de:e7:c7:17:22:11:fe:1a:2a:
         2a:88:e5:04:37:83:da:93:c6:b2:9b:1a:47:81:ef:89:a6:c6:
         eb:8d:df:b8:b7:51:10:d3:7c:38:a1:b8:34:7e:34:e4:b9:4f:
         d8:17:0a:44:e2:5d:09:86:00:45:bb:a2:df:e3:7a:64:91:dd:
         fa:3d:94:65:34:57:f4:3b:ef:12:bf:e8:c0:a9:04:bd:26:26:
         ef:af:37:3c:a3:05:9a:5a:b3:38:b5:de:b5:2c:ce:3e:fc:a6:
         0d:85:05:d0:0a:f9:2f:67:c6:bb:71:9d:5b:dd:51:84:20:77:
         9f:56:9b:9a:df:53:38:36:8d:3f:c6:cc:c8:53:08:f8:44:22:
         28:19:71:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:46:06 2025 by rpki-client