Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33342d3334203d3e20323635353030.roa
File:                     323830343a333531383a3a2f33342d3334203d3e20323635353030.roa (raw, json)
Hash identifier:          ahwCx6FVSnBF5dRe4hXYjUHm26bYFQ46Ptv4bIDlDBQ=
Subject key identifier:   54:EC:A8:8C:8C:D6:9F:72:12:29:91:12:EF:42:32:80:A1:99:03:2A
Certificate issuer:       /CN=D40B256042895F431460325AC5DB0F0088D3437F
Certificate serial:       2D18BC974FD1B52A445481BC8C0ABEEE2DB658F4
Authority key identifier: D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33342d3334203d3e20323635353030.roa
Signing time:             Tue 26 Aug 2025 01:04:07 +0000
ROA not before:           Tue 26 Aug 2025 00:59:07 +0000
ROA not after:            Tue 25 Aug 2026 01:04:07 +0000
asID:                     265500
IP address blocks:        2804:3518::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 12:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:18:bc:97:4f:d1:b5:2a:44:54:81:bc:8c:0a:be:ee:2d:b6:58:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40B256042895F431460325AC5DB0F0088D3437F
        Validity
            Not Before: Aug 26 00:59:07 2025 GMT
            Not After : Aug 25 01:04:07 2026 GMT
        Subject: CN=54ECA88C8CD69F7212299112EF423280A199032A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:b4:d2:aa:80:03:02:1b:c7:21:45:be:f7:
                    f2:4e:25:2e:be:51:33:d3:61:a9:37:9b:3e:c7:32:
                    95:39:9b:0c:fd:40:fa:5c:d4:c5:49:e0:f3:7c:b2:
                    fc:3c:1b:aa:77:09:fc:70:7f:23:da:26:30:06:0c:
                    a1:11:36:7a:d5:9a:8c:79:02:d3:dd:09:f8:b4:52:
                    ba:d7:32:7c:c9:ef:49:82:91:82:19:70:62:a7:f9:
                    dd:54:cc:29:ae:ca:a4:7e:3b:8b:a9:f2:6f:1e:68:
                    cf:ec:49:09:ba:d4:08:c5:ee:a4:d0:f9:e4:76:95:
                    c8:42:de:4c:f0:23:83:b7:48:bd:22:b7:e3:90:87:
                    21:3c:24:32:2e:ee:98:91:42:4a:a5:c3:cf:72:5c:
                    6c:7f:b6:d8:14:79:c5:6c:94:55:14:38:2a:e1:33:
                    69:60:11:49:ca:a8:94:88:36:bd:3a:4d:6c:cb:28:
                    6a:74:22:f5:31:5d:75:b6:01:be:bf:14:14:9b:66:
                    ba:b6:4f:78:b6:bd:30:97:4a:a1:ac:72:4f:32:0a:
                    b6:93:cd:18:38:95:47:94:89:2d:c5:ab:f4:b6:cf:
                    68:8f:d1:82:39:64:d5:ea:fb:fa:bd:3e:92:5d:54:
                    61:c2:d6:e1:b9:52:70:de:31:e9:04:7e:ed:1a:24:
                    8e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EC:A8:8C:8C:D6:9F:72:12:29:91:12:EF:42:32:80:A1:99:03:2A
            X509v3 Authority Key Identifier:
                keyid:D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33342d3334203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518::/34

    Signature Algorithm: sha256WithRSAEncryption
         35:98:01:60:1f:ac:f2:7c:15:e1:94:18:be:0c:52:75:94:da:
         80:d2:7f:61:33:25:4c:28:1a:1f:e7:10:17:a2:97:a2:7d:ae:
         84:01:e9:b6:0f:ec:73:59:00:03:cc:9e:3f:20:2b:b3:65:9a:
         a6:48:c0:9d:46:79:a3:dd:26:f3:a2:e8:57:a3:47:0a:b4:2e:
         7a:70:00:3e:78:75:09:4c:b5:28:47:29:b8:5c:8a:bd:b5:09:
         49:51:62:a5:a3:86:13:f3:40:31:4d:64:3c:c7:d8:3c:45:30:
         4e:f7:8a:4a:c3:8b:a8:95:29:90:25:55:c3:9b:8b:f2:aa:f3:
         ea:15:d3:64:79:97:43:36:ea:f7:ea:83:ff:f4:9e:14:90:d6:
         00:78:a6:07:1a:ec:79:94:ff:d2:2d:e8:77:45:06:09:7c:e5:
         34:6b:9d:54:a8:c2:4c:6d:de:cb:fa:f2:e1:60:00:1a:d8:88:
         20:3e:2c:1a:12:cc:3a:45:1e:2c:d6:3f:e7:7f:2c:30:9a:2c:
         d5:dc:36:27:47:17:87:35:9e:07:08:6c:e2:8a:24:37:f5:a7:
         ca:0a:03:e8:aa:86:f5:34:59:23:fb:f0:fe:a1:39:a7:88:21:
         5e:a9:0f:05:cf:5c:87:26:99:aa:0e:41:c7:9f:59:85:8a:a7:
         e7:81:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:10:43 2025 by rpki-client