Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/323830343a353662633a3a2f33322d3332203d3e20323638303230.roa
File:                     323830343a353662633a3a2f33322d3332203d3e20323638303230.roa (raw, json)
Hash identifier:          HzUEcjVLd1hnPKH1Xh8UJHXfGzXBazyGsFwFOKUgE+0=
Subject key identifier:   DA:7E:E3:48:0F:CF:21:A1:2F:0A:6E:0E:D0:CD:E2:BE:33:9D:8D:4B
Certificate issuer:       /CN=284EEA8E6EDB94AF9793A26E511B4993CF092BCA
Certificate serial:       5FDCA212DF59B4ED32483764DF93063D674BA4D2
Authority key identifier: 28:4E:EA:8E:6E:DB:94:AF:97:93:A2:6E:51:1B:49:93:CF:09:2B:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/323830343a353662633a3a2f33322d3332203d3e20323638303230.roa
Signing time:             Wed 27 Aug 2025 15:05:12 +0000
ROA not before:           Wed 27 Aug 2025 15:00:12 +0000
ROA not after:            Wed 26 Aug 2026 15:05:12 +0000
asID:                     268020
IP address blocks:        2804:56bc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.crl
                          rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:dc:a2:12:df:59:b4:ed:32:48:37:64:df:93:06:3d:67:4b:a4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284EEA8E6EDB94AF9793A26E511B4993CF092BCA
        Validity
            Not Before: Aug 27 15:00:12 2025 GMT
            Not After : Aug 26 15:05:12 2026 GMT
        Subject: CN=DA7EE3480FCF21A12F0A6E0ED0CDE2BE339D8D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:cf:72:98:61:d5:f0:86:fd:e0:43:91:68:
                    46:e0:66:b6:a1:a5:fe:80:e0:b0:27:e1:87:66:01:
                    5f:90:45:ee:aa:71:49:74:62:5d:33:91:81:d7:96:
                    1e:90:a6:63:20:98:63:db:8b:f9:51:c0:53:87:f1:
                    24:a9:18:80:ba:b2:da:cd:17:fe:8c:1b:24:ea:97:
                    b7:a4:97:fa:fd:bf:0d:2a:40:ed:19:df:bf:01:05:
                    11:eb:ed:1c:2e:0e:5c:1d:07:6f:41:d2:7e:64:b8:
                    44:9f:2a:61:9f:e3:60:54:e3:d8:ea:68:bf:c4:7d:
                    4f:f6:87:d7:23:c6:8a:72:d5:2f:5a:41:7d:42:be:
                    55:29:7b:96:f4:c4:19:ee:7f:a7:50:f4:dd:45:bb:
                    a0:e1:c2:f8:61:f3:d1:dd:86:84:3a:3c:15:6e:2f:
                    38:96:46:17:de:63:76:96:28:d1:25:32:a8:02:53:
                    16:7c:5b:5e:66:b0:89:7b:55:a8:b0:a1:ce:26:57:
                    bd:0d:33:92:62:f4:d3:e6:06:3e:78:ab:88:42:f2:
                    8f:30:05:cd:79:8c:3c:0f:47:38:81:9c:f9:5e:0b:
                    0e:a2:ef:b2:e6:b4:4d:53:40:19:37:f9:8a:52:07:
                    76:64:ef:ff:05:85:66:19:98:a5:a5:bd:5b:ce:19:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7E:E3:48:0F:CF:21:A1:2F:0A:6E:0E:D0:CD:E2:BE:33:9D:8D:4B
            X509v3 Authority Key Identifier:
                keyid:28:4E:EA:8E:6E:DB:94:AF:97:93:A2:6E:51:1B:49:93:CF:09:2B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/323830343a353662633a3a2f33322d3332203d3e20323638303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:9b:90:91:f7:c0:98:f2:0f:98:52:d3:c2:ba:f4:f9:61:2d:
         0a:43:4f:6c:12:61:ec:db:f5:33:90:32:ab:92:bd:5b:fd:c9:
         b8:f1:6d:da:5c:71:f2:35:86:ec:b4:30:e7:2f:25:b5:d5:b4:
         47:3a:ba:87:06:1c:01:8d:6f:0f:64:ef:4a:ed:6a:58:38:3f:
         f6:5b:8a:a7:8f:23:6f:f1:e5:d9:2b:3d:88:7c:aa:af:2f:8b:
         b4:49:ba:58:97:25:85:d7:f3:f6:46:86:ce:e5:36:4c:a6:13:
         82:44:3f:ab:a4:4b:93:fb:3d:ca:e1:59:be:4d:2f:ec:bb:e9:
         40:54:80:ad:d6:7b:02:a6:99:07:8f:ec:ab:4c:a0:e6:14:7a:
         10:da:64:0e:f8:88:32:07:b7:4e:56:df:23:78:ae:83:4f:e0:
         e4:da:78:d0:06:89:61:34:17:cb:62:82:40:dc:c5:d7:1d:bd:
         79:00:ed:78:cb:d1:9e:11:fb:47:21:1b:4a:07:c0:9c:bb:ae:
         7d:15:b2:32:d3:9c:a4:a1:b6:ad:5b:fc:93:3e:aa:2f:cc:89:
         04:cd:cf:a1:3a:a3:76:cc:0c:e4:49:72:a8:18:62:19:e1:d0:
         c8:64:ff:36:89:53:9c:e8:5d:92:ac:7b:d0:8e:4f:21:df:82:
         74:09:06:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:43:04 2025 by rpki-client