Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/323830343a343637633a3a2f33322d313238203d3e20323636393932.roa
File:                     323830343a343637633a3a2f33322d313238203d3e20323636393932.roa (raw, json)
Hash identifier:          FG9yedBaRW69iKWQ5vrW8liVhEjSF+gYfzKeBeedf5w=
Subject key identifier:   95:96:39:E9:76:D2:5E:61:E7:6B:3A:BD:27:5E:EC:64:99:6D:E5:28
Certificate issuer:       /CN=E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325
Certificate serial:       367F5E2BA6B59119AA8706CC4E368B7FF5151F4F
Authority key identifier: E0:F9:CE:BF:1B:40:D8:FC:1A:5E:2C:82:B0:39:57:0C:93:49:F3:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/323830343a343637633a3a2f33322d313238203d3e20323636393932.roa
Signing time:             Tue 09 Sep 2025 12:45:18 +0000
ROA not before:           Tue 09 Sep 2025 12:40:18 +0000
ROA not after:            Tue 08 Sep 2026 12:45:18 +0000
asID:                     266992
IP address blocks:        2804:467c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.crl
                          rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7f:5e:2b:a6:b5:91:19:aa:87:06:cc:4e:36:8b:7f:f5:15:1f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325
        Validity
            Not Before: Sep  9 12:40:18 2025 GMT
            Not After : Sep  8 12:45:18 2026 GMT
        Subject: CN=959639E976D25E61E76B3ABD275EEC64996DE528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:0d:48:15:5e:1b:e5:d4:cb:7b:1a:05:26:
                    3e:ab:9e:3f:97:c7:29:42:db:10:a7:e8:3d:9b:68:
                    00:4a:e7:90:a1:82:00:6f:ba:1b:1b:a6:64:ef:96:
                    0d:b8:d6:18:d2:aa:90:89:c3:c5:71:e6:68:31:32:
                    46:b7:33:89:07:d5:2b:c2:6c:a7:e3:19:9d:e7:a7:
                    c9:51:e1:49:ff:11:16:75:71:0e:44:8d:f6:8e:ba:
                    94:7d:b5:e2:61:fa:6a:f2:70:78:49:0c:66:0c:17:
                    ac:49:a2:6a:52:35:d4:e0:de:df:67:de:25:0e:52:
                    f4:e6:f1:e0:65:37:8f:8e:71:89:fa:5d:81:c6:81:
                    5e:1c:ae:49:bd:58:0f:a2:d9:45:f9:86:b7:55:eb:
                    cc:14:08:1b:04:76:1a:e3:be:2a:92:87:a5:3b:83:
                    f0:02:78:2f:e1:61:41:73:c7:70:e1:a3:a4:c1:87:
                    7a:9a:59:cd:5a:aa:3c:a2:15:1e:be:45:c6:4f:69:
                    07:4a:22:66:58:dc:4f:a1:18:c3:68:13:a5:c5:70:
                    60:2b:b5:c5:2c:71:60:c9:9f:ed:64:c5:09:4a:ad:
                    5f:de:c2:e9:40:cf:04:46:8c:ce:68:54:25:d3:b0:
                    b7:91:cd:48:8b:b6:fc:1d:ff:c7:a1:d1:a0:18:48:
                    cf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:96:39:E9:76:D2:5E:61:E7:6B:3A:BD:27:5E:EC:64:99:6D:E5:28
            X509v3 Authority Key Identifier:
                keyid:E0:F9:CE:BF:1B:40:D8:FC:1A:5E:2C:82:B0:39:57:0C:93:49:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/323830343a343637633a3a2f33322d313238203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:467c::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:91:de:51:3d:f3:54:aa:48:fd:8c:85:a1:ac:05:fb:ee:2f:
         76:e5:6d:9c:05:a4:fb:96:46:7c:b1:7b:2d:82:a6:ba:b0:93:
         29:45:90:a7:83:91:bf:d5:d7:b5:cf:e3:9f:f8:9c:ce:4e:03:
         61:d6:b3:84:fc:b0:d4:73:2f:94:40:15:a7:54:67:cf:10:dc:
         35:20:b2:9f:e8:2a:f7:d9:78:a6:da:c8:24:c2:10:5c:e6:d7:
         57:8d:6a:58:1d:20:93:de:53:1c:a3:21:ca:37:ce:4a:39:0a:
         b2:68:14:68:89:7b:b9:b1:23:6a:c4:5d:ad:1e:35:93:aa:8d:
         01:f2:e5:42:01:cf:6e:79:9f:1c:77:a9:08:84:0b:14:be:8c:
         f7:dd:1b:94:a7:4a:7f:04:be:32:6c:d1:25:3c:3a:1e:c5:13:
         ac:82:f6:81:ce:b3:e4:ec:65:c4:cb:cd:18:08:ab:e7:14:b2:
         03:ec:a5:04:14:26:8a:4a:2e:7b:1d:75:8a:ce:ed:45:37:1b:
         a3:f2:c0:41:d3:17:96:fe:e0:14:f3:62:b5:08:c8:ff:d9:0c:
         02:d5:dc:7d:55:c3:5e:fb:b4:26:db:dd:b2:e2:e4:ef:94:b1:
         a8:9f:4b:17:1a:f8:f5:23:04:98:75:82:1a:ec:ea:ed:bb:57:
         c8:76:11:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:01:57 2025 by rpki-client