Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/323830343a323631383a3a2f33322d3438203d3e20323632333632.roa
File:                     323830343a323631383a3a2f33322d3438203d3e20323632333632.roa (raw, json)
Hash identifier:          xKnp1goGnoW8UOerHsAcuqYTyh+o0+ItHotweXwN+/s=
Subject key identifier:   65:20:DA:AB:1B:42:E9:C9:56:0A:58:9D:28:D2:D1:EA:78:51:C7:B3
Certificate issuer:       /CN=E56BC148F24881D384850951C8DAD271E8EC9541
Certificate serial:       0E907D85ADC0782FCD133BC7808640A8700106E9
Authority key identifier: E5:6B:C1:48:F2:48:81:D3:84:85:09:51:C8:DA:D2:71:E8:EC:95:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E56BC148F24881D384850951C8DAD271E8EC9541.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/323830343a323631383a3a2f33322d3438203d3e20323632333632.roa
Signing time:             Fri 12 Sep 2025 19:09:48 +0000
ROA not before:           Fri 12 Sep 2025 19:04:48 +0000
ROA not after:            Fri 11 Sep 2026 19:09:48 +0000
asID:                     262362
IP address blocks:        2804:2618::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/E56BC148F24881D384850951C8DAD271E8EC9541.crl
                          rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/E56BC148F24881D384850951C8DAD271E8EC9541.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E56BC148F24881D384850951C8DAD271E8EC9541.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:90:7d:85:ad:c0:78:2f:cd:13:3b:c7:80:86:40:a8:70:01:06:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E56BC148F24881D384850951C8DAD271E8EC9541
        Validity
            Not Before: Sep 12 19:04:48 2025 GMT
            Not After : Sep 11 19:09:48 2026 GMT
        Subject: CN=6520DAAB1B42E9C9560A589D28D2D1EA7851C7B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:58:7a:a8:ba:c8:6e:3f:a1:e3:0e:f7:e1:
                    e8:af:33:e5:43:06:bd:57:8e:38:82:53:31:ff:6d:
                    9f:2f:a1:3c:eb:3a:01:88:23:6e:62:fb:30:49:65:
                    71:92:03:43:a4:02:d4:84:94:60:5b:63:b9:a1:95:
                    fd:2a:64:9d:29:4c:a5:a5:bb:2c:c7:dc:62:e8:05:
                    ee:d8:4f:41:29:2f:7b:51:03:7f:3d:81:42:73:53:
                    03:71:f3:25:f1:3d:c9:72:fd:48:a3:38:e3:cc:73:
                    57:55:b0:c9:3b:e6:fd:7b:87:31:09:e2:3e:59:f2:
                    bd:e2:a9:6c:3c:fe:f5:12:3e:63:3d:79:79:64:bf:
                    5d:24:d3:aa:b4:7e:77:f8:c3:3a:3a:ba:51:76:d2:
                    5f:72:da:23:d8:06:1b:de:e4:88:c0:ff:5d:11:a2:
                    25:53:08:d1:c7:20:cd:f0:5c:20:a7:13:7a:88:a9:
                    a1:16:6c:d4:76:a2:09:61:10:00:6a:2f:a6:ae:07:
                    02:9a:f1:81:99:21:0c:4b:49:e6:20:37:85:9d:12:
                    c0:de:04:67:6c:ad:48:d9:5f:92:14:02:62:fd:4e:
                    2e:64:d2:ac:a1:ce:f7:94:15:62:b2:84:ed:e8:8e:
                    81:b4:d8:4a:44:99:96:41:78:b4:53:03:8b:75:6d:
                    c7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:20:DA:AB:1B:42:E9:C9:56:0A:58:9D:28:D2:D1:EA:78:51:C7:B3
            X509v3 Authority Key Identifier:
                keyid:E5:6B:C1:48:F2:48:81:D3:84:85:09:51:C8:DA:D2:71:E8:EC:95:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/E56BC148F24881D384850951C8DAD271E8EC9541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E56BC148F24881D384850951C8DAD271E8EC9541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/323830343a323631383a3a2f33322d3438203d3e20323632333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2618::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:d2:51:6a:3e:8e:1f:04:bc:2f:0e:a4:7e:b2:5f:6f:bd:f0:
         6e:42:13:ab:9c:72:36:71:eb:bb:24:e6:e1:3d:55:81:66:fb:
         37:03:06:d3:92:8d:12:7b:13:bb:5b:8a:2f:e7:02:6a:75:ce:
         9c:b3:3d:fe:b1:05:c5:78:e5:50:10:8b:39:9a:8d:35:52:60:
         62:2e:9c:1f:0a:0f:2e:0e:b8:fe:14:74:6a:bd:8e:4e:f0:e1:
         77:60:65:8c:e6:8b:52:f6:e0:f8:18:f3:f4:af:9a:a6:ac:bf:
         17:97:1d:ec:d3:fd:11:56:e7:3a:49:e1:e6:42:95:f5:a8:db:
         62:ba:95:c5:b9:55:26:9d:dd:ba:7a:6e:ed:b9:68:b8:e8:61:
         f1:dd:c3:57:1f:c7:6f:30:d6:73:ee:e9:d6:2d:8a:f2:1e:97:
         a6:ed:f5:8b:3d:52:c5:a1:03:0f:60:c8:ab:11:2b:9b:47:6e:
         db:f5:87:11:96:0e:84:02:b4:11:81:bc:ba:dd:50:ff:71:32:
         ef:d6:17:bf:bf:4e:7a:9a:6b:d9:31:fc:1c:63:93:85:00:42:
         9c:12:88:09:a7:4d:95:2a:f4:0a:a0:63:e0:d5:e3:64:7e:bb:
         f8:3b:83:52:9e:9c:51:19:8f:dc:ea:28:18:71:33:58:a1:eb:
         cf:ff:88:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:20:46 2025 by rpki-client