Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/323830343a3366383a3a2f33322d313238203d3e20323632353839.roa
File:                     323830343a3366383a3a2f33322d313238203d3e20323632353839.roa (raw, json)
Hash identifier:          K4eRknQJ/zttSUfVEjUD2UDjsGjvcjpwsl/D/z/OigU=
Subject key identifier:   89:2A:1F:C0:CA:FF:65:D8:92:F6:A2:F6:A7:DB:0F:C0:42:55:C5:0F
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       01DF91B8057C077408C69B747E46AE50CCA25AF8
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/323830343a3366383a3a2f33322d313238203d3e20323632353839.roa
Signing time:             Thu 28 Aug 2025 14:47:38 +0000
ROA not before:           Thu 28 Aug 2025 14:42:38 +0000
ROA not after:            Thu 27 Aug 2026 14:47:38 +0000
asID:                     262589
IP address blocks:        2804:3f8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:df:91:b8:05:7c:07:74:08:c6:9b:74:7e:46:ae:50:cc:a2:5a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:38 2025 GMT
            Not After : Aug 27 14:47:38 2026 GMT
        Subject: CN=892A1FC0CAFF65D892F6A2F6A7DB0FC04255C50F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:51:a8:b8:a6:88:e6:43:7d:bb:0f:55:94:
                    7e:61:c0:fd:b8:eb:89:12:68:d5:3c:4e:f3:16:54:
                    d1:39:c3:12:b0:bb:e7:e6:0d:6e:8a:e8:76:3b:67:
                    7c:2d:0c:9d:26:60:ca:89:95:58:7b:5b:fd:12:3e:
                    e5:7c:a1:f0:68:5e:91:29:29:18:41:66:a0:3d:dc:
                    f0:4e:cd:77:c2:09:05:d5:f3:c9:43:02:d4:b1:ba:
                    97:9a:b5:ed:a6:bb:d9:96:bd:df:50:57:0e:96:3d:
                    0e:ee:78:73:dd:54:9f:31:5f:35:d7:88:cd:fe:8b:
                    69:d6:73:02:e9:19:be:0a:4a:c9:87:e3:73:ec:a2:
                    b5:2c:3b:0b:5f:9a:77:d0:84:44:0d:41:56:87:78:
                    43:63:b0:a8:36:d6:d8:d7:64:df:8e:a1:9e:58:cf:
                    0a:7b:52:e9:cc:53:5f:8f:60:e1:c8:44:ae:0d:72:
                    5c:70:3b:da:d8:c0:85:37:79:13:3c:70:7c:b8:c1:
                    fc:ec:6c:f1:51:69:07:dc:c1:0b:09:04:42:0f:43:
                    a6:77:17:25:21:b9:a3:a7:46:f7:f4:81:24:94:90:
                    0d:53:3b:69:01:26:63:72:26:63:03:b9:af:07:f5:
                    68:8d:14:45:6c:7b:0f:d3:0f:05:81:df:0c:8d:fa:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2A:1F:C0:CA:FF:65:D8:92:F6:A2:F6:A7:DB:0F:C0:42:55:C5:0F
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/323830343a3366383a3a2f33322d313238203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:0f:8e:de:d9:ef:b9:fd:66:43:cf:1a:01:7b:90:21:cb:4e:
         90:4b:8d:d4:49:fb:c9:b4:1a:1d:7c:5b:8e:80:ab:5e:52:2b:
         21:92:b9:aa:19:15:78:c7:0d:7e:29:ad:dc:84:6a:cc:eb:1f:
         6a:e5:66:73:cc:d5:2c:3b:fb:a4:fd:6a:cb:45:bc:1b:83:a6:
         69:d4:75:99:21:3c:67:45:20:35:48:c8:af:8e:a7:8d:a1:4e:
         a9:0a:39:ab:a1:1c:00:55:fd:fc:91:1a:de:0a:0e:83:f5:0f:
         24:1f:cd:41:a3:42:dd:4d:ff:17:4b:fe:e8:b3:12:b5:46:ba:
         74:f6:e1:94:be:9f:5e:1a:1c:26:fe:bd:d6:f0:2c:04:13:40:
         35:da:63:90:04:5e:31:74:ee:f6:45:99:7b:0b:2a:b4:07:0c:
         43:b6:69:06:3d:9c:c5:b5:54:a4:53:f2:59:45:6d:75:b1:f4:
         59:25:46:db:a8:1b:64:14:b5:4f:51:68:26:57:8e:77:c2:d1:
         6b:55:2a:82:12:66:8b:59:cb:f5:8e:78:93:de:53:29:35:6d:
         d3:e3:84:28:75:e7:9e:2f:27:d4:ba:a3:de:2a:1a:f8:0f:27:
         1e:22:88:b3:7b:8a:1a:93:34:8d:34:3d:71:e0:21:86:f1:28:
         72:0d:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 12:41:45 2025 by rpki-client