Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/323830343a3638303a3a2f33322d313238203d3e20323632353839.roa
File:                     323830343a3638303a3a2f33322d313238203d3e20323632353839.roa (raw, json)
Hash identifier:          U5Pe0o4Fc/Ye1D89bTP4xhgYJEaCQlKByrncH5a/sHE=
Subject key identifier:   8A:9B:CE:FB:39:83:74:74:50:B9:78:FF:1E:C3:37:84:78:FF:41:F0
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       43E85249534D474820ACD669913B76272C813A9B
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/323830343a3638303a3a2f33322d313238203d3e20323632353839.roa
Signing time:             Thu 28 Aug 2025 14:47:41 +0000
ROA not before:           Thu 28 Aug 2025 14:42:41 +0000
ROA not after:            Thu 27 Aug 2026 14:47:41 +0000
asID:                     262589
IP address blocks:        2804:680::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e8:52:49:53:4d:47:48:20:ac:d6:69:91:3b:76:27:2c:81:3a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:41 2025 GMT
            Not After : Aug 27 14:47:41 2026 GMT
        Subject: CN=8A9BCEFB3983747450B978FF1EC3378478FF41F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:66:f3:eb:73:2b:d9:e3:2b:de:06:bd:4e:
                    ca:83:23:2e:c8:da:58:e4:a8:99:15:ae:6b:f6:22:
                    3d:fd:cd:3e:47:b8:e1:03:90:fe:4f:85:ea:bf:aa:
                    27:e4:85:36:da:37:6a:b5:21:63:59:a3:49:6b:03:
                    b7:4d:56:03:c4:13:de:f0:ef:0c:79:8e:15:d9:03:
                    a5:3f:9a:41:f9:fd:f9:36:36:a1:16:4e:ba:35:8d:
                    9d:ad:68:e2:f7:7a:59:08:14:52:62:81:91:19:73:
                    be:a0:86:5b:01:31:0f:04:85:99:b1:93:b8:6a:e5:
                    ac:8b:74:fd:4f:38:14:68:b5:17:16:09:ba:c1:e6:
                    25:b3:33:da:be:2f:4a:40:77:19:b7:2d:de:eb:40:
                    13:31:f0:5d:0e:1b:11:55:af:b9:86:3e:45:ee:23:
                    09:18:aa:f6:94:d9:50:02:ec:0b:cf:65:bd:02:e5:
                    8c:1b:1d:68:0c:67:d5:f5:23:b8:3d:b6:2b:f1:e3:
                    f9:99:ba:7c:5c:77:97:bf:71:da:42:b5:1a:d7:f2:
                    c7:87:28:99:f4:86:83:2b:f1:39:fe:99:cb:0a:c4:
                    af:82:4d:22:84:2a:f7:5f:d5:81:9b:a3:43:8c:4f:
                    08:5d:cc:16:a0:67:43:bf:4d:0c:5d:c8:bf:63:34:
                    d5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9B:CE:FB:39:83:74:74:50:B9:78:FF:1E:C3:37:84:78:FF:41:F0
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/323830343a3638303a3a2f33322d313238203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:680::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:e9:a4:43:23:0d:fe:5a:66:3a:fb:2c:74:dd:6c:34:5d:d1:
         e5:66:b5:40:63:bc:36:d3:ef:ef:bc:62:40:e1:c6:a5:fc:02:
         3b:18:9d:e2:a3:7e:d4:fd:9e:01:ee:3c:b7:7d:05:11:4b:9a:
         87:f2:12:ba:33:6b:21:86:41:89:c0:f0:02:10:65:cf:64:e6:
         ab:da:a6:39:56:a8:52:6a:4f:67:d3:3e:b0:08:ac:96:c0:95:
         99:18:4e:80:5d:6d:46:a3:ce:e7:37:7b:54:ee:28:c6:66:b1:
         e2:5a:07:14:62:56:88:36:c7:a2:c6:46:c0:b3:1d:5a:98:4c:
         64:5f:ee:8d:7e:73:2f:67:17:d3:4e:39:69:00:08:be:fc:51:
         17:a8:00:bf:7d:44:6e:ab:cd:fb:e8:5a:33:cf:45:42:c0:ae:
         c1:4d:f2:8f:52:9e:ac:ce:dd:0b:5b:82:1b:e7:37:26:6a:4b:
         b8:cc:94:d4:db:70:d7:12:f5:99:5d:ef:33:ec:fd:60:b5:cd:
         5f:f6:49:87:fb:ae:2e:cd:c6:4f:96:ac:ef:ba:16:4c:e5:98:
         a7:ab:8b:46:ed:7d:5e:a3:d7:37:ca:17:e6:bd:bb:c0:cf:2d:
         43:57:5b:20:90:e5:bb:73:09:22:91:f4:7a:37:34:39:c8:72:
         a0:1c:7c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 12:41:41 2025 by rpki-client