Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a3a2f33322d3438203d3e20323633393637.roa
File:                     323830343a323838383a3a2f33322d3438203d3e20323633393637.roa (raw, json)
Hash identifier:          d/IgDYHdsV1PtDbvoeSCDJK29eETaw5yo3HQyaXQ4qg=
Subject key identifier:   53:62:C4:C3:ED:87:ED:1F:C3:53:4C:59:62:E3:E5:18:1E:D9:01:E8
Certificate issuer:       /CN=B224D943E8065A18929A784B51D1633209C1CC91
Certificate serial:       7F0192ABF2837C06029A52EF7E8194D66686D7D7
Authority key identifier: B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a3a2f33322d3438203d3e20323633393637.roa
Signing time:             Tue 12 Aug 2025 16:58:46 +0000
ROA not before:           Tue 12 Aug 2025 16:53:46 +0000
ROA not after:            Tue 11 Aug 2026 16:58:46 +0000
asID:                     263967
IP address blocks:        2804:2888::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.crl
                          rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 12:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:01:92:ab:f2:83:7c:06:02:9a:52:ef:7e:81:94:d6:66:86:d7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224D943E8065A18929A784B51D1633209C1CC91
        Validity
            Not Before: Aug 12 16:53:46 2025 GMT
            Not After : Aug 11 16:58:46 2026 GMT
        Subject: CN=5362C4C3ED87ED1FC3534C5962E3E5181ED901E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:e7:f7:dc:ea:5d:ea:9a:f1:27:8e:f2:c3:
                    bb:42:70:56:88:2f:49:cd:e7:53:37:18:df:ad:92:
                    43:32:54:39:82:b2:ee:c7:01:91:cf:13:e7:8a:f1:
                    44:9e:ca:71:f1:27:80:0d:8e:c6:61:96:96:d0:73:
                    be:50:9f:77:b8:54:d0:b9:6e:1d:3d:f5:74:f4:e6:
                    9e:e8:24:73:f1:65:ac:1d:33:5a:18:54:d9:19:74:
                    de:b5:20:d7:24:46:86:0f:96:ec:53:36:e5:2b:32:
                    c4:45:d4:54:e3:b6:5f:28:c3:87:33:70:bd:86:ee:
                    56:8c:03:54:3f:23:29:67:6b:96:a5:b7:fe:10:03:
                    e7:2f:e4:3b:f7:ca:fe:24:18:dd:03:60:50:b2:f0:
                    31:9f:72:2f:3a:6e:86:d3:ef:e2:7a:e4:1f:79:05:
                    0b:21:1e:e0:0f:91:fe:52:c3:dc:ae:a5:87:cf:21:
                    91:f4:ed:76:13:f6:2e:cf:99:c0:6c:5e:1a:ec:16:
                    56:cf:25:1c:ce:c2:d2:6c:af:93:7f:22:35:5a:0b:
                    ff:f1:c7:56:1c:67:7c:84:91:da:7f:64:1c:a5:a2:
                    f5:06:90:a4:54:9a:0d:10:e5:35:64:3b:26:6e:a1:
                    e1:d6:16:cd:e3:84:5d:9f:30:bd:24:de:56:b4:41:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:62:C4:C3:ED:87:ED:1F:C3:53:4C:59:62:E3:E5:18:1E:D9:01:E8
            X509v3 Authority Key Identifier:
                keyid:B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a3a2f33322d3438203d3e20323633393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2888::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:9e:f9:34:0a:aa:7c:21:b3:0f:04:2e:c0:8c:66:84:f7:6e:
         e2:a9:89:32:f7:23:a7:29:7f:6c:a3:51:75:27:1b:6a:39:e5:
         03:44:54:e2:bd:c7:03:b8:0d:70:95:45:05:37:ed:e1:90:77:
         64:ba:9f:37:10:ae:2d:b5:f1:7e:56:7f:70:ea:8b:af:44:89:
         5b:01:8b:d5:63:74:64:b9:4b:fb:0f:e4:c0:53:99:b7:6d:c3:
         ca:c1:1f:82:2b:9c:55:a6:a4:fe:d9:34:e8:5b:f2:21:41:7c:
         22:1f:a8:40:32:cc:f7:a9:ed:bc:0d:60:b9:b6:a0:47:03:86:
         03:9c:ea:a3:3a:73:48:12:96:6a:b4:30:1b:1e:3e:05:c7:3a:
         58:f9:1b:ea:c4:4a:85:4d:19:5c:0b:db:81:7b:54:6f:bc:94:
         85:8e:82:bf:e3:c4:21:65:e3:47:98:10:4f:20:2c:e3:b0:86:
         da:af:09:fb:c0:e3:e2:3a:ba:5a:4e:3d:c8:ae:89:2d:02:b9:
         c0:9b:ae:99:51:12:70:3a:7b:49:fd:ca:d8:ff:fc:a6:69:11:
         55:87:31:28:9b:6a:a8:56:e5:3f:95:58:2f:18:d2:67:9a:62:
         36:df:66:aa:92:1c:fe:91:8e:ac:d4:e8:45:b8:0c:0a:0e:de:
         4e:2e:f6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:35:49 2025 by rpki-client