Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d313238203d3e20323636333433.roa
File:                     323830343a333635633a3a2f33322d313238203d3e20323636333433.roa (raw, json)
Hash identifier:          ipzMBs+Rs4DFsT/HMxtAXFhSG9cvTvWS0ELuDXeYdGs=
Subject key identifier:   B3:34:3C:8C:68:B7:A9:78:0C:B5:F3:FF:27:EF:C7:91:D6:2F:07:98
Certificate issuer:       /CN=56FD9BA722A710362629E1DF951F0608C33EA1E9
Certificate serial:       1BFF7A18158C9D2F96B7963500C5F9193D3E78AE
Authority key identifier: 56:FD:9B:A7:22:A7:10:36:26:29:E1:DF:95:1F:06:08:C3:3E:A1:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FD9BA722A710362629E1DF951F0608C33EA1E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d313238203d3e20323636333433.roa
Signing time:             Mon 15 Sep 2025 18:59:17 +0000
ROA not before:           Mon 15 Sep 2025 18:54:17 +0000
ROA not after:            Mon 14 Sep 2026 18:59:17 +0000
asID:                     266343
IP address blocks:        2804:365c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/56FD9BA722A710362629E1DF951F0608C33EA1E9.crl
                          rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/56FD9BA722A710362629E1DF951F0608C33EA1E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FD9BA722A710362629E1DF951F0608C33EA1E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ff:7a:18:15:8c:9d:2f:96:b7:96:35:00:c5:f9:19:3d:3e:78:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56FD9BA722A710362629E1DF951F0608C33EA1E9
        Validity
            Not Before: Sep 15 18:54:17 2025 GMT
            Not After : Sep 14 18:59:17 2026 GMT
        Subject: CN=B3343C8C68B7A9780CB5F3FF27EFC791D62F0798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:1a:f3:2d:95:e1:4f:0f:a8:5d:74:0f:26:
                    57:86:29:30:4b:77:de:72:1c:51:2b:fd:e7:8a:74:
                    fa:c5:fb:e8:1a:4e:de:d0:79:8b:d0:f8:64:32:ed:
                    5f:92:c5:7b:ec:f5:ab:25:40:4d:b5:1e:22:ae:3d:
                    01:80:39:3f:c1:97:92:ee:2f:ce:9a:e5:4c:10:b0:
                    bd:ab:cb:8a:07:0e:d4:36:40:b0:4e:cb:c9:dc:61:
                    c7:95:3d:fa:c7:e6:e6:40:31:09:a5:e4:bd:29:06:
                    72:93:01:2d:b9:be:4e:7f:a1:7b:30:01:5d:ad:82:
                    5c:c6:af:8a:a6:f2:c1:f1:d4:57:8d:14:56:b1:2c:
                    65:3f:a5:57:60:21:d1:76:4d:f0:a7:43:de:7f:63:
                    8e:d8:e6:5e:aa:30:f4:b7:b3:d6:bf:3d:de:c6:28:
                    6e:fe:8d:72:05:02:86:fa:04:7b:ff:5a:dc:0e:0f:
                    9a:99:5b:7f:7d:f5:46:d0:1e:ac:a1:f1:01:87:c2:
                    aa:b0:e1:ad:1a:46:b1:15:25:f3:cd:87:30:1d:0c:
                    ee:47:f6:a2:6c:8c:96:ae:c8:aa:33:ef:d8:d4:cd:
                    25:52:32:12:df:aa:8b:d8:d3:2f:0e:df:4d:71:c7:
                    8b:03:1a:8e:6a:e0:24:0b:42:8a:2c:90:3d:73:f3:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:34:3C:8C:68:B7:A9:78:0C:B5:F3:FF:27:EF:C7:91:D6:2F:07:98
            X509v3 Authority Key Identifier:
                keyid:56:FD:9B:A7:22:A7:10:36:26:29:E1:DF:95:1F:06:08:C3:3E:A1:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/56FD9BA722A710362629E1DF951F0608C33EA1E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FD9BA722A710362629E1DF951F0608C33EA1E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d313238203d3e20323636333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:365c::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:64:27:34:3c:76:36:57:69:63:07:08:fa:9d:a4:92:11:2b:
         7c:64:18:d9:08:ee:61:8a:04:f2:41:e5:9a:d3:04:af:91:30:
         11:d2:3c:1a:37:23:71:bb:39:80:d6:7c:27:45:0f:f8:d6:99:
         39:63:03:d8:f7:34:c0:50:84:d1:8f:d0:a8:df:db:41:0b:b9:
         c7:26:91:28:87:7a:e0:2f:2a:32:1d:b5:80:b8:c9:e7:3e:48:
         b6:f5:01:c3:df:2d:b1:37:4f:0b:c7:2f:21:2d:89:52:03:e8:
         e8:85:d5:15:a7:44:6d:74:61:43:a7:eb:79:f1:06:dd:3e:89:
         fa:18:b0:91:3c:da:6e:56:3f:d6:ba:37:e8:58:a1:f8:cd:b6:
         0b:9a:e8:d3:97:38:cd:ce:8d:ed:45:7c:98:3e:90:0b:e4:d4:
         ac:3e:65:d1:91:2f:ac:7c:de:8d:19:30:65:d3:75:d1:94:f5:
         28:91:7a:2d:26:52:f4:58:6e:b9:dd:c0:5e:ba:1e:d0:c2:17:
         4a:b8:48:ae:ab:a9:4a:b9:a5:62:ca:cc:a6:76:a9:c4:8a:32:
         bd:32:b9:49:27:84:df:d0:9b:f7:51:25:47:37:ca:a7:a1:99:
         a3:74:6a:5e:29:4e:2d:c9:90:81:eb:53:3f:ed:36:9c:51:f1:
         fd:f0:1d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:04:25 2025 by rpki-client