Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/323830343a316337383a3a2f33322d3438203d3e20323633303431.roa
File:                     323830343a316337383a3a2f33322d3438203d3e20323633303431.roa (raw, json)
Hash identifier:          Dixwa65/5GpwICLpSZsVKPMV6Lhpd7ilnNfJgrzQNSc=
Subject key identifier:   29:F2:0A:33:55:B2:97:90:C8:3E:D6:1C:DA:72:7D:E7:B9:9A:E8:BB
Certificate issuer:       /CN=D63B953B67D71EF541CD1AFD8737C8FC5457D8B7
Certificate serial:       6DDAB55644B73CE10BCF399661456294C9B2374B
Authority key identifier: D6:3B:95:3B:67:D7:1E:F5:41:CD:1A:FD:87:37:C8:FC:54:57:D8:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/323830343a316337383a3a2f33322d3438203d3e20323633303431.roa
Signing time:             Mon 15 Sep 2025 20:32:42 +0000
ROA not before:           Mon 15 Sep 2025 20:27:42 +0000
ROA not after:            Mon 14 Sep 2026 20:32:42 +0000
asID:                     263041
IP address blocks:        2804:1c78::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.crl
                          rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 00:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:da:b5:56:44:b7:3c:e1:0b:cf:39:96:61:45:62:94:c9:b2:37:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63B953B67D71EF541CD1AFD8737C8FC5457D8B7
        Validity
            Not Before: Sep 15 20:27:42 2025 GMT
            Not After : Sep 14 20:32:42 2026 GMT
        Subject: CN=29F20A3355B29790C83ED61CDA727DE7B99AE8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ec:f7:83:47:e2:5b:70:ce:ea:42:ba:ed:be:
                    65:ec:b9:9a:21:b8:e5:7f:dc:cf:bd:e9:0f:63:67:
                    b0:ac:11:0f:9a:0c:2b:8f:08:73:42:04:fb:cd:ef:
                    8b:ae:64:d9:be:31:59:9d:a9:49:ed:86:5d:ed:2c:
                    3d:9c:b7:9f:18:4f:0a:d6:8b:df:8f:79:d7:45:55:
                    fe:79:6e:2f:18:0a:41:b4:86:23:e4:7c:81:a4:0a:
                    c0:bf:4f:34:fc:72:b8:03:db:3a:da:60:da:46:80:
                    fe:28:55:3a:b1:f1:90:cc:6e:b1:cd:e0:49:af:99:
                    a5:27:f1:54:24:91:36:85:d1:a3:8f:1c:16:0f:7e:
                    29:a6:ae:7c:fb:c4:60:43:cb:f0:36:2f:ab:fa:e8:
                    f7:a1:5b:81:0f:28:2f:c8:e1:e6:60:0c:b1:84:97:
                    45:03:5d:07:7e:aa:5e:76:07:d6:a6:08:ca:df:0a:
                    a2:e3:3d:7c:87:71:39:09:e8:71:c7:a3:3d:06:88:
                    56:ed:a8:d0:88:9f:5f:74:bc:c8:1d:f3:3b:ab:cc:
                    32:16:3d:ca:6c:0c:7a:aa:07:e2:77:4a:88:64:5c:
                    7e:8c:ef:dc:cf:ee:c6:0f:e6:72:c5:93:a3:a5:62:
                    55:c6:83:86:9a:23:9c:1a:20:4a:45:33:2a:ce:cf:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F2:0A:33:55:B2:97:90:C8:3E:D6:1C:DA:72:7D:E7:B9:9A:E8:BB
            X509v3 Authority Key Identifier:
                keyid:D6:3B:95:3B:67:D7:1E:F5:41:CD:1A:FD:87:37:C8:FC:54:57:D8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/323830343a316337383a3a2f33322d3438203d3e20323633303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c78::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:48:02:39:94:55:f1:6f:54:e3:7d:75:f5:38:5d:7a:99:bd:
         55:30:ad:21:03:a3:15:33:37:27:1b:c1:51:41:8b:2a:1c:2b:
         72:ec:d9:c2:08:49:db:f1:d5:5d:a4:5d:5a:a4:e6:23:9e:cd:
         a0:9c:da:51:7a:d9:c3:b1:f2:a1:53:d1:d6:83:b0:bc:64:b0:
         3e:27:37:81:37:17:14:0b:ca:23:d1:34:b9:e2:61:8a:d2:93:
         6e:c4:ff:d5:6d:f6:f3:8f:92:ae:6b:e7:59:e7:50:45:4a:99:
         41:d4:e1:6d:ea:8b:29:62:f4:f5:9b:f2:e3:4f:92:a0:14:f8:
         02:60:5f:cb:3c:04:75:ed:fd:74:c4:9d:53:ec:f0:12:54:87:
         1c:7d:19:44:6b:77:c2:af:f0:91:07:9b:61:95:d0:3c:15:a3:
         aa:c6:9f:97:33:e1:a2:c0:0b:83:5a:f9:b4:4a:62:f6:da:79:
         fc:99:aa:df:8d:0a:b8:a4:97:97:28:2f:ae:4a:09:52:a3:fa:
         5b:85:e9:e0:96:a4:56:84:c5:93:09:15:6e:8c:d3:51:ce:45:
         19:12:a5:8d:d6:5c:82:5c:0f:13:c2:1d:55:74:e5:36:72:64:
         a4:c7:55:1f:2c:bd:c5:47:01:7a:1f:d7:39:51:a7:47:00:1a:
         99:be:09:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:19:01 2025 by rpki-client