Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a313a3a2f34382d3438203d3e203238313238.roa
File:                     323830343a333435383a313a3a2f34382d3438203d3e203238313238.roa (raw, json)
Hash identifier:          EXH4TUUXUGv2EZBXe9EQHkZX9tJsCYrqG1D5VuiWD4k=
Subject key identifier:   66:CB:E6:42:2B:DF:AD:54:4B:B2:61:00:50:C0:B4:9E:80:27:CA:6C
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       22F939530C95B39AB8B4D786426EE57BAB7E1BCB
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a313a3a2f34382d3438203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:32:30 +0000
ROA not before:           Fri 12 Sep 2025 14:27:30 +0000
ROA not after:            Fri 11 Sep 2026 14:32:30 +0000
asID:                     28128
IP address blocks:        2804:3458:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f9:39:53:0c:95:b3:9a:b8:b4:d7:86:42:6e:e5:7b:ab:7e:1b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:27:30 2025 GMT
            Not After : Sep 11 14:32:30 2026 GMT
        Subject: CN=66CBE6422BDFAD544BB2610050C0B49E8027CA6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:0f:18:9d:2d:5f:45:25:99:5a:5a:c0:7d:
                    63:e1:a8:45:de:a3:00:69:18:fc:8b:0c:f7:c2:4f:
                    27:52:09:6b:20:ea:3b:87:a0:79:0c:89:e2:ec:b4:
                    dd:91:dd:95:c5:5a:4b:8a:c4:29:65:f9:1b:97:73:
                    a9:05:43:de:92:f1:8b:dd:3c:e0:73:5a:b3:42:83:
                    22:25:57:17:f1:e7:4b:0b:f8:76:85:bc:31:fd:84:
                    c5:54:86:bd:bd:07:e0:be:51:cc:ba:0f:7a:43:07:
                    27:28:c4:a0:ab:54:32:b3:0b:a4:6f:89:42:4e:4a:
                    b8:f8:67:d1:6d:15:ce:27:6a:84:cc:3b:55:bd:55:
                    23:58:7d:4f:06:7f:6a:9c:e5:38:b1:c2:95:62:de:
                    8c:7f:a2:f2:1a:2a:32:ff:a6:b3:6a:07:24:bd:38:
                    b7:e9:b7:3f:98:e9:fe:5a:0c:fe:47:c4:b8:e3:24:
                    5c:1a:c6:b5:a8:25:12:36:2c:dd:c1:8e:5a:f4:8c:
                    91:a0:97:e6:e2:1b:88:a3:91:0d:4c:27:43:d0:23:
                    aa:f8:5a:25:81:0e:ac:8b:a4:b2:d9:c4:83:6b:17:
                    08:6c:61:ac:24:f4:6b:ef:19:60:91:0d:d2:0c:90:
                    cc:0d:3d:e5:5e:b0:03:c4:a1:43:fa:2f:71:d8:c6:
                    79:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CB:E6:42:2B:DF:AD:54:4B:B2:61:00:50:C0:B4:9E:80:27:CA:6C
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a313a3a2f34382d3438203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3458:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:ed:6e:bd:b8:c5:6c:4e:ed:1f:b6:24:fa:de:26:68:9e:8b:
         92:81:c2:dd:4f:00:d5:cc:2c:4f:c3:47:83:68:08:f0:2c:cb:
         25:96:30:30:46:e5:af:c6:44:bb:32:27:87:44:51:30:3f:ee:
         fa:20:68:2d:99:28:a0:a7:4c:f1:f0:02:30:c9:2f:9b:08:6a:
         6d:3b:fb:44:d3:47:b1:e3:2c:04:ec:ab:7a:d6:75:77:82:57:
         9a:c5:11:6a:ae:9a:74:66:9e:a7:ca:2e:2b:d6:e9:3b:13:bd:
         b8:16:b7:fd:77:0b:54:ac:6e:8d:fb:bb:62:b7:4b:9a:5b:0c:
         7b:ca:e5:47:6d:f9:20:23:96:96:f9:14:c5:23:6c:2c:8e:19:
         a1:24:c2:b2:64:b0:87:2c:a5:55:6f:7a:bb:c8:43:bc:11:d1:
         e2:d1:16:e7:ab:0c:1a:e1:86:f3:9e:ea:47:6a:7c:8a:60:df:
         6a:d1:b7:89:02:5a:91:12:2c:50:5d:cd:29:f5:7e:4f:33:bd:
         94:c3:4b:d4:ca:a7:f2:6b:70:70:73:09:0c:9e:6b:64:c0:d3:
         bb:2b:57:d1:da:20:5f:fe:54:2a:61:fe:48:46:c6:54:73:06:
         62:62:e3:aa:14:8f:8b:84:08:5d:b8:4f:ed:37:00:7f:1a:d0:
         54:7f:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:26:49 2025 by rpki-client