Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a3a2f33322d3332203d3e203238313238.roa
File:                     323830343a333435383a3a2f33322d3332203d3e203238313238.roa (raw, json)
Hash identifier:          BWCAlVYmg3SlR0jneavWxIfp9sgvsx5AhsrBZh8MI3A=
Subject key identifier:   6B:98:A0:48:71:55:CA:CE:B1:4F:BD:6A:0A:2C:7B:8D:C4:0F:CE:37
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       2BB27D12F60635FA8F2F997A420DB936A6138D11
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a3a2f33322d3332203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:32:27 +0000
ROA not before:           Fri 12 Sep 2025 14:27:27 +0000
ROA not after:            Fri 11 Sep 2026 14:32:27 +0000
asID:                     28128
IP address blocks:        2804:3458::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 06:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b2:7d:12:f6:06:35:fa:8f:2f:99:7a:42:0d:b9:36:a6:13:8d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:27:27 2025 GMT
            Not After : Sep 11 14:32:27 2026 GMT
        Subject: CN=6B98A0487155CACEB14FBD6A0A2C7B8DC40FCE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:cc:3a:75:16:81:9c:2f:2e:4b:53:57:66:
                    61:2b:d4:40:2f:fa:26:a2:d2:03:29:64:1a:4f:47:
                    c6:0c:4c:70:f9:29:00:64:79:23:49:41:d3:8b:28:
                    bd:84:7b:4e:8a:8d:f8:cc:a2:63:13:7d:c4:85:50:
                    6a:6a:9d:f0:3f:5a:ec:08:38:d2:d8:bb:6a:c1:eb:
                    1f:6b:ca:1a:b1:44:31:ea:72:3e:6c:76:09:f3:62:
                    d2:1b:5d:2a:03:a9:65:5a:39:70:a2:59:87:91:8c:
                    ec:a2:47:db:6f:ac:1d:64:56:ee:69:05:cc:78:2f:
                    60:10:48:11:f5:03:7f:ea:10:38:fd:2d:e9:80:ef:
                    36:7c:df:04:62:14:99:5e:a9:68:59:63:00:28:a8:
                    a4:b2:5e:25:f3:c5:72:01:64:33:b2:be:91:b9:a5:
                    45:eb:95:b3:fd:15:9c:4c:e9:7c:da:a3:cf:68:5a:
                    14:39:68:05:bd:33:05:bc:9f:9f:1b:8a:1f:34:2d:
                    8d:e3:6e:63:6b:89:16:81:b2:7e:9e:95:4f:59:00:
                    de:45:03:a5:a0:a4:f9:76:15:95:c9:a8:b2:92:14:
                    2f:64:1d:91:2e:8d:c8:6b:85:99:ab:37:a1:91:36:
                    4f:3c:ef:db:07:cf:d1:df:e4:8e:d9:c7:fe:77:f9:
                    8a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:98:A0:48:71:55:CA:CE:B1:4F:BD:6A:0A:2C:7B:8D:C4:0F:CE:37
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a3a2f33322d3332203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3458::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:ce:f8:cb:90:b6:8e:58:43:6a:e2:78:a9:b4:64:3b:1b:0f:
         01:df:5a:52:3c:4a:dc:8e:c9:5b:da:d1:d6:3b:aa:ad:26:83:
         1c:eb:20:f9:f9:15:0e:00:26:d1:58:e2:48:a4:a2:d9:02:b1:
         ca:74:87:54:9c:a4:72:69:58:fc:dd:22:8d:92:e2:24:7f:4f:
         1e:f7:55:18:d9:de:fc:60:3a:09:51:34:b4:20:84:e1:3e:b1:
         1a:ae:c2:62:cc:e0:ae:cd:5d:de:76:7d:84:31:54:57:32:6a:
         18:6d:23:46:ab:44:2c:e6:2d:cc:4a:bf:ab:06:c5:8b:c1:5f:
         a2:4e:95:98:8b:87:4a:b1:13:55:26:32:b3:a9:f3:1a:7e:3f:
         7c:65:b1:4f:42:d2:33:51:e7:30:21:45:ca:08:af:19:85:e7:
         b8:80:a2:c0:c7:23:12:51:01:62:d4:41:7d:dd:62:28:59:ac:
         3d:69:44:94:5a:87:24:58:bf:00:5e:8f:c8:44:67:54:e3:7a:
         ca:c8:05:4b:6f:a0:92:8b:23:82:ff:9f:1b:18:7d:84:22:9d:
         5f:3c:c4:dd:f9:5c:ae:20:a6:67:d0:53:ec:9a:12:c5:c1:94:
         91:b3:78:53:f9:bb:7f:2d:18:e6:6f:14:af:ea:6f:8c:59:a4:
         e4:ec:e2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 07:20:28 2025 by rpki-client