Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/323830343a3562383a383830303a3a2f33382d3338203d3e20323632353335.roa
File:                     323830343a3562383a383830303a3a2f33382d3338203d3e20323632353335.roa (raw, json)
Hash identifier:          egzluC60J7WVsKGJOf/PfiFydrFE9X2LIodZaHvQ0UU=
Subject key identifier:   F0:21:B1:44:13:41:62:8E:48:FF:D7:16:DB:1A:98:29:85:74:0D:3F
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       4250BEF4D82B288ADB098AE5EEE4280D318D9793
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/323830343a3562383a383830303a3a2f33382d3338203d3e20323632353335.roa
Signing time:             Wed 20 Aug 2025 17:48:12 +0000
ROA not before:           Wed 20 Aug 2025 17:43:12 +0000
ROA not after:            Wed 19 Aug 2026 17:48:12 +0000
asID:                     262535
IP address blocks:        2804:5b8:8800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 18:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:50:be:f4:d8:2b:28:8a:db:09:8a:e5:ee:e4:28:0d:31:8d:97:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Aug 20 17:43:12 2025 GMT
            Not After : Aug 19 17:48:12 2026 GMT
        Subject: CN=F021B1441341628E48FFD716DB1A982985740D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:5d:53:bb:26:78:0c:b3:c6:a1:80:bf:f0:
                    46:8c:d3:43:17:cf:c6:99:c1:30:bc:54:28:50:31:
                    28:d9:82:be:5e:77:44:c8:34:22:8a:92:74:8f:15:
                    b5:99:ef:fa:23:e4:f2:3c:04:22:43:78:91:4b:1a:
                    2d:63:97:ec:40:c9:09:9d:99:dc:26:6e:ea:3c:d0:
                    35:8f:ec:bc:12:02:1a:93:1a:f5:46:27:68:68:16:
                    f4:1e:d7:75:a9:af:56:e4:7b:36:c6:62:8c:99:55:
                    5d:37:b5:2c:45:f4:b9:48:42:34:5c:57:f7:11:39:
                    73:8f:e6:22:91:f6:6e:eb:ad:32:b8:7b:39:dd:26:
                    08:3b:bb:c9:94:e1:dc:71:f1:44:a4:ed:9c:14:e3:
                    3e:11:86:36:f5:de:b3:4d:56:28:fc:0c:ca:1f:48:
                    cf:90:05:61:ff:42:ec:e1:94:c0:4c:a5:e5:4d:7b:
                    1c:02:49:1c:ef:73:d5:66:c1:f1:c4:29:29:63:84:
                    5c:6b:4c:c9:11:d9:a1:58:19:08:82:8a:28:8f:ee:
                    8b:c5:bc:e6:f9:31:9c:52:5b:fe:55:a8:b5:99:89:
                    ed:fb:99:fc:b9:7a:40:80:33:7b:13:a7:d8:74:48:
                    16:37:1c:b1:31:dd:12:1f:47:17:90:69:7f:70:b0:
                    75:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:21:B1:44:13:41:62:8E:48:FF:D7:16:DB:1A:98:29:85:74:0D:3F
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/323830343a3562383a383830303a3a2f33382d3338203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b8:8800::/38

    Signature Algorithm: sha256WithRSAEncryption
         8f:19:9b:71:6c:d6:51:f7:9e:5f:32:d7:75:b6:29:c3:76:89:
         30:10:e7:87:f4:db:a2:56:99:3b:24:e5:c3:21:84:92:a8:b4:
         6d:a3:72:c8:52:c2:29:5e:0e:3a:56:33:e6:c8:d8:90:a9:a0:
         72:cb:33:e1:1c:33:74:bb:53:1e:67:a7:8e:53:d0:c0:28:0c:
         c0:a3:84:48:fc:6e:46:1c:ea:15:f3:a9:52:f1:0c:68:cc:b3:
         94:82:10:c0:87:2c:74:4b:ca:e8:8b:95:3f:71:78:f4:08:be:
         33:ed:d2:9d:b1:d3:7c:7e:29:cb:15:6f:ff:65:96:93:cc:59:
         40:aa:33:75:26:44:ed:45:4c:a6:39:d9:35:17:37:ce:5a:c7:
         59:d9:d2:3b:c1:dd:33:97:96:41:99:72:69:e4:65:58:bd:58:
         21:5a:9f:75:e0:2f:1d:72:5c:33:73:c7:fc:d1:d8:f2:b1:f7:
         ac:03:c5:6a:a6:93:d7:7a:17:b8:78:e8:33:d2:96:b3:ff:5a:
         2f:16:bf:1c:87:d6:05:46:e5:df:80:a2:35:27:f5:be:11:75:
         42:f7:72:cd:33:21:bb:b7:dd:cb:e7:ff:68:50:fb:5c:2c:74:
         b7:99:d0:df:4b:63:4b:b9:04:a6:e0:b3:6f:6a:ad:53:0c:76:
         f7:13:4e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:12:48 2025 by rpki-client