Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/323830343a313564633a3a2f33322d3332203d3e20323633343135.roa
File:                     323830343a313564633a3a2f33322d3332203d3e20323633343135.roa (raw, json)
Hash identifier:          gD/uTqSdPtm9QosJ55GS7zvJNr4LWx8U9WeokxNtb2Y=
Subject key identifier:   CA:0B:29:40:A6:E9:52:6F:3C:B1:76:92:E7:84:88:F3:58:A7:33:BD
Certificate issuer:       /CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
Certificate serial:       50B3A3C2C3597BFAB4AD523CCA1072D5F6442EA7
Authority key identifier: 0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/323830343a313564633a3a2f33322d3332203d3e20323633343135.roa
Signing time:             Thu 18 Sep 2025 18:48:45 +0000
ROA not before:           Thu 18 Sep 2025 18:43:45 +0000
ROA not after:            Thu 17 Sep 2026 18:48:45 +0000
asID:                     263415
IP address blocks:        2804:15dc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl
                          rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b3:a3:c2:c3:59:7b:fa:b4:ad:52:3c:ca:10:72:d5:f6:44:2e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
        Validity
            Not Before: Sep 18 18:43:45 2025 GMT
            Not After : Sep 17 18:48:45 2026 GMT
        Subject: CN=CA0B2940A6E9526F3CB17692E78488F358A733BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b9:b2:18:f7:c1:82:78:e6:92:2e:5d:5c:17:
                    db:91:76:08:8d:7b:18:8d:65:b0:98:57:24:f2:46:
                    37:fe:dd:9b:7b:65:bf:34:9e:03:f8:ca:49:42:ea:
                    ce:cd:d0:2f:d0:25:b7:76:42:ea:46:f6:49:0f:6e:
                    b8:3f:85:c4:68:7f:b1:4e:c1:35:80:fc:fc:92:c3:
                    d4:de:1a:99:95:09:a5:29:0f:65:28:bc:3d:90:11:
                    69:33:26:1a:64:3f:5c:7d:41:55:a7:b8:50:02:9b:
                    5d:8c:fc:7c:26:8b:6e:3b:b8:65:36:d1:3e:b9:0c:
                    a8:1f:86:54:17:f1:05:84:37:28:68:f7:ed:db:f3:
                    00:b0:09:80:8f:77:d1:15:a1:a9:0d:a4:ca:d2:c1:
                    38:64:42:7d:e7:d5:62:5a:e5:26:31:4f:f5:21:09:
                    05:92:f8:11:75:f3:9c:ab:06:71:66:43:d7:a6:4d:
                    18:c4:dd:b2:fd:3f:ac:48:ad:bb:f1:64:a4:42:97:
                    e1:ad:e3:e2:fe:62:95:e2:67:82:0a:f8:93:c8:fa:
                    5d:0e:c7:97:5b:b6:dc:5f:b5:e7:bf:43:12:cf:e8:
                    b3:29:b7:94:b1:e7:17:fe:b5:ed:9e:46:11:8c:7a:
                    51:08:0b:95:6c:42:10:e5:de:96:ab:9f:c7:d3:2f:
                    2c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0B:29:40:A6:E9:52:6F:3C:B1:76:92:E7:84:88:F3:58:A7:33:BD
            X509v3 Authority Key Identifier:
                keyid:0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/323830343a313564633a3a2f33322d3332203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:e0:ae:30:11:03:74:62:89:7c:90:57:31:a4:e6:65:da:da:
         d5:ab:8d:42:aa:c2:82:9a:8d:b6:f8:12:62:0f:7e:2f:d7:e0:
         ec:f7:c0:ea:d7:eb:16:6a:1b:82:3e:4a:0e:df:08:51:4d:06:
         4c:8c:dd:f0:e6:06:03:40:03:46:f7:20:70:06:3b:36:78:b1:
         c1:f6:33:4a:53:b7:91:ba:00:ba:7c:01:33:5e:78:e9:f5:0a:
         fd:8c:dc:3c:bd:6e:09:a4:4f:88:ce:09:86:fd:bd:fb:b7:9f:
         83:8a:74:8c:0e:96:2a:c2:c8:2a:b3:96:2a:09:80:ec:cd:75:
         10:c8:78:b6:29:e1:83:97:2b:e9:8c:a8:e0:2a:47:8f:ef:2d:
         04:8b:0f:78:4b:3f:69:cc:f3:c7:fa:76:81:08:5f:e5:3c:00:
         0a:63:aa:b5:17:12:d6:a8:db:47:b4:a3:65:61:e6:f9:34:a8:
         b6:01:32:80:54:39:aa:ee:95:80:94:4a:df:3d:96:6b:ad:83:
         df:b0:62:9c:84:cf:1a:46:d5:7b:b2:54:f3:03:8b:af:7f:07:
         ed:f8:9a:d6:73:c5:14:67:f1:8e:af:d3:33:d6:13:a8:52:17:
         85:74:93:af:3c:eb:f4:28:70:2c:3d:33:51:7e:6c:97:c4:c7:
         ec:72:dd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:07:34 2025 by rpki-client