Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FENcm2J1dgX8XdpwvSutzeiCVTXmkjPz2pEm3rBXfDub/0/323830343a386438383a3a2f33322d3333203d3e20323733333633.roa
File:                     323830343a386438383a3a2f33322d3333203d3e20323733333633.roa (raw, json)
Hash identifier:          bX3xiNMC04DNilp/plrdfGdAQ7mLfBevaOSlAqhHK4k=
Subject key identifier:   BD:93:34:10:DF:A8:67:CD:E8:EA:19:F6:D3:AA:A2:F7:50:F5:63:0D
Certificate issuer:       /CN=54DF91EF68CE0001CACA48730953847B893152BE
Certificate serial:       2C394F3CADF7F76D1D95086E730D1585443A9E0E
Authority key identifier: 54:DF:91:EF:68:CE:00:01:CA:CA:48:73:09:53:84:7B:89:31:52:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54DF91EF68CE0001CACA48730953847B893152BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FENcm2J1dgX8XdpwvSutzeiCVTXmkjPz2pEm3rBXfDub/0/323830343a386438383a3a2f33322d3333203d3e20323733333633.roa
Signing time:             Thu 28 Aug 2025 14:35:13 +0000
ROA not before:           Thu 28 Aug 2025 14:30:13 +0000
ROA not after:            Thu 27 Aug 2026 14:35:13 +0000
asID:                     273363
IP address blocks:        2804:8d88::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FENcm2J1dgX8XdpwvSutzeiCVTXmkjPz2pEm3rBXfDub/0/54DF91EF68CE0001CACA48730953847B893152BE.crl
                          rsync://rpki-repo.registro.br/repo/FENcm2J1dgX8XdpwvSutzeiCVTXmkjPz2pEm3rBXfDub/0/54DF91EF68CE0001CACA48730953847B893152BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54DF91EF68CE0001CACA48730953847B893152BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 12:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:39:4f:3c:ad:f7:f7:6d:1d:95:08:6e:73:0d:15:85:44:3a:9e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54DF91EF68CE0001CACA48730953847B893152BE
        Validity
            Not Before: Aug 28 14:30:13 2025 GMT
            Not After : Aug 27 14:35:13 2026 GMT
        Subject: CN=BD933410DFA867CDE8EA19F6D3AAA2F750F5630D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:0b:e0:d4:db:ae:f5:79:de:b8:e8:23:cc:
                    28:92:b8:43:79:fe:90:fa:a2:df:87:f3:15:84:e2:
                    ba:28:08:d8:ae:93:61:29:63:0e:1a:e8:44:54:50:
                    e5:e1:0c:51:72:25:ab:a6:11:ab:88:48:b9:be:36:
                    78:42:23:66:3a:b9:86:cf:67:ea:dc:55:ec:b1:4c:
                    df:cb:3a:d0:5e:e3:a6:40:1b:34:6d:99:27:10:e5:
                    6b:c6:9e:0c:81:74:ba:98:ad:76:f2:8e:81:68:37:
                    73:1d:2f:bd:e2:b5:90:00:9b:15:7f:68:90:b4:88:
                    c5:d8:11:00:af:f5:60:5a:c2:a9:7f:e6:ef:c4:e3:
                    a0:8e:3f:db:47:7f:a3:24:22:fb:42:0c:28:26:02:
                    64:69:14:43:18:05:bb:e4:28:21:57:4d:9c:f3:5d:
                    14:2c:b0:b8:76:bb:05:06:f5:0e:1a:81:ed:68:28:
                    ab:4a:3a:31:80:4f:63:fb:78:44:63:45:28:13:be:
                    11:2e:4c:ca:fd:af:7f:ce:46:bf:31:3c:96:34:d0:
                    29:aa:69:f7:28:3a:dc:04:c7:5b:cc:c0:6f:93:0f:
                    53:1d:ab:1e:db:a7:cc:56:12:69:b0:87:45:4d:1a:
                    61:37:9f:aa:6a:c7:fd:53:71:15:a4:50:95:5a:66:
                    de:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:93:34:10:DF:A8:67:CD:E8:EA:19:F6:D3:AA:A2:F7:50:F5:63:0D
            X509v3 Authority Key Identifier:
                keyid:54:DF:91:EF:68:CE:00:01:CA:CA:48:73:09:53:84:7B:89:31:52:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FENcm2J1dgX8XdpwvSutzeiCVTXmkjPz2pEm3rBXfDub/0/54DF91EF68CE0001CACA48730953847B893152BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54DF91EF68CE0001CACA48730953847B893152BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FENcm2J1dgX8XdpwvSutzeiCVTXmkjPz2pEm3rBXfDub/0/323830343a386438383a3a2f33322d3333203d3e20323733333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:fb:71:96:ff:59:f6:9b:c3:5d:e6:d7:e5:64:58:32:d3:be:
         c5:5c:3b:60:32:e1:30:0d:e1:55:90:c0:22:8e:5f:77:f0:2a:
         bc:52:53:c3:64:c7:cd:8f:f8:44:da:45:64:83:8d:a7:ad:df:
         99:5f:24:38:69:cc:f9:18:1f:6d:db:47:2b:1e:4d:7d:26:db:
         87:3e:f1:3c:ae:f4:bb:15:83:cb:2f:23:46:40:46:ab:b5:87:
         d1:4d:c7:1d:b0:4a:20:66:fb:f4:79:60:64:ba:47:fb:1c:7f:
         94:56:52:da:8e:79:74:2f:e5:b7:2a:c9:1d:67:c0:62:9b:8e:
         7a:db:07:e9:10:3b:ca:2e:b0:85:c0:80:7e:a9:b8:56:3d:3a:
         ff:05:17:e2:e4:2c:94:16:dc:2d:e1:84:0b:6e:28:2d:a4:9d:
         2e:78:df:78:06:c1:72:9c:cf:6a:19:4d:36:ad:35:ba:dd:83:
         73:61:98:7c:7c:4b:9f:6b:45:4c:e7:a1:c8:4f:e6:88:69:f3:
         6e:42:d6:de:57:a1:cc:36:16:f7:9a:7f:3d:31:46:83:33:33:
         c7:13:76:ca:fc:a7:1e:51:30:d3:80:41:83:da:da:d5:26:08:
         eb:8b:38:6d:90:d7:48:1d:ca:e0:95:b9:21:96:67:e1:95:d6:
         5b:7b:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:39:13 2025 by rpki-client