Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/323830343a386539383a3a2f33322d3438203d3e20323733343336.roa
File:                     323830343a386539383a3a2f33322d3438203d3e20323733343336.roa (raw, json)
Hash identifier:          BxvAZqsINc17TFdRXILJwTm+FG+N9YG1areIiru28HI=
Subject key identifier:   48:AB:3E:29:7E:46:29:7F:1D:14:1E:C2:51:31:97:83:46:6B:8A:0A
Certificate issuer:       /CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939
Certificate serial:       1895D701C39162361E62ADA657287362E8692FF9
Authority key identifier: 5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/323830343a386539383a3a2f33322d3438203d3e20323733343336.roa
Signing time:             Tue 16 Sep 2025 23:55:17 +0000
ROA not before:           Tue 16 Sep 2025 23:50:17 +0000
ROA not after:            Tue 15 Sep 2026 23:55:17 +0000
asID:                     273436
IP address blocks:        2804:8e98::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl
                          rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:95:d7:01:c3:91:62:36:1e:62:ad:a6:57:28:73:62:e8:69:2f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939
        Validity
            Not Before: Sep 16 23:50:17 2025 GMT
            Not After : Sep 15 23:55:17 2026 GMT
        Subject: CN=48AB3E297E46297F1D141EC251319783466B8A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bf:1a:04:88:00:e0:8b:19:94:cc:96:32:31:
                    5a:e3:a2:fc:82:22:ca:f7:f0:12:f9:3d:0d:c4:dc:
                    10:bf:4a:36:82:b9:f9:05:46:0f:06:34:9e:c0:23:
                    4d:6a:f4:66:c9:41:0d:09:7e:bf:32:55:68:67:c0:
                    2b:ad:13:17:32:0a:ca:9b:24:c7:62:c7:a1:cc:bf:
                    c4:a4:3f:0b:3b:f7:28:3e:42:9d:ac:a9:e9:f9:d6:
                    fe:46:f6:92:e7:ee:e4:79:41:4e:ee:5b:a7:14:30:
                    4f:76:02:1f:9b:c5:e0:05:5a:52:dc:5a:b7:f9:1a:
                    20:2c:be:dc:8d:b3:26:85:fb:c0:12:57:3a:9d:44:
                    9e:58:3e:e0:d8:c3:f3:1f:ff:ab:cc:25:30:a3:ee:
                    87:e2:73:bd:09:f3:9a:4a:36:10:b9:f7:ad:2f:d1:
                    f2:ca:f9:cb:0f:37:e3:d3:06:4c:8e:fc:98:03:6c:
                    29:90:ea:bc:69:bf:c7:2f:9d:98:d9:c5:74:e4:20:
                    f1:de:97:d4:29:2e:8f:4b:1e:7e:c1:d8:2c:b8:01:
                    0c:a8:84:b9:df:a1:50:46:fe:be:31:ee:b4:34:49:
                    31:d1:35:35:c4:7a:47:7b:58:d6:53:e1:ff:30:7c:
                    f3:3d:e9:fd:1f:5c:00:df:4a:f6:bf:b3:82:c3:fa:
                    07:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AB:3E:29:7E:46:29:7F:1D:14:1E:C2:51:31:97:83:46:6B:8A:0A
            X509v3 Authority Key Identifier:
                keyid:5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/323830343a386539383a3a2f33322d3438203d3e20323733343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e98::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:70:c9:36:2a:83:cf:ab:c9:b9:46:f5:30:9b:cd:34:db:bb:
         19:8f:60:88:c2:bc:78:47:ed:b1:bc:36:4a:80:35:39:f0:00:
         12:bc:34:39:33:56:05:e1:73:39:e2:5d:ae:57:40:87:c0:98:
         fc:5e:bc:ae:0a:57:50:fe:bd:c5:b5:1b:34:d3:4d:a5:d4:5d:
         a5:88:45:47:94:fb:36:de:0f:f7:11:30:4d:39:da:73:71:76:
         a8:81:1c:6c:18:b3:08:4f:70:45:27:00:ba:6b:82:95:c4:b3:
         b7:ac:0c:1c:a1:6d:c2:c1:46:96:24:41:3f:55:e9:5d:46:fd:
         80:b9:33:84:c2:8c:71:8a:63:60:8e:1f:7e:19:ff:7f:49:46:
         7c:43:e6:ae:b1:63:cd:ba:85:35:f1:9c:d5:41:c0:ea:77:1b:
         74:0a:93:42:1a:62:ce:e7:0c:69:42:cd:9c:f1:af:84:4b:56:
         46:5e:ad:10:c0:49:82:e4:33:bb:32:21:de:ae:79:07:c3:43:
         42:95:d3:2f:58:1e:23:1c:38:ff:7e:aa:47:17:c4:d0:69:1e:
         c4:9e:e1:27:71:14:89:f8:fd:41:33:e9:5a:b5:05:f0:50:a0:
         88:7a:fe:0c:bf:43:01:0c:33:3c:4c:49:f8:18:27:57:a3:5d:
         9b:4d:eb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:19:35 2025 by rpki-client