Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a3a2f33322d3332203d3e20323633393037.roa
File:                     323830343a323738383a3a2f33322d3332203d3e20323633393037.roa (raw, json)
Hash identifier:          yJlTzFO8oOZiZG6cT7pts1W6MYNESiXFbFz1He7VnOs=
Subject key identifier:   31:6E:3C:40:A5:70:78:D7:09:C1:AB:5A:DF:FD:99:90:CF:9A:32:03
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       30FDA12F74DBE1F396AEF942BA5DA36DC37CA557
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a3a2f33322d3332203d3e20323633393037.roa
Signing time:             Mon 01 Sep 2025 13:53:28 +0000
ROA not before:           Mon 01 Sep 2025 13:48:28 +0000
ROA not after:            Mon 31 Aug 2026 13:53:28 +0000
asID:                     263907
IP address blocks:        2804:2788::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fd:a1:2f:74:db:e1:f3:96:ae:f9:42:ba:5d:a3:6d:c3:7c:a5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Sep  1 13:48:28 2025 GMT
            Not After : Aug 31 13:53:28 2026 GMT
        Subject: CN=316E3C40A57078D709C1AB5ADFFD9990CF9A3203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:63:e0:c6:ab:8d:27:5d:1a:f9:cb:27:42:
                    dd:e2:1c:2a:12:5d:91:63:03:08:30:98:bf:8a:cc:
                    3d:d8:0c:79:31:46:8f:67:9b:61:68:15:6e:3c:24:
                    80:43:93:62:c8:b1:d1:ea:54:9f:9c:da:7c:94:e7:
                    b6:09:a8:60:2a:5d:ac:fd:52:ce:ce:62:f3:b0:75:
                    61:46:5b:d7:e3:3f:c1:00:a7:40:89:8d:67:29:fe:
                    1e:16:ef:74:1a:58:7e:ee:9b:9c:57:24:f5:9d:3e:
                    34:3d:53:52:71:50:21:ee:51:6d:da:f0:e1:a8:ca:
                    3d:bc:0e:4c:0a:f4:02:84:54:c0:1f:a2:b6:a3:3d:
                    37:fe:36:9a:a8:cc:9b:b3:88:04:64:1e:a8:3e:61:
                    e1:09:0e:ab:b0:1b:c4:4d:24:04:37:a1:36:f6:6d:
                    5d:cf:f2:bf:34:23:63:f6:a4:a8:14:18:41:cf:fa:
                    41:80:43:80:9b:54:b3:a5:0f:38:ab:79:aa:45:d1:
                    a0:97:e7:2d:8d:41:f8:a6:e1:35:50:57:2b:0a:b1:
                    d5:24:f9:33:b5:0c:a9:75:e1:e8:fc:b0:78:4b:d5:
                    73:95:b3:ae:c5:e8:d6:ae:84:21:5e:ee:0f:97:1c:
                    be:0f:54:1b:ea:06:41:10:0e:2a:09:43:f6:ea:03:
                    42:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6E:3C:40:A5:70:78:D7:09:C1:AB:5A:DF:FD:99:90:CF:9A:32:03
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a3a2f33322d3332203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:76:5f:d1:d6:1c:0d:e5:02:7d:f7:f9:f1:60:97:3b:83:4d:
         26:db:f8:c9:e6:d4:9d:d8:93:d2:8d:15:de:39:46:a3:6b:6a:
         a2:3b:9c:aa:49:ed:a4:44:a1:e7:65:c8:d0:d9:d6:15:80:5d:
         db:37:47:f2:a0:04:6a:50:78:30:b6:3a:b9:f6:56:d7:d5:d1:
         86:14:b3:f7:01:c9:cd:a3:11:28:9d:14:4f:3e:e3:44:af:6d:
         b0:61:f9:7e:7e:0f:21:29:6b:a0:36:be:4f:b3:a0:1d:4d:78:
         66:ff:20:e0:6a:8d:f1:03:da:e5:22:a1:18:b8:78:23:5f:e9:
         e8:e5:fa:a5:ff:dc:2b:dd:03:1c:6f:b9:73:ae:e4:9d:e6:82:
         ef:6e:f1:a6:05:91:95:cb:c0:bf:39:c0:6e:96:61:68:0d:75:
         60:6c:da:83:8d:d3:56:9e:85:f6:06:07:eb:79:c0:d2:97:00:
         8a:ee:5e:f6:67:2e:04:11:6a:86:60:5c:6a:4d:b2:14:de:23:
         6d:d9:04:75:8a:a8:d3:9b:00:d2:0a:81:26:23:57:dd:9d:66:
         ee:3c:f5:96:08:d8:a4:da:f6:17:fe:fb:e5:af:67:a6:ef:8d:
         4f:e6:9b:c8:5e:fa:5b:50:70:07:a5:05:1b:8b:57:29:28:59:
         e4:51:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:51:32 2025 by rpki-client