Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a3a2f33332d3333203d3e20323633393037.roa
File:                     323830343a323738383a3a2f33332d3333203d3e20323633393037.roa (raw, json)
Hash identifier:          RuZ38j8d/OgwK7uQyM1EqKNZDmp/JsX5cQZ1tkkRg/Q=
Subject key identifier:   31:38:D4:20:A0:53:D9:F8:76:12:67:58:DE:73:EC:FB:57:24:B8:34
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       174FBB8D734A3012F881F0926A52972B3BEE13BD
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a3a2f33332d3333203d3e20323633393037.roa
Signing time:             Mon 01 Sep 2025 13:53:31 +0000
ROA not before:           Mon 01 Sep 2025 13:48:31 +0000
ROA not after:            Mon 31 Aug 2026 13:53:31 +0000
asID:                     263907
IP address blocks:        2804:2788::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4f:bb:8d:73:4a:30:12:f8:81:f0:92:6a:52:97:2b:3b:ee:13:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Sep  1 13:48:31 2025 GMT
            Not After : Aug 31 13:53:31 2026 GMT
        Subject: CN=3138D420A053D9F876126758DE73ECFB5724B834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d7:88:f5:3b:af:c0:6d:80:df:7d:00:a1:cb:
                    d2:c7:96:72:f1:cb:2b:d1:d7:90:29:96:aa:96:cb:
                    0e:08:9c:66:73:11:85:82:b4:6e:33:6c:08:c2:3d:
                    2a:56:c4:68:e4:42:06:c9:a5:50:52:fc:40:5e:94:
                    8e:e6:8e:a8:9b:11:a2:ec:b8:78:5c:75:ba:6f:93:
                    fe:54:a6:a4:9b:3f:62:99:45:51:60:62:75:c2:97:
                    b5:77:21:d1:59:31:ae:9e:46:b9:e7:66:0a:68:66:
                    6d:4e:5c:e9:d7:a5:ee:fc:0a:98:41:25:9f:bd:20:
                    ed:bb:80:d8:1b:a7:89:b8:93:e9:b2:24:c8:50:b4:
                    d9:dd:0f:b2:ac:06:5d:bb:b9:da:9c:c8:ca:a0:c9:
                    16:93:0e:eb:5c:a9:0a:81:5c:46:e6:18:b0:8d:f0:
                    89:d3:40:e5:43:5c:96:0e:6e:9a:a0:85:76:3e:6c:
                    a5:a8:3c:e6:db:5f:61:45:8e:5c:3f:67:92:4e:f1:
                    99:9f:2f:ab:0b:fd:9c:8e:63:27:9b:38:0f:15:7e:
                    97:2a:89:33:51:60:a0:5c:bc:10:84:49:5a:d7:4d:
                    ce:18:26:bf:15:1a:6c:92:8e:08:29:28:22:06:92:
                    78:65:c7:7b:8d:e5:87:9f:e1:22:c0:b2:a8:9a:27:
                    6a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:38:D4:20:A0:53:D9:F8:76:12:67:58:DE:73:EC:FB:57:24:B8:34
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a3a2f33332d3333203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788::/33

    Signature Algorithm: sha256WithRSAEncryption
         3f:81:97:78:e0:9b:97:eb:b0:e0:76:f1:55:51:b5:f7:57:c6:
         fd:18:21:51:53:fe:41:c5:28:bc:90:fa:da:31:25:31:bc:d7:
         77:1a:5b:9a:92:58:df:33:2e:5e:2a:58:cf:4c:31:76:ad:3a:
         3b:b7:49:aa:d0:f4:62:c2:29:dc:35:99:cf:9d:81:c6:3e:83:
         fa:5d:14:45:05:3c:02:e5:7c:95:4a:0d:07:ff:77:ab:06:9c:
         a1:f4:ae:cd:b8:aa:a2:e4:5f:85:02:38:d1:d6:13:37:60:c8:
         5e:1f:11:e9:ae:af:4e:1f:8d:f8:67:4b:23:b1:b5:98:25:fd:
         b4:72:61:78:9a:b0:03:84:f8:c7:ff:c1:e3:8f:8e:f4:7c:b5:
         1a:40:3a:f1:23:51:19:76:af:95:02:12:47:b3:b5:17:b4:70:
         b0:9e:de:f5:a0:10:0d:a4:77:17:37:e8:fc:10:4d:4e:a3:27:
         84:36:8a:0a:6a:8d:61:5b:62:bb:ae:b4:1e:7d:7f:74:cc:b0:
         9e:be:2d:af:bb:c9:65:d3:3a:c8:2b:62:dd:10:05:9b:69:ab:
         a0:9e:50:27:5e:e2:1b:ea:c6:21:8c:53:3b:68:c9:74:85:e4:
         28:76:17:73:17:83:b2:cd:66:65:50:42:ea:66:3e:0a:23:e9:
         b1:63:5a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:51:30 2025 by rpki-client