Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a383030303a3a2f33332d3333203d3e20323636393438.roa
File:                     323830343a343563343a383030303a3a2f33332d3333203d3e20323636393438.roa (raw, json)
Hash identifier:          EELvldTr9qu1VBfqaEtVQ5BQw8+KaEBouTNwKYD5uXM=
Subject key identifier:   90:9A:76:8D:C9:19:3F:51:3D:FD:AF:96:4C:40:C0:71:6E:BB:E0:F4
Certificate issuer:       /CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
Certificate serial:       5EC8CF3B1727168A8D9ED954F2FEE4D8006DD9EE
Authority key identifier: C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a383030303a3a2f33332d3333203d3e20323636393438.roa
Signing time:             Mon 08 Sep 2025 19:01:57 +0000
ROA not before:           Mon 08 Sep 2025 18:56:57 +0000
ROA not after:            Mon 07 Sep 2026 19:01:57 +0000
asID:                     266948
IP address blocks:        2804:45c4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl
                          rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c8:cf:3b:17:27:16:8a:8d:9e:d9:54:f2:fe:e4:d8:00:6d:d9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
        Validity
            Not Before: Sep  8 18:56:57 2025 GMT
            Not After : Sep  7 19:01:57 2026 GMT
        Subject: CN=909A768DC9193F513DFDAF964C40C0716EBBE0F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1c:a5:ab:fb:50:85:12:fc:a1:5c:4b:93:07:
                    cc:b2:83:6c:80:f9:34:11:38:90:eb:ae:cf:04:77:
                    20:25:47:3c:c7:2c:a0:6e:8a:8d:54:26:ba:a4:33:
                    41:33:6f:bb:c5:0d:09:1b:a2:63:3c:c1:89:2c:67:
                    e4:92:d4:08:00:7f:c6:aa:3f:8b:c9:75:6d:d7:da:
                    23:e1:f2:65:2f:5e:20:80:8f:38:c3:eb:38:63:3b:
                    02:59:fd:ee:1f:4d:63:b4:9c:bd:a4:cc:7b:d4:92:
                    35:e5:99:a8:5c:55:1a:99:c1:b1:fa:0e:5d:6a:16:
                    cb:21:0d:d8:3f:7a:ff:d6:5c:ae:7c:bf:b8:a8:6a:
                    90:8c:b7:36:c9:a7:86:f9:eb:d3:c7:99:44:0d:2b:
                    d9:4b:49:c3:02:bf:66:84:55:7d:54:b1:4c:6f:d1:
                    69:40:f7:d9:98:2b:b9:c9:de:5a:1c:7e:9e:5c:ee:
                    a5:da:46:be:c4:fa:a1:d6:42:1f:b9:e9:7e:4a:74:
                    65:81:a9:22:1b:e9:3b:ee:34:af:09:09:84:0a:ee:
                    2a:c8:21:11:d1:f8:d0:29:99:e4:98:16:04:d3:73:
                    ff:92:3d:64:02:cf:29:f7:4f:01:62:4f:5c:64:7f:
                    1f:af:83:3c:25:1f:21:30:5d:73:9c:1e:78:24:f3:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9A:76:8D:C9:19:3F:51:3D:FD:AF:96:4C:40:C0:71:6E:BB:E0:F4
            X509v3 Authority Key Identifier:
                keyid:C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a383030303a3a2f33332d3333203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45c4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:86:d4:fc:b6:94:45:b6:3b:4d:92:77:fd:c0:64:14:33:93:
         56:1b:3c:02:83:2a:89:e4:ec:3f:7f:97:2e:dd:fd:c0:3c:b6:
         c4:43:d3:9c:48:e0:3c:e7:06:f6:af:23:b7:55:70:c2:38:a5:
         30:2c:b5:75:88:f9:21:67:e1:ae:15:d2:5d:fa:45:75:7c:cc:
         60:5a:fe:a2:cb:5f:23:17:55:39:f6:79:e2:a8:4e:69:d3:bc:
         a2:23:20:12:e3:5a:bc:c6:a9:44:64:be:a2:ef:c3:2e:5e:6f:
         b5:0b:19:cb:53:93:1d:da:0f:ae:27:64:a4:7c:b2:3f:83:4a:
         7b:41:46:a2:a0:53:f3:4c:65:0e:31:a6:ce:59:bc:ca:f0:a8:
         78:00:b1:29:97:30:ea:c4:f9:a3:de:3c:8f:0b:a9:fb:60:b8:
         7f:40:70:60:76:10:19:f4:22:d0:78:cf:f0:3c:53:5a:40:9e:
         d4:93:7a:c9:ec:21:74:96:4c:b0:03:37:52:34:3b:7d:52:09:
         ef:50:3f:c7:d5:de:92:59:b7:0b:9a:bb:45:af:88:5a:ee:4b:
         ec:83:c2:3d:db:80:73:dc:04:55:2f:07:cd:d1:6b:2f:b3:b3:
         7d:7d:4f:2b:c7:e9:91:59:e2:87:4a:47:67:43:ae:75:ed:24:
         8c:92:da:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:52:45 2025 by rpki-client