Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a383030303a3a2f33342d3334203d3e20323636393438.roa
File:                     323830343a343563343a383030303a3a2f33342d3334203d3e20323636393438.roa (raw, json)
Hash identifier:          tacC+eCOzhvx85Uag6sw+jPfiKDmRu4FKkLPCO74p9s=
Subject key identifier:   AA:30:F1:FE:8F:C9:B1:DB:5C:48:DC:33:2A:87:A0:3C:41:DE:16:81
Certificate issuer:       /CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
Certificate serial:       632AF706011CF0A1188C407A6289B6B5290B4745
Authority key identifier: C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a383030303a3a2f33342d3334203d3e20323636393438.roa
Signing time:             Mon 08 Sep 2025 19:01:54 +0000
ROA not before:           Mon 08 Sep 2025 18:56:54 +0000
ROA not after:            Mon 07 Sep 2026 19:01:54 +0000
asID:                     266948
IP address blocks:        2804:45c4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl
                          rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 09:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2a:f7:06:01:1c:f0:a1:18:8c:40:7a:62:89:b6:b5:29:0b:47:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
        Validity
            Not Before: Sep  8 18:56:54 2025 GMT
            Not After : Sep  7 19:01:54 2026 GMT
        Subject: CN=AA30F1FE8FC9B1DB5C48DC332A87A03C41DE1681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:8a:a7:0a:1e:ea:96:e7:d2:6f:7c:96:9b:
                    4d:65:4d:d3:92:39:21:51:e3:c8:43:bd:f6:60:61:
                    c6:82:db:e6:9a:8d:45:1a:70:f7:d7:9e:2b:6f:fa:
                    8f:2d:84:41:6f:ad:86:af:5f:0d:6d:2b:ee:6b:db:
                    66:fe:29:16:0e:31:75:df:6e:45:18:4d:54:50:db:
                    ae:94:e0:60:8c:17:f6:a0:fe:6b:d3:79:9d:5a:6d:
                    fa:70:b8:98:19:f4:64:7d:29:ef:d2:c7:1e:33:5b:
                    37:37:e1:f5:11:12:4e:1f:04:32:4e:f4:d1:f7:78:
                    3a:2e:2b:08:e3:76:db:0f:f1:7d:0e:75:63:12:96:
                    4a:09:3f:6f:72:5a:eb:f3:0d:fd:02:d5:7f:18:55:
                    2d:8b:73:e1:79:84:fc:a7:b9:fb:26:7c:80:23:cb:
                    58:80:a1:e1:0f:30:d0:41:cc:2d:e5:75:92:ae:f5:
                    92:ea:2a:76:e1:f5:98:bf:4d:f8:f7:75:a2:54:26:
                    c0:63:a2:26:a4:4f:a9:69:02:49:eb:37:b7:9b:cd:
                    31:5d:b1:38:d6:91:72:da:41:c6:04:ee:ad:3a:4a:
                    b7:fa:ee:39:40:74:75:20:60:25:94:28:26:60:67:
                    10:7f:d3:ee:55:8b:13:60:9d:b3:cd:f0:96:bd:26:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:30:F1:FE:8F:C9:B1:DB:5C:48:DC:33:2A:87:A0:3C:41:DE:16:81
            X509v3 Authority Key Identifier:
                keyid:C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a383030303a3a2f33342d3334203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45c4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:d0:6e:78:64:56:de:0e:e8:ad:da:31:81:19:1a:1a:7e:95:
         ee:d1:97:e0:d5:e1:4e:e4:16:51:a3:d1:07:5d:d8:20:96:b5:
         d7:67:02:16:de:b7:13:c8:b6:b6:6c:19:31:09:c5:ef:19:c2:
         d9:87:9a:d2:8f:58:c5:2f:b9:f1:af:d9:65:da:01:54:f8:e7:
         01:a8:6f:6c:07:91:d1:f8:4d:5c:d6:a5:96:ff:c4:2d:61:91:
         b4:1f:52:08:ff:8e:0f:85:6e:fb:d8:e6:44:20:8f:11:2f:a8:
         bb:f0:62:3e:de:f8:3f:83:d3:d6:11:db:58:40:04:c4:b4:2e:
         20:a3:d7:1f:ea:07:7d:d2:4a:d1:96:00:58:87:4d:38:53:13:
         8b:59:67:3d:73:73:86:f5:28:97:1e:ce:ba:1e:65:7d:52:c5:
         78:3e:a3:c6:4d:14:28:1f:04:17:b9:21:e8:05:ae:da:6e:c8:
         96:01:06:76:72:87:00:23:32:d4:e7:6b:28:c0:e3:d7:eb:d4:
         3d:a4:2d:a8:65:9a:8e:29:67:23:7f:a9:6f:15:2f:be:7a:e9:
         f2:b1:bb:31:05:fc:04:ae:83:8c:87:7a:bf:0c:00:f1:9a:d1:
         33:48:cd:e5:44:61:c4:4a:99:75:07:1e:32:d2:fe:c3:22:68:
         2d:9d:bd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:04:46 2025 by rpki-client