Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a3a2f33342d3334203d3e20323636393438.roa
File:                     323830343a343563343a3a2f33342d3334203d3e20323636393438.roa (raw, json)
Hash identifier:          czG7xYN+h9H4pmkr1KZyvc1Cb1GJ2meKWUlFI8YEWo4=
Subject key identifier:   0F:FF:71:7A:98:01:0D:36:47:A5:B6:7D:35:89:29:04:7D:C0:16:1B
Certificate issuer:       /CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
Certificate serial:       506AB7BCCF210930F975001A85FB6A0A3FC0D8F3
Authority key identifier: C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a3a2f33342d3334203d3e20323636393438.roa
Signing time:             Mon 08 Sep 2025 19:01:55 +0000
ROA not before:           Mon 08 Sep 2025 18:56:55 +0000
ROA not after:            Mon 07 Sep 2026 19:01:55 +0000
asID:                     266948
IP address blocks:        2804:45c4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl
                          rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6a:b7:bc:cf:21:09:30:f9:75:00:1a:85:fb:6a:0a:3f:c0:d8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
        Validity
            Not Before: Sep  8 18:56:55 2025 GMT
            Not After : Sep  7 19:01:55 2026 GMT
        Subject: CN=0FFF717A98010D3647A5B67D358929047DC0161B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:c6:60:31:0c:0d:ce:ed:8a:2e:35:ec:bb:
                    63:3d:41:45:5e:79:99:b5:6c:2d:42:e0:49:46:3f:
                    fe:12:41:0f:b2:a6:7a:45:26:0a:8a:09:4a:a7:f0:
                    2c:18:56:15:dd:a9:c2:5a:52:64:39:ec:20:eb:57:
                    91:7e:3f:4f:57:09:20:64:50:cb:71:fc:cb:1b:3c:
                    82:56:5d:60:77:4c:bc:85:6d:e8:d9:be:8d:2f:30:
                    bc:42:b2:82:1f:cf:2b:b4:38:89:f6:07:d4:ff:12:
                    ef:ec:9d:6e:92:d7:7e:5c:4a:2a:3a:04:81:a4:86:
                    b1:55:1b:73:e8:48:1d:57:6d:36:0f:93:86:5f:8a:
                    7c:64:fa:65:d4:aa:bb:c8:23:0d:fe:49:4e:a8:f5:
                    d0:d0:b1:f9:8f:be:86:e6:a1:e8:13:0e:9a:77:db:
                    d9:e8:cd:64:23:9b:d0:1d:af:7b:11:5d:0e:d0:f8:
                    a8:66:e2:b9:e3:4f:4f:14:59:99:16:18:91:77:00:
                    be:fa:90:99:67:74:48:4a:7d:a4:d6:94:c6:74:a5:
                    83:52:f4:90:72:28:ca:1d:c9:70:b3:9e:08:9a:73:
                    97:31:32:09:9b:d7:f6:30:6a:24:9d:9d:0f:e0:c9:
                    3b:91:01:64:36:1e:25:fd:72:0e:be:7b:59:70:f6:
                    74:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FF:71:7A:98:01:0D:36:47:A5:B6:7D:35:89:29:04:7D:C0:16:1B
            X509v3 Authority Key Identifier:
                keyid:C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a3a2f33342d3334203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45c4::/34

    Signature Algorithm: sha256WithRSAEncryption
         ba:4f:5e:65:e7:83:b7:92:3d:8c:28:d9:c2:68:88:e3:c3:e9:
         70:29:52:fb:54:f3:58:e6:f6:52:48:70:9e:2b:8b:12:ce:ff:
         13:6f:24:b4:24:4b:fe:a8:d6:bc:fc:94:b0:d5:68:b9:d3:af:
         86:8d:4b:03:c6:54:22:48:cf:93:39:f7:81:5d:cb:33:7c:21:
         2e:25:38:d9:6f:b9:a7:bc:0d:20:70:f8:ac:95:a3:9e:a6:49:
         09:68:cc:a0:1c:46:aa:e2:2e:04:7d:9f:f4:d8:e5:ed:64:6e:
         92:7c:76:be:e8:da:6f:25:5a:dd:8e:e7:72:2d:1e:02:a2:d8:
         1a:fd:6b:3f:71:32:de:e7:d4:b6:30:8f:4e:8e:19:21:d8:08:
         12:3c:60:da:71:06:fe:d4:bf:f7:7b:75:29:04:0f:1e:ca:9a:
         ab:99:60:d0:4b:e3:2d:69:a6:fb:42:dd:96:75:43:4b:45:7e:
         fc:2d:35:df:85:b4:d7:5d:eb:d0:28:20:e6:f0:46:51:6d:c9:
         a3:73:f3:47:2f:ce:19:dd:9c:c8:70:fd:56:20:99:ba:cc:2e:
         52:a9:3c:f3:b7:da:c0:1b:36:f1:ec:ff:f8:e1:70:b1:b9:52:
         63:50:c8:4d:9f:f3:b2:b0:6c:8f:a2:4a:9a:bb:27:90:98:63:
         10:77:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:11:26 2025 by rpki-client