Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a633030303a3a2f33342d3334203d3e20323636393438.roa
File:                     323830343a343563343a633030303a3a2f33342d3334203d3e20323636393438.roa (raw, json)
Hash identifier:          QDnE+PNm1FIW2FUaFmApxyFbQZVYNUKO8Or20+mcybY=
Subject key identifier:   80:A5:1A:66:E7:05:C0:D1:8E:DB:F9:81:87:BC:11:4E:C6:41:A3:65
Certificate issuer:       /CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
Certificate serial:       5B18D7A070CE83C89EC6AC2E96D0F7E21BA978B4
Authority key identifier: C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a633030303a3a2f33342d3334203d3e20323636393438.roa
Signing time:             Mon 08 Sep 2025 19:01:58 +0000
ROA not before:           Mon 08 Sep 2025 18:56:58 +0000
ROA not after:            Mon 07 Sep 2026 19:01:58 +0000
asID:                     266948
IP address blocks:        2804:45c4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl
                          rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:18:d7:a0:70:ce:83:c8:9e:c6:ac:2e:96:d0:f7:e2:1b:a9:78:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
        Validity
            Not Before: Sep  8 18:56:58 2025 GMT
            Not After : Sep  7 19:01:58 2026 GMT
        Subject: CN=80A51A66E705C0D18EDBF98187BC114EC641A365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2c:31:9c:01:33:f8:33:8b:8e:e6:99:c3:49:
                    d1:dc:ec:94:47:e6:3f:49:2d:62:36:0d:1e:d8:02:
                    b6:8b:e1:d8:3f:04:8e:83:be:a0:19:70:07:8e:c1:
                    7c:b9:38:0a:76:b3:d9:01:8d:34:b8:6d:55:d6:2f:
                    8d:40:98:5b:1c:f7:3b:cb:57:cb:a6:34:14:e8:86:
                    c5:12:80:2e:40:91:76:86:2e:05:69:42:b8:97:60:
                    75:9d:85:30:0b:89:48:c1:81:85:b4:71:1b:5d:6c:
                    7b:da:9d:89:dd:f6:95:6f:66:b0:2c:c7:4e:38:4c:
                    f4:94:c4:34:79:f0:9e:af:b7:d1:bf:74:d6:8b:d8:
                    39:8d:ef:92:73:d2:11:bf:af:16:1e:07:08:ff:ec:
                    f0:59:02:dd:e5:4e:63:75:56:48:96:54:2f:87:5c:
                    05:24:de:0c:03:87:57:63:6e:ec:d0:a8:33:7f:05:
                    5c:50:e2:aa:4c:9c:82:3b:d8:55:d7:ed:24:4b:f7:
                    c3:68:b5:56:f4:39:d8:e8:f4:91:35:6b:e5:8b:91:
                    25:8f:02:ca:20:d5:db:bb:ac:8a:90:0f:fa:9e:18:
                    bf:0e:67:f1:46:f6:85:a7:f1:bb:94:a8:1c:e6:c4:
                    00:c7:ca:4f:ee:16:09:a7:97:ad:02:ee:32:8a:24:
                    2a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A5:1A:66:E7:05:C0:D1:8E:DB:F9:81:87:BC:11:4E:C6:41:A3:65
            X509v3 Authority Key Identifier:
                keyid:C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a633030303a3a2f33342d3334203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45c4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ab:57:20:67:f0:5c:bd:72:32:5b:7c:f5:05:16:9f:c6:5b:bf:
         c1:24:cf:52:8c:36:9d:9e:d4:d2:c7:83:4e:1f:e4:8a:5d:b7:
         42:d3:fe:1e:74:d7:86:29:20:fd:84:23:0b:a7:94:f8:67:e9:
         62:68:c4:75:3e:8a:fc:13:eb:22:2e:c1:64:36:d4:02:9f:3c:
         69:cc:e4:7a:c6:06:6e:7c:7b:5d:71:b9:3d:fa:e2:c9:54:b5:
         7e:fb:0b:68:8f:a0:88:f0:be:fe:67:e2:b6:ee:64:ef:99:56:
         f8:26:df:c8:6c:3f:73:4b:4f:02:c9:5f:d6:5c:2c:51:d2:a2:
         8d:d4:c9:c6:c4:b3:3a:81:fe:e6:54:ed:37:6d:30:96:77:f8:
         28:ec:e7:d2:be:5e:cc:b0:bd:49:19:2b:ec:e8:a7:7e:ef:0a:
         6a:ea:13:e4:d3:29:ed:78:e5:a0:28:cd:eb:f0:92:6a:3d:95:
         77:16:bf:02:aa:4f:8a:03:83:6e:e3:fd:4c:b6:e6:10:32:53:
         c8:8e:ef:d2:18:68:48:87:3f:c2:bd:e4:70:08:4e:f1:49:2a:
         c6:e1:62:42:e1:64:18:a9:5f:38:0f:1b:cd:a2:5a:8c:61:bd:
         26:45:df:38:25:49:1b:a5:b9:1f:55:ae:41:b5:74:b5:ce:3a:
         84:92:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:07:07 2025 by rpki-client