Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a343030303a3a2f33362d3336203d3e20323638303430.roa
File:                     323830343a353730633a343030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier:          9BWp1l5TIZv7ozJAknPOYmLX23z8eO7kjS9UJR1G2ac=
Subject key identifier:   AA:D0:3E:9D:0E:D8:5C:92:3E:62:2B:CB:A5:E1:E4:87:7D:45:DB:35
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       38DDE1A00F5BEB888B56456A58AD141E3F44E2EB
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a343030303a3a2f33362d3336203d3e20323638303430.roa
Signing time:             Mon 08 Sep 2025 21:31:26 +0000
ROA not before:           Mon 08 Sep 2025 21:26:26 +0000
ROA not after:            Mon 07 Sep 2026 21:31:26 +0000
asID:                     268040
IP address blocks:        2804:570c:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:dd:e1:a0:0f:5b:eb:88:8b:56:45:6a:58:ad:14:1e:3f:44:e2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Sep  8 21:26:26 2025 GMT
            Not After : Sep  7 21:31:26 2026 GMT
        Subject: CN=AAD03E9D0ED85C923E622BCBA5E1E4877D45DB35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:2a:b9:75:56:ac:a2:e6:e9:68:e4:99:66:
                    93:95:c1:f0:d3:41:a2:71:7f:6a:db:b0:8f:c0:92:
                    c0:b0:3f:9b:ab:a9:13:a8:11:0c:de:d7:e9:13:24:
                    24:4b:d8:a7:93:7b:8a:ad:57:31:02:3a:a5:91:0a:
                    ac:5c:17:61:49:0e:eb:a4:60:85:44:6f:e4:01:8e:
                    39:04:06:2c:bd:4b:ae:67:5e:73:40:2f:b7:f1:72:
                    00:c7:ce:e0:09:a5:9f:84:24:f9:a7:a9:4a:3f:20:
                    32:3b:ae:00:fd:36:15:18:4d:85:2c:36:56:cf:02:
                    96:ed:e3:f1:6f:b3:2d:27:f2:dc:52:51:d7:b7:9a:
                    20:2b:2c:64:b8:07:d0:f6:da:fb:81:40:e6:20:11:
                    b0:05:9a:5e:2f:4c:2f:c0:4f:31:c5:64:46:31:19:
                    0d:fb:f6:73:3f:02:f2:0b:79:fa:d5:0f:f7:8a:ce:
                    f2:92:cc:e3:d4:c6:c2:e6:a2:88:6a:80:b2:fa:cb:
                    0b:94:1f:ef:a4:81:fd:f2:06:21:99:28:ca:1d:65:
                    4a:3c:30:4a:cb:87:63:38:26:1a:f2:f1:36:fc:ee:
                    af:75:36:65:1c:a6:0f:24:93:86:87:27:c0:4a:32:
                    a8:81:df:be:7d:1f:50:69:b6:f5:1a:82:43:a1:66:
                    0b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D0:3E:9D:0E:D8:5C:92:3E:62:2B:CB:A5:E1:E4:87:7D:45:DB:35
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a343030303a3a2f33362d3336203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         18:b9:e2:a7:b3:c5:e6:7b:4a:b5:92:f3:58:61:8c:df:5a:3e:
         f5:86:e0:cc:46:e9:1e:7c:44:7d:20:52:a6:bd:5a:03:f9:58:
         fc:79:8a:4e:44:fb:7f:df:4a:b0:ce:ae:66:57:4d:38:d2:e2:
         f0:48:6e:19:fe:6a:15:b8:51:12:75:39:9d:9c:9f:9f:98:53:
         00:1a:e2:1c:ba:2c:ab:ec:b0:0b:2b:46:8e:37:4b:59:b7:e5:
         5c:b5:70:d5:35:b1:a5:28:20:3d:31:91:85:3b:dd:2c:cb:3a:
         7b:75:e4:57:c7:04:13:0c:fb:22:dc:52:89:ff:2e:11:0a:43:
         49:ca:17:82:03:ac:b7:eb:d4:5e:cb:dd:d1:57:d6:d8:14:80:
         c0:6c:39:27:4c:c3:74:f4:52:97:f9:70:9f:48:29:49:56:78:
         90:87:df:09:71:0b:55:e2:2b:37:4e:d4:58:bc:31:f6:7e:29:
         6c:af:73:fc:ff:68:6a:52:51:b5:5d:2c:d0:f3:be:4c:86:fe:
         cb:05:46:5a:1e:8c:e3:ef:23:2c:7f:05:a2:1f:d8:31:f2:e7:
         ae:4a:ed:55:81:62:1e:93:6f:e9:5c:be:f3:36:c7:4f:1c:ca:
         c6:1e:cc:99:1c:41:7f:88:8e:11:f4:38:56:e9:cc:05:74:d6:
         4e:40:08:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:06:18 2025 by rpki-client