Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830343a3961343a3a2f33322d3332203d3e203233303734.roa
File:                     323830343a3961343a3a2f33322d3332203d3e203233303734.roa (raw, json)
Hash identifier:          /LHTbykKcyDuy3RfP4TrOfRAtcaUeTErDOcEHUvWgBw=
Subject key identifier:   56:EB:5E:5C:D9:D5:97:07:06:59:C2:86:FB:D1:0F:6C:37:CA:BB:77
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       1559DB7D3EE1852E3BAC589DE2A89F0A4F8AFF5C
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830343a3961343a3a2f33322d3332203d3e203233303734.roa
Signing time:             Tue 02 Sep 2025 18:01:19 +0000
ROA not before:           Tue 02 Sep 2025 17:56:19 +0000
ROA not after:            Tue 01 Sep 2026 18:01:19 +0000
asID:                     23074
IP address blocks:        2804:9a4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:59:db:7d:3e:e1:85:2e:3b:ac:58:9d:e2:a8:9f:0a:4f:8a:ff:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Sep  2 17:56:19 2025 GMT
            Not After : Sep  1 18:01:19 2026 GMT
        Subject: CN=56EB5E5CD9D597070659C286FBD10F6C37CABB77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:c1:ae:b3:01:00:24:c0:7b:06:1f:5d:b0:
                    0d:96:2d:52:27:8b:73:30:0a:23:1c:a6:e1:8b:bf:
                    8b:5d:c6:2d:fa:7c:d2:70:ef:ab:54:71:fb:2b:9d:
                    78:95:33:a5:9b:1f:2d:70:a0:10:cf:f0:44:60:6f:
                    c5:84:68:27:d5:77:04:46:5d:b0:ce:6a:52:1b:a7:
                    1e:b4:91:04:57:e1:b6:7d:22:82:f9:ce:4f:5f:af:
                    f2:2f:89:89:46:e8:45:72:74:01:3e:fe:b2:d2:cf:
                    59:14:42:f8:4d:88:a1:73:13:2e:d7:4b:23:06:92:
                    8c:f0:48:f3:bb:73:3f:6d:ab:bb:32:23:26:d9:bb:
                    1a:5e:8b:92:38:2e:ba:db:84:1a:38:6d:8b:4f:e7:
                    4d:ea:5b:76:de:19:5d:bd:7a:69:66:ab:e2:ea:32:
                    b3:e5:0e:a2:33:7d:f4:16:52:00:f6:7c:59:69:9d:
                    3f:ee:f0:91:cc:5b:8d:4d:07:2a:f4:17:da:f4:c7:
                    b5:bb:8b:89:fa:84:6e:f0:d7:af:90:9b:c2:90:fd:
                    d6:53:f1:33:64:3f:d3:71:04:73:24:da:d2:f3:96:
                    6d:67:69:9f:28:64:63:86:f0:1d:ab:58:b3:85:98:
                    46:ee:af:a1:55:62:14:35:e0:3f:0d:5b:33:26:e1:
                    7b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EB:5E:5C:D9:D5:97:07:06:59:C2:86:FB:D1:0F:6C:37:CA:BB:77
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830343a3961343a3a2f33322d3332203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:94:ff:98:0e:96:94:f0:cc:7a:d1:ef:5d:6f:9f:6a:21:b0:
         1b:b2:b8:d5:a1:50:85:bc:8f:af:74:c8:44:fa:53:03:3d:0b:
         38:32:8a:08:64:f9:0d:c8:3c:30:ba:c0:8b:fb:36:46:6a:f0:
         84:2f:b5:c2:9b:6c:20:06:2e:03:25:53:6f:58:19:79:12:f9:
         7b:f5:54:f8:98:24:38:51:95:eb:d8:cb:36:30:17:eb:25:7d:
         51:16:70:93:ec:82:16:58:f3:73:2a:d7:ce:39:55:55:39:90:
         2e:a4:d4:3b:fe:90:9a:df:d9:a4:70:0d:1a:81:0a:49:09:45:
         15:33:f7:86:15:9e:b3:62:ca:45:70:d4:d8:35:ed:5c:c0:98:
         f5:93:82:69:02:c8:84:34:6b:6e:06:8f:a6:f7:25:6c:9c:48:
         07:c4:58:ea:44:f4:aa:d4:dc:da:13:49:85:fe:a9:a3:df:86:
         96:a5:0f:11:8a:39:1e:7f:4d:3c:1d:09:08:79:2e:1f:98:26:
         0a:26:bf:53:a7:65:86:45:21:6d:e4:1d:99:5b:6e:65:10:f4:
         7b:47:c6:b3:6e:79:a1:67:68:db:f3:5a:6e:93:86:9b:fa:50:
         54:71:ae:b9:8c:6c:e6:33:6a:92:93:9c:48:3c:1a:68:50:ce:
         02:d4:53:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:50:39 2025 by rpki-client