Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/323830343a323435383a3a2f33322d313238203d3e20323634323136.roa
File:                     323830343a323435383a3a2f33322d313238203d3e20323634323136.roa (raw, json)
Hash identifier:          MZG1pWatGxwr0+bbifrxZdcTJXpxgFLz7Jve24qeGnY=
Subject key identifier:   A1:17:72:D9:D2:F9:49:61:CD:9A:AA:09:48:96:59:42:63:13:A2:AB
Certificate issuer:       /CN=E3255E24DF417D9D2CF5A8A392C325F09432EA5E
Certificate serial:       695DF9EF965B9A3EEECBDD6CE3782138C66CD961
Authority key identifier: E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/323830343a323435383a3a2f33322d313238203d3e20323634323136.roa
Signing time:             Thu 14 Aug 2025 16:04:03 +0000
ROA not before:           Thu 14 Aug 2025 15:59:03 +0000
ROA not after:            Thu 13 Aug 2026 16:04:03 +0000
asID:                     264216
IP address blocks:        2804:2458::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.crl
                          rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 14:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5d:f9:ef:96:5b:9a:3e:ee:cb:dd:6c:e3:78:21:38:c6:6c:d9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3255E24DF417D9D2CF5A8A392C325F09432EA5E
        Validity
            Not Before: Aug 14 15:59:03 2025 GMT
            Not After : Aug 13 16:04:03 2026 GMT
        Subject: CN=A11772D9D2F94961CD9AAA09489659426313A2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:9f:63:a5:71:03:96:e0:25:3c:e1:0f:a6:
                    3e:31:a3:7f:45:28:96:23:ef:92:d1:8d:53:1c:9b:
                    d1:15:35:9e:2f:30:a6:e9:11:2a:f7:67:77:05:41:
                    23:b1:c4:67:54:44:cc:ef:fe:3b:9f:96:52:3e:2b:
                    f1:87:4a:15:92:44:e6:b8:0b:7d:4b:e8:4d:7a:14:
                    26:75:75:95:74:0e:a1:58:f3:28:dd:ca:5d:bf:02:
                    4d:fb:5c:b6:db:fa:70:80:3e:a6:2d:c0:91:d8:26:
                    7d:8b:21:a1:83:c4:6e:3a:5f:5d:c5:c8:24:cf:13:
                    28:61:d8:30:e7:38:9f:18:6f:99:e5:73:bf:99:cb:
                    bc:2c:16:87:c2:c3:1d:ad:7c:98:8c:b3:ec:37:16:
                    5f:a2:52:99:4c:ca:4e:7b:9c:0c:06:95:2c:45:2a:
                    7c:bf:fa:d8:41:5a:e3:3e:01:9c:bc:5b:d5:a8:87:
                    50:3a:39:15:b0:10:29:56:c1:6d:78:65:38:5e:7e:
                    cc:c1:59:47:be:be:3d:8b:a2:1c:eb:13:c1:ee:7d:
                    0e:54:7e:1c:33:18:0b:51:8d:66:b2:88:e1:91:0d:
                    ff:61:bd:56:41:c5:98:68:ec:6c:2c:2f:f8:9c:1c:
                    7c:3d:78:72:6c:27:5a:e4:a0:16:fe:61:9f:6f:24:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:17:72:D9:D2:F9:49:61:CD:9A:AA:09:48:96:59:42:63:13:A2:AB
            X509v3 Authority Key Identifier:
                keyid:E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/323830343a323435383a3a2f33322d313238203d3e20323634323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2458::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:ff:ee:1d:c5:b7:21:2d:b1:d9:e0:22:93:ce:d2:0d:2a:0d:
         71:ec:37:70:ab:a9:92:db:96:ad:fc:fa:be:1e:de:0f:e6:91:
         c7:f9:c6:ae:4b:79:09:32:98:c4:8a:56:02:b4:4d:4d:00:20:
         96:3d:2f:6c:db:5b:84:91:50:ec:4a:ba:14:87:04:1d:7d:80:
         8f:76:57:be:c0:fe:fe:47:a1:2b:5f:4e:c1:3f:ea:07:ce:45:
         56:9f:65:3a:03:87:8a:60:54:f6:e9:24:d4:9f:79:24:b4:db:
         e8:2c:03:80:76:6f:46:1d:22:68:55:e3:80:b3:32:7d:56:6f:
         50:c8:bd:6f:21:a0:0f:1d:c0:e2:b8:37:41:9d:4c:26:8a:1e:
         7c:5e:43:ff:f6:8c:00:80:ef:90:37:d1:77:4f:99:be:3f:ce:
         e4:c8:44:c5:49:1a:5e:99:83:40:b9:dd:c0:e1:13:28:13:47:
         54:e9:5e:3d:88:38:e3:06:20:1e:ee:11:d4:88:d7:fd:7c:66:
         16:c7:ae:92:fc:c7:42:f5:d5:43:b6:5f:9f:e8:47:49:0d:29:
         bd:1f:c9:ac:df:5b:0f:93:0d:fe:47:36:99:ba:91:b3:1c:96:
         dd:f3:d6:28:da:3c:7c:dc:97:b3:ab:75:11:bb:4e:8d:2b:1a:
         77:33:ff:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 02:32:05 2025 by rpki-client