Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/eaQ9LudPVFSuwhrfQ1tbtx8Qn9h518JEHCEUqVuuhjV/0/323830343a343730343a3a2f33322d3438203d3e20323637303236.roa
File:                     323830343a343730343a3a2f33322d3438203d3e20323637303236.roa (raw, json)
Hash identifier:          QNyMQ+W5a0jzeqtcVC2DigeqH4vXmqxGZPyE/KhXUBA=
Subject key identifier:   F7:42:E1:8E:82:85:DE:BB:31:B3:25:32:8A:4A:B5:70:05:4F:44:47
Certificate issuer:       /CN=182745A41293286EEE0108AA29B55C6D5E8D8F01
Certificate serial:       740424501BD1B3F21925599616FB61BB3D81A417
Authority key identifier: 18:27:45:A4:12:93:28:6E:EE:01:08:AA:29:B5:5C:6D:5E:8D:8F:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/182745A41293286EEE0108AA29B55C6D5E8D8F01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/eaQ9LudPVFSuwhrfQ1tbtx8Qn9h518JEHCEUqVuuhjV/0/323830343a343730343a3a2f33322d3438203d3e20323637303236.roa
Signing time:             Thu 21 Aug 2025 12:45:28 +0000
ROA not before:           Thu 21 Aug 2025 12:40:28 +0000
ROA not after:            Thu 20 Aug 2026 12:45:28 +0000
asID:                     267026
IP address blocks:        2804:4704::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/eaQ9LudPVFSuwhrfQ1tbtx8Qn9h518JEHCEUqVuuhjV/0/182745A41293286EEE0108AA29B55C6D5E8D8F01.crl
                          rsync://rpki-repo.registro.br/repo/eaQ9LudPVFSuwhrfQ1tbtx8Qn9h518JEHCEUqVuuhjV/0/182745A41293286EEE0108AA29B55C6D5E8D8F01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/182745A41293286EEE0108AA29B55C6D5E8D8F01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:04:24:50:1b:d1:b3:f2:19:25:59:96:16:fb:61:bb:3d:81:a4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182745A41293286EEE0108AA29B55C6D5E8D8F01
        Validity
            Not Before: Aug 21 12:40:28 2025 GMT
            Not After : Aug 20 12:45:28 2026 GMT
        Subject: CN=F742E18E8285DEBB31B325328A4AB570054F4447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:c6:7b:ee:5d:68:d4:18:b9:97:bc:85:40:
                    7b:11:83:14:6b:5d:cd:00:81:38:17:ef:22:d0:c9:
                    d9:1a:1a:11:0a:e6:79:b4:64:99:a9:b6:9d:c4:50:
                    7a:a9:7c:ea:80:6f:a7:62:1f:a4:cc:93:36:f3:19:
                    f9:f7:ef:35:72:44:74:ba:eb:c7:f8:6e:c0:4d:25:
                    fa:0d:57:e5:c9:fe:aa:5e:1b:40:95:16:b0:04:c4:
                    1c:81:76:95:a7:1d:06:d8:2e:de:b4:80:e4:37:c7:
                    32:f9:c3:11:d3:be:2c:e6:a5:b4:33:b6:c0:be:f7:
                    e3:95:08:0d:c8:ee:bb:db:81:2a:e5:d5:be:36:8f:
                    1b:eb:09:22:15:84:66:66:ba:4b:7a:9b:79:38:69:
                    9d:54:76:22:45:51:6e:0c:24:38:4f:4f:42:05:ce:
                    fb:6a:04:a1:f2:7e:02:12:20:8c:1a:5d:f7:9a:90:
                    be:05:b4:16:c1:36:b6:4b:50:78:9e:76:c7:bd:71:
                    c9:64:3f:af:b8:4c:f0:6f:a1:8b:78:77:42:4c:35:
                    cb:94:1b:f1:32:0f:f9:ec:2e:b6:c5:60:62:5c:88:
                    d4:8c:fa:a0:93:bc:34:ab:2b:6f:5c:3d:2b:5a:68:
                    c2:0a:46:4e:e6:f1:60:2e:7d:a4:44:25:95:e2:c8:
                    e0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:42:E1:8E:82:85:DE:BB:31:B3:25:32:8A:4A:B5:70:05:4F:44:47
            X509v3 Authority Key Identifier:
                keyid:18:27:45:A4:12:93:28:6E:EE:01:08:AA:29:B5:5C:6D:5E:8D:8F:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/eaQ9LudPVFSuwhrfQ1tbtx8Qn9h518JEHCEUqVuuhjV/0/182745A41293286EEE0108AA29B55C6D5E8D8F01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/182745A41293286EEE0108AA29B55C6D5E8D8F01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/eaQ9LudPVFSuwhrfQ1tbtx8Qn9h518JEHCEUqVuuhjV/0/323830343a343730343a3a2f33322d3438203d3e20323637303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4704::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:54:5a:bf:e7:2d:3a:ea:b8:c8:47:2e:08:05:b1:9f:35:74:
         96:d5:1e:81:0f:98:65:9c:8b:e9:c4:ce:ce:ff:fe:af:3a:96:
         30:b4:bd:53:fb:87:68:9d:c3:08:31:03:2a:5b:5c:de:1c:b1:
         54:4f:e9:9d:53:e8:f1:79:61:46:ef:35:0e:f3:63:42:52:76:
         5b:77:17:1c:e4:fe:49:83:7a:79:d7:3d:a2:17:89:2f:35:55:
         ed:8e:7e:4b:aa:8c:57:93:ee:35:c5:18:df:f0:2a:f3:e7:ac:
         d2:8e:ce:9d:69:e3:0f:54:80:14:54:3b:57:27:92:d3:ee:0b:
         e1:f1:8d:d0:2b:fb:04:66:bb:d8:74:c6:b2:a5:02:f0:e7:66:
         f3:9e:d0:04:ee:ab:4e:d2:e0:a6:7a:30:97:05:3d:b3:2d:1d:
         89:9a:35:26:b7:b0:c7:4b:03:63:7c:08:08:c7:41:89:50:2b:
         9f:d7:a8:ed:64:bd:d0:71:4e:75:a4:2e:1c:e3:dc:f7:df:3b:
         38:80:a4:a9:0a:65:d8:f0:4d:86:b6:42:00:07:1d:15:93:64:
         0a:2a:84:57:c2:be:b3:25:82:5a:fd:f8:42:5b:9c:b0:fe:fe:
         b6:57:12:d2:da:53:6a:18:c6:4d:31:f7:89:99:ea:0c:0a:a2:
         57:a3:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:07:57 2025 by rpki-client