Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33322d3332203d3e20323638373436.roa
File:                     323830343a356131303a3a2f33322d3332203d3e20323638373436.roa (raw, json)
Hash identifier:          eGZD7+eskYzZyFUSN4zLdCIvAQZ1VuGOy0ALN38lsYQ=
Subject key identifier:   E3:5B:B3:C7:DF:5C:CD:C8:01:D4:6B:12:CA:4F:A4:06:B9:79:6B:D7
Certificate issuer:       /CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
Certificate serial:       076A45C7A40267622680BCF447064AD074B82800
Authority key identifier: DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33322d3332203d3e20323638373436.roa
Signing time:             Fri 12 Sep 2025 18:32:18 +0000
ROA not before:           Fri 12 Sep 2025 18:27:18 +0000
ROA not after:            Fri 11 Sep 2026 18:32:18 +0000
asID:                     268746
IP address blocks:        2804:5a10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:6a:45:c7:a4:02:67:62:26:80:bc:f4:47:06:4a:d0:74:b8:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
        Validity
            Not Before: Sep 12 18:27:18 2025 GMT
            Not After : Sep 11 18:32:18 2026 GMT
        Subject: CN=E35BB3C7DF5CCDC801D46B12CA4FA406B9796BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fa:c1:b8:45:ed:c9:b1:20:01:94:d5:0e:bc:
                    69:f0:3b:54:d6:36:af:80:50:3d:69:3f:f3:8b:b5:
                    37:f3:79:38:61:95:54:8a:ee:68:3f:ea:87:9c:ce:
                    3e:a9:5d:2d:bc:a1:29:68:49:9c:3e:92:f4:bb:fd:
                    67:c1:54:44:f0:f9:9c:96:c6:20:41:47:13:56:d0:
                    31:45:ea:84:a2:e9:d8:29:38:79:9f:1b:ab:05:85:
                    55:a9:38:24:19:51:99:8a:e6:58:31:46:20:97:aa:
                    d2:52:63:91:75:26:11:46:ab:20:dc:64:e8:26:38:
                    e9:c4:e0:c9:0c:d2:a7:25:65:1f:d8:50:d6:a1:cf:
                    91:36:43:1a:3b:a8:f5:01:61:64:89:96:43:23:20:
                    a9:cb:12:c1:d8:cd:98:c4:e2:a5:5c:61:76:73:af:
                    a2:38:ce:f8:3d:43:e0:15:38:47:c6:40:bc:34:ee:
                    58:80:9f:98:a5:92:e5:1f:ee:fe:31:0e:d8:66:d5:
                    f7:7f:f1:64:50:41:05:70:eb:00:6c:ac:f0:13:15:
                    94:8d:4b:72:05:7b:72:4f:1d:0b:29:3f:16:58:af:
                    87:56:b5:b9:14:32:09:08:06:3f:9e:5e:6d:7b:0d:
                    7a:e7:04:54:51:77:4f:1f:83:fc:e1:6c:92:20:a8:
                    04:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5B:B3:C7:DF:5C:CD:C8:01:D4:6B:12:CA:4F:A4:06:B9:79:6B:D7
            X509v3 Authority Key Identifier:
                keyid:DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33322d3332203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:76:d9:f1:06:28:cf:07:6b:01:71:ff:0e:27:bb:2e:51:b0:
         8f:0c:04:6c:fe:45:bf:50:87:c4:42:78:13:b3:f6:ee:79:28:
         06:58:2f:a3:84:7d:e1:fb:7a:90:9b:64:d7:27:b4:e2:1f:5d:
         9c:bf:fe:1b:2d:a4:6e:42:47:b7:71:72:5f:d1:7e:34:79:d5:
         c2:2a:e4:7c:bc:9e:2c:7b:0e:02:32:39:5a:69:14:78:4e:88:
         a2:9b:58:d1:bf:fc:6b:53:c4:35:af:33:3f:b5:d9:15:04:3d:
         96:78:ce:eb:d0:63:5d:3c:66:a4:ff:ba:66:51:cc:c6:bc:97:
         4d:fc:7c:93:ee:94:64:56:ac:05:f1:39:f1:92:e5:04:2d:27:
         66:ae:9e:16:b5:0f:80:64:14:00:69:f2:22:b0:27:09:d1:b7:
         3c:e3:5e:ce:4f:5d:0d:ef:dc:35:9f:bb:86:40:8a:12:6e:7f:
         76:1f:35:ca:66:54:89:1f:c8:56:f9:5c:9c:40:fa:3d:e3:23:
         43:30:67:6c:a7:15:47:b2:98:b1:51:ea:14:e6:93:bc:6a:1f:
         db:7a:45:ae:ca:a7:ef:09:d7:8b:6e:5c:12:b4:d5:94:c4:04:
         8a:bc:d9:99:6c:16:60:fe:83:95:2d:fa:87:ad:d4:d9:4f:a8:
         d3:ae:6e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:58:04 2025 by rpki-client