Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a3a2f33322d3438203d3e203532393133.roa
File:                     323830343a313038383a3a2f33322d3438203d3e203532393133.roa (raw, json)
Hash identifier:          GgkHNQNYuAiCnDgTAEtkyyDtF8hkrggiYHPFrarSTqo=
Subject key identifier:   F1:3D:93:5B:84:E5:6A:9B:06:43:54:CC:11:21:59:DF:B8:DE:B5:F3
Certificate issuer:       /CN=EEC7B2AB6EB8213B1305F252517D9CCE88713337
Certificate serial:       4C9F2CDFB1FCE6B07B297875062E671519CBC99D
Authority key identifier: EE:C7:B2:AB:6E:B8:21:3B:13:05:F2:52:51:7D:9C:CE:88:71:33:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC7B2AB6EB8213B1305F252517D9CCE88713337.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a3a2f33322d3438203d3e203532393133.roa
Signing time:             Thu 07 Aug 2025 19:32:08 +0000
ROA not before:           Thu 07 Aug 2025 19:27:08 +0000
ROA not after:            Thu 06 Aug 2026 19:32:08 +0000
asID:                     52913
IP address blocks:        2804:1088::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/EEC7B2AB6EB8213B1305F252517D9CCE88713337.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/EEC7B2AB6EB8213B1305F252517D9CCE88713337.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC7B2AB6EB8213B1305F252517D9CCE88713337.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 11:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9f:2c:df:b1:fc:e6:b0:7b:29:78:75:06:2e:67:15:19:cb:c9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC7B2AB6EB8213B1305F252517D9CCE88713337
        Validity
            Not Before: Aug  7 19:27:08 2025 GMT
            Not After : Aug  6 19:32:08 2026 GMT
        Subject: CN=F13D935B84E56A9B064354CC112159DFB8DEB5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:c6:27:2a:06:0e:87:f6:81:e3:e6:13:4c:
                    ce:97:17:cb:9c:a6:77:81:7b:08:5b:a2:e8:45:8e:
                    6a:e7:4d:3c:d0:13:8a:e3:84:53:c7:a8:4b:12:8e:
                    47:82:59:5d:ae:be:dd:c6:50:df:90:60:a1:51:c5:
                    77:6b:c0:44:ad:40:e5:18:d8:0a:a1:64:df:f4:96:
                    c3:da:3d:09:bf:f8:00:10:fa:46:18:e8:2d:bb:ec:
                    a2:90:da:8d:25:e1:45:62:5f:41:21:24:45:9a:ea:
                    e6:c7:c1:15:64:f0:b8:c5:83:42:e4:fa:12:aa:a6:
                    01:21:10:f8:78:00:3f:13:e7:3e:53:ef:64:e5:9d:
                    98:7b:60:37:86:de:52:59:e4:40:da:45:cd:ea:41:
                    77:58:3f:95:6a:ff:73:c9:35:d1:cc:86:a7:15:ca:
                    9b:ef:cd:cb:37:06:95:a1:2b:eb:1d:ac:d1:b3:4d:
                    62:03:8e:0e:b8:0f:f8:20:6e:5a:e4:5f:87:07:06:
                    3c:c7:fa:09:a4:c2:3a:53:91:ea:34:90:be:bd:79:
                    e1:91:79:1d:22:4f:95:fc:c7:97:09:1b:13:36:88:
                    55:c8:49:25:b7:a9:74:b5:54:d4:3c:cf:e2:f1:c4:
                    22:f2:7a:62:4f:07:cc:2c:dd:9b:5b:52:70:7f:8d:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3D:93:5B:84:E5:6A:9B:06:43:54:CC:11:21:59:DF:B8:DE:B5:F3
            X509v3 Authority Key Identifier:
                keyid:EE:C7:B2:AB:6E:B8:21:3B:13:05:F2:52:51:7D:9C:CE:88:71:33:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/EEC7B2AB6EB8213B1305F252517D9CCE88713337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC7B2AB6EB8213B1305F252517D9CCE88713337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a3a2f33322d3438203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1088::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:f8:99:e2:d2:74:ba:c3:9c:a0:49:06:49:1f:55:cd:bf:de:
         9d:7d:5f:08:a7:81:45:a0:f5:33:51:be:09:21:18:41:4f:7f:
         1c:2a:6c:3d:ba:f8:b4:9d:bb:67:ce:7e:a2:6c:71:f5:c9:26:
         7e:26:b9:4e:c0:ad:18:c2:ec:f9:87:cc:62:a6:a8:bf:df:92:
         66:fb:d8:72:f0:ee:be:9f:6a:62:bf:79:1e:39:0b:b0:23:61:
         e4:e9:24:6e:5b:31:02:fa:e1:4b:2d:b9:a5:05:ee:87:bf:d9:
         76:0d:a6:a8:f9:ad:b2:d9:9c:65:fd:52:00:87:4d:df:e6:bb:
         0a:39:c1:69:cd:f4:3d:f6:65:d7:ef:38:3e:6d:22:7d:19:b0:
         33:63:61:61:ad:85:f3:fa:e8:3b:26:26:9c:d8:b2:43:ca:37:
         02:92:aa:9f:a4:9a:0e:f5:dd:c9:c4:5f:a2:d2:1f:2b:42:6f:
         63:a4:08:b6:1f:b4:9b:c6:d4:92:9c:46:2b:6f:af:e8:a2:e0:
         a7:06:0c:35:eb:63:5b:48:ee:46:4c:b3:8a:96:2f:74:d3:cb:
         2b:c6:19:b1:13:fb:2f:96:9d:74:33:40:d9:63:59:e8:e7:c7:
         7b:53:10:5b:14:70:a9:f6:1a:76:80:10:b4:81:29:be:19:e8:
         a5:45:a5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:48:22 2025 by rpki-client