Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/323830343a3939383a3a2f33322d3634203d3e203238353839.roa
File:                     323830343a3939383a3a2f33322d3634203d3e203238353839.roa (raw, json)
Hash identifier:          GUVu3lWtLReTvqC1DH0Uw04plEvINg0yOBYl39sI6nc=
Subject key identifier:   8A:66:15:BC:D2:D0:6B:F4:98:5E:DE:C2:9F:72:DE:4A:9F:E1:8B:04
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       226BEC01E733011B4BD181EE995247D4B528BF64
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/323830343a3939383a3a2f33322d3634203d3e203238353839.roa
Signing time:             Fri 27 Jun 2025 18:38:59 +0000
ROA not before:           Fri 27 Jun 2025 18:33:59 +0000
ROA not after:            Fri 26 Jun 2026 18:38:59 +0000
asID:                     28589
IP address blocks:        2804:998::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 07:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6b:ec:01:e7:33:01:1b:4b:d1:81:ee:99:52:47:d4:b5:28:bf:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jun 27 18:33:59 2025 GMT
            Not After : Jun 26 18:38:59 2026 GMT
        Subject: CN=8A6615BCD2D06BF4985EDEC29F72DE4A9FE18B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:9c:6e:d1:f7:06:4c:88:01:30:b2:05:2c:
                    a5:38:f8:20:c5:63:69:ab:99:9a:f4:7d:84:0f:70:
                    24:8e:c5:c1:ab:94:68:44:87:4b:e8:ed:e7:d3:b0:
                    04:b8:f9:8b:c2:36:f1:25:b9:98:67:24:95:62:18:
                    52:3f:ce:85:bd:28:a0:c6:3e:f9:55:a4:5c:0c:f2:
                    a5:7d:d6:98:4c:b5:f3:69:5d:8e:32:45:95:2a:52:
                    56:63:86:3f:a0:c1:e8:04:b9:73:c7:2a:ce:ec:0f:
                    4a:73:3f:6c:34:7b:e8:62:73:ed:8c:61:45:0e:99:
                    26:f3:a9:ac:68:b2:9d:f6:77:f2:2b:07:ab:4e:8a:
                    a3:1e:de:b4:9a:19:27:ec:42:a5:49:da:8d:57:10:
                    15:db:b6:15:bb:46:75:3a:19:b0:66:30:99:fe:c4:
                    cb:89:ed:16:1a:7c:ef:57:43:0d:4f:64:9d:e9:96:
                    c9:11:ba:38:a1:03:c9:a0:17:76:38:84:b7:70:c4:
                    fb:bc:28:65:ed:e9:e2:a0:a0:b8:9e:27:e1:60:fc:
                    81:e6:38:dd:71:af:87:1c:bb:2f:0c:3b:0a:7f:a3:
                    aa:a8:88:69:b7:3f:98:d4:dd:35:1d:5b:2d:e7:9b:
                    2e:c3:95:03:e5:01:8f:a3:b4:c0:4e:ec:3e:f0:bf:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:66:15:BC:D2:D0:6B:F4:98:5E:DE:C2:9F:72:DE:4A:9F:E1:8B:04
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/323830343a3939383a3a2f33322d3634203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:998::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:76:80:ff:c4:72:91:50:ca:45:86:13:7a:a3:28:7f:96:fa:
         33:00:cc:77:2b:ca:98:24:56:2f:39:96:88:ff:67:1b:73:ff:
         f1:18:13:3d:bd:2f:59:88:2d:b0:2a:4c:2f:a8:4f:23:b5:fe:
         90:3a:41:16:2f:36:25:3d:1e:a5:5e:8f:45:ce:4d:00:68:9a:
         59:f7:93:71:8d:e8:d3:8f:55:7b:c6:14:9e:f1:ce:cd:da:3d:
         ab:a4:e7:2e:45:34:d1:ab:9c:2e:bb:4c:c1:4f:8f:48:24:df:
         21:16:a5:4c:8d:10:51:bf:2f:5e:42:bd:ef:f8:2f:c2:8b:dc:
         46:09:bf:61:71:35:54:f2:87:eb:4e:9c:65:e2:8c:9f:8a:19:
         06:90:7c:a0:37:34:62:c2:6a:28:e3:a2:7e:6a:3b:66:9a:6f:
         ab:06:cb:47:f7:4e:a2:6d:bf:c9:5a:f8:c4:7f:1e:ad:c4:f2:
         e5:ac:2b:6f:30:dc:e2:28:e6:05:36:3e:59:24:15:d2:95:ae:
         21:84:51:69:26:73:9c:9b:c4:eb:ca:ab:91:41:48:1c:ee:98:
         b7:06:16:96:a4:d7:0f:0e:de:51:8b:f0:3c:5d:04:2b:bb:51:
         7a:d1:6c:7b:eb:53:c5:01:13:99:fb:10:50:c3:23:ca:9c:38:
         84:8d:2f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:49:28 2025 by rpki-client