Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/323830343a3539303a3a2f33322d3438203d3e20323632353233.roa
File:                     323830343a3539303a3a2f33322d3438203d3e20323632353233.roa (raw, json)
Hash identifier:          UIZVw5CVrMJVVAYGVNA/F8mJ8zczqqcpB7QFBw6FUCw=
Subject key identifier:   E4:57:DC:C3:80:15:2B:32:1D:06:B8:62:DB:85:77:E4:02:8A:49:B8
Certificate issuer:       /CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
Certificate serial:       3CDCD988442ACD71495F3E7A9444054DBB2CCDAA
Authority key identifier: 7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/323830343a3539303a3a2f33322d3438203d3e20323632353233.roa
Signing time:             Mon 21 Jul 2025 07:17:41 +0000
ROA not before:           Mon 21 Jul 2025 07:12:41 +0000
ROA not after:            Mon 20 Jul 2026 07:17:41 +0000
asID:                     262523
IP address blocks:        2804:590::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl
                          rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 05:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:dc:d9:88:44:2a:cd:71:49:5f:3e:7a:94:44:05:4d:bb:2c:cd:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
        Validity
            Not Before: Jul 21 07:12:41 2025 GMT
            Not After : Jul 20 07:17:41 2026 GMT
        Subject: CN=E457DCC380152B321D06B862DB8577E4028A49B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2b:85:94:f0:19:bc:1e:c9:e5:6a:6c:7b:eb:
                    72:aa:2c:d3:af:3b:44:df:52:fb:ff:e9:38:53:61:
                    d8:b5:2e:b0:1a:b1:b7:94:69:fc:b5:c3:ad:d3:84:
                    7e:f2:9d:88:63:57:a1:b5:dd:86:a5:ef:6d:cc:e0:
                    47:31:85:83:5a:71:56:2f:56:a8:c0:5d:6f:6a:86:
                    5a:d5:46:ff:5f:6c:95:41:28:b9:e7:be:77:b1:9a:
                    57:09:44:ce:74:8f:68:90:99:45:f1:fd:b7:f7:fd:
                    a0:b1:59:86:86:f7:b3:59:d4:7f:5e:73:59:e6:1c:
                    b6:19:ae:5e:99:d5:76:55:76:e4:12:fa:30:c6:fa:
                    78:18:22:1c:87:fa:ec:41:d6:cc:c4:f3:e1:b6:97:
                    52:44:dc:c2:89:05:a1:89:6e:f0:c0:14:b8:ec:1d:
                    24:8d:54:14:c9:07:08:57:b1:36:b9:1e:da:a4:33:
                    54:53:41:b8:3b:b3:af:ff:e7:e7:d6:6f:18:92:38:
                    b1:d2:91:6f:0c:7c:80:75:83:98:b4:e1:71:83:62:
                    a2:32:93:37:79:37:80:53:d0:65:d5:5b:07:50:f0:
                    d5:0c:4c:d2:c2:2f:51:0c:07:36:9f:a3:45:64:a3:
                    4b:1f:6e:bb:21:e6:be:21:af:6c:c0:4a:f5:8b:7a:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:57:DC:C3:80:15:2B:32:1D:06:B8:62:DB:85:77:E4:02:8A:49:B8
            X509v3 Authority Key Identifier:
                keyid:7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/323830343a3539303a3a2f33322d3438203d3e20323632353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:590::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:b2:4c:e0:cb:f2:16:b4:fa:ea:10:8d:21:27:51:35:f8:27:
         9b:c8:3d:40:36:ab:18:a5:85:11:ce:d9:4d:1f:63:db:90:a5:
         d8:11:86:46:39:ba:06:3f:64:17:d7:b8:70:4f:ae:37:ec:9a:
         76:dc:f8:12:a0:11:0e:72:6d:f3:b4:ea:4f:dd:b1:68:3f:79:
         4d:80:1e:74:a4:26:f9:7f:20:9b:e5:7c:d9:4b:43:c2:df:cc:
         36:7a:f8:ab:52:e2:8b:1e:ef:9c:9d:59:fd:29:10:f5:fd:a8:
         1a:75:89:24:6d:ea:b7:4c:40:37:d5:0b:f9:7a:12:c6:56:0c:
         26:65:57:72:c8:45:73:94:d1:c3:ad:7b:ca:82:93:77:42:1e:
         46:c6:80:f0:cf:29:64:16:cd:2f:82:be:aa:7d:db:ed:42:3c:
         8d:3a:7b:c6:e9:bb:15:8b:58:fe:6b:48:24:9b:ff:e9:06:04:
         7d:e4:06:d6:43:12:a5:f3:83:7e:12:86:f3:10:fe:fc:1f:e7:
         66:43:a0:e0:1f:a5:71:2e:4f:55:b4:95:03:ba:33:b2:52:cc:
         c5:82:6d:b8:84:f1:2d:4d:10:dd:eb:67:64:76:fe:78:23:46:
         98:b4:2d:6e:e4:7c:ca:88:3b:a5:71:bb:a3:27:a4:a8:a9:96:
         ec:16:36:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:16:40 2025 by rpki-client