Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a6462303a3a2f33322d3438203d3e203532383632.roa
File:                     323830343a6462303a3a2f33322d3438203d3e203532383632.roa (raw, json)
Hash identifier:          95EXJJnVnhc2z39d88s0gR5jSTIn4X9y67aFYW65x1A=
Subject key identifier:   56:8E:DC:33:FF:E2:66:57:FF:1C:04:71:4C:BE:B5:AB:6A:8C:31:B4
Certificate issuer:       /CN=E4D2287A592D8B7C6149FCA020C2BE650D327DBC
Certificate serial:       144D239CC9C78ED603E99E8D6A7A39A9CC37590D
Authority key identifier: E4:D2:28:7A:59:2D:8B:7C:61:49:FC:A0:20:C2:BE:65:0D:32:7D:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a6462303a3a2f33322d3438203d3e203532383632.roa
Signing time:             Thu 07 Aug 2025 15:09:22 +0000
ROA not before:           Thu 07 Aug 2025 15:04:22 +0000
ROA not after:            Thu 06 Aug 2026 15:09:22 +0000
asID:                     52862
IP address blocks:        2804:db0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.crl
                          rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4d:23:9c:c9:c7:8e:d6:03:e9:9e:8d:6a:7a:39:a9:cc:37:59:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D2287A592D8B7C6149FCA020C2BE650D327DBC
        Validity
            Not Before: Aug  7 15:04:22 2025 GMT
            Not After : Aug  6 15:09:22 2026 GMT
        Subject: CN=568EDC33FFE26657FF1C04714CBEB5AB6A8C31B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:11:dd:8d:b0:d7:35:d9:2b:db:84:92:40:
                    26:02:b2:86:3f:7d:e8:04:70:05:3e:6f:cf:e0:d7:
                    e3:3e:48:bf:ee:e1:5e:54:7d:03:cf:a7:b2:7b:8a:
                    0f:d0:74:70:18:66:90:1f:00:a3:fd:73:f0:2d:fb:
                    5d:99:a9:6d:21:ec:b0:ee:9f:62:e1:07:bb:8f:79:
                    86:01:58:1b:06:e2:eb:58:a9:9c:9f:67:c3:1f:0d:
                    33:53:66:02:e7:ce:4f:4a:61:7a:e8:2a:74:a2:38:
                    f2:20:4f:41:6b:00:da:cc:9e:7a:63:ab:0b:25:df:
                    5d:21:b0:74:d4:02:cf:71:4a:71:75:b5:eb:f4:ca:
                    21:73:b9:15:24:50:c7:c9:75:42:da:b7:a9:b9:02:
                    a5:02:a7:d8:30:57:85:ed:c1:27:fb:4c:ad:70:e6:
                    12:dd:f7:69:70:3c:ba:a6:0c:09:d5:40:06:36:68:
                    3f:3c:01:1f:ba:d8:e0:1b:6b:e7:f4:6c:94:65:06:
                    7a:53:6c:e4:3c:09:a7:14:87:f4:73:54:89:20:41:
                    56:39:5f:eb:ed:ed:6b:ea:7b:a4:2b:da:97:49:c0:
                    23:f1:3c:95:1a:a2:97:ac:07:3b:f2:fa:01:b1:a5:
                    3d:78:cf:d0:c4:63:c3:a5:7a:f5:8e:d0:fd:68:4b:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8E:DC:33:FF:E2:66:57:FF:1C:04:71:4C:BE:B5:AB:6A:8C:31:B4
            X509v3 Authority Key Identifier:
                keyid:E4:D2:28:7A:59:2D:8B:7C:61:49:FC:A0:20:C2:BE:65:0D:32:7D:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a6462303a3a2f33322d3438203d3e203532383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:4a:89:56:bf:3c:bf:0f:97:8d:9a:e0:65:28:81:05:79:
         6d:d2:74:50:7b:38:d8:33:60:85:d1:9e:da:6e:29:ae:da:87:
         e5:ce:5d:30:70:2b:e5:76:a9:a9:00:4a:25:56:a8:4e:d7:18:
         a6:07:b7:e7:87:3e:00:37:e3:74:9b:dc:fa:81:00:0c:f3:3e:
         6b:ae:3c:4a:ec:e3:46:db:4c:9a:9a:3b:5d:9d:a0:6d:6c:23:
         08:e3:6c:11:21:4a:2d:f4:00:de:c0:db:74:71:13:0e:1f:78:
         c8:a3:16:cf:db:a4:81:b4:ac:e7:7c:64:84:7a:56:67:39:57:
         b2:b3:3e:5d:d6:c5:a5:36:d7:73:ce:41:c5:fa:85:36:9e:14:
         db:72:40:50:a8:0f:ac:d5:44:55:ce:a2:6e:5d:41:9e:c8:9b:
         67:c8:df:37:75:8c:e4:37:03:7a:99:50:98:b4:19:aa:48:3d:
         a3:0d:80:59:b1:54:a3:cd:83:7a:da:a2:25:57:5a:d2:2c:f7:
         e2:85:ae:35:9e:78:fc:da:c9:07:1a:03:9b:0d:20:a4:0a:9d:
         c0:2a:0a:51:37:9d:bb:92:9c:e0:0a:cf:c3:4b:b3:e7:bb:6c:
         12:8b:4b:76:fd:8b:3a:6a:d9:88:57:48:f2:e9:5b:24:ec:79:
         4c:8e:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:45:38 2025 by rpki-client