Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/323830343a353462303a3a2f33322d313238203d3e20323638363635.roa
File:                     323830343a353462303a3a2f33322d313238203d3e20323638363635.roa (raw, json)
Hash identifier:          613mbXkb9wniobS2aXA4uFw6FMTpLa8dAExRI3B3X48=
Subject key identifier:   3F:BF:0B:40:05:B9:6F:A8:91:C9:51:03:21:B8:27:13:4A:54:BC:BD
Certificate issuer:       /CN=970A597B9FBB9D768A57AC58C4580E0C21651B91
Certificate serial:       51A2513551B062029FADBD8B0D8F47152162D781
Authority key identifier: 97:0A:59:7B:9F:BB:9D:76:8A:57:AC:58:C4:58:0E:0C:21:65:1B:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970A597B9FBB9D768A57AC58C4580E0C21651B91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/323830343a353462303a3a2f33322d313238203d3e20323638363635.roa
Signing time:             Wed 23 Jul 2025 19:16:53 +0000
ROA not before:           Wed 23 Jul 2025 19:11:53 +0000
ROA not after:            Wed 22 Jul 2026 19:16:53 +0000
asID:                     268665
IP address blocks:        2804:54b0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.crl
                          rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970A597B9FBB9D768A57AC58C4580E0C21651B91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 22:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a2:51:35:51:b0:62:02:9f:ad:bd:8b:0d:8f:47:15:21:62:d7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970A597B9FBB9D768A57AC58C4580E0C21651B91
        Validity
            Not Before: Jul 23 19:11:53 2025 GMT
            Not After : Jul 22 19:16:53 2026 GMT
        Subject: CN=3FBF0B4005B96FA891C9510321B827134A54BCBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:8b:99:32:70:d6:74:d6:66:c9:8d:3f:16:
                    f1:aa:d3:06:94:c7:36:95:35:14:60:d4:bb:fe:9b:
                    0c:0b:76:28:19:2c:92:fd:ed:a8:b9:70:aa:db:35:
                    dc:9f:08:5c:2b:ef:e1:eb:a7:3d:61:19:21:a0:e8:
                    86:4a:62:04:67:28:18:68:3d:2f:ef:38:d6:2a:5b:
                    d9:54:9e:28:f0:b6:27:86:9a:d5:92:ac:55:b7:85:
                    70:4a:cb:0a:99:89:70:ea:2c:40:31:5d:9f:57:94:
                    ed:de:bf:09:39:52:4a:e1:fb:07:fe:c9:d3:90:d7:
                    49:92:40:ae:20:5a:61:f6:b9:fa:cd:31:db:d8:38:
                    38:a9:26:5b:c8:5b:91:d5:9f:e2:24:d1:58:f5:6a:
                    94:e4:77:fd:21:c7:3b:f0:7b:b8:6a:97:3e:f5:b7:
                    4a:ff:18:40:35:c2:71:59:26:91:0a:83:a4:7a:7e:
                    84:f4:02:a0:b3:57:d0:18:08:0e:dd:4e:33:0a:c1:
                    d7:ec:4b:1b:5e:ec:de:c6:94:9d:94:41:8c:c1:03:
                    84:a9:57:30:25:82:02:f6:2b:23:95:79:f7:fc:20:
                    d5:de:69:49:ef:36:c5:bd:73:ac:c5:93:9a:ba:48:
                    97:25:81:03:11:9d:3b:02:77:82:00:2d:6e:18:c8:
                    9f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BF:0B:40:05:B9:6F:A8:91:C9:51:03:21:B8:27:13:4A:54:BC:BD
            X509v3 Authority Key Identifier:
                keyid:97:0A:59:7B:9F:BB:9D:76:8A:57:AC:58:C4:58:0E:0C:21:65:1B:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970A597B9FBB9D768A57AC58C4580E0C21651B91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/323830343a353462303a3a2f33322d313238203d3e20323638363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:93:cd:ca:e1:af:b4:34:42:81:e4:3b:89:93:ee:dc:f1:bf:
         09:69:56:55:04:ab:fe:e1:7f:54:99:8a:d2:5b:32:0e:4e:73:
         87:38:45:9e:5b:8f:b0:44:b7:d3:37:90:d7:74:33:c5:63:3a:
         02:03:b1:05:79:d3:69:f7:5a:d0:c9:80:85:c1:9f:8c:c9:64:
         0f:45:31:d3:23:d2:bd:40:ee:ae:c5:41:fd:bd:09:29:ba:98:
         64:5b:05:8c:2c:fc:25:ff:7d:77:df:d1:38:01:8a:01:fa:1e:
         75:d1:66:38:d6:97:4c:1e:b5:20:17:9a:c5:13:f5:65:4d:9b:
         01:d1:2f:82:78:66:87:3f:bd:15:a0:62:28:e9:c1:fb:95:dc:
         85:da:31:c3:32:ae:8d:52:eb:03:af:58:29:8b:66:33:a2:68:
         24:c2:0b:f4:b4:04:1a:31:25:29:c6:a0:02:47:5d:a9:25:32:
         49:46:b1:d6:b2:09:87:18:5d:ea:dd:8d:c7:f0:89:a3:ba:c0:
         e5:d3:cd:ca:d6:46:85:db:85:24:3f:9e:de:19:8d:fd:73:dd:
         13:b3:cb:f1:55:77:fd:f1:e6:7c:ee:8b:75:03:9e:fb:a1:f5:
         fb:9b:6f:2a:55:cd:e4:d7:f7:69:04:9f:26:69:ce:7f:99:2e:
         6f:9f:1b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:30:45 2025 by rpki-client