Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/323830343a333666343a3a2f33322d3333203d3e20323636333832.roa
File:                     323830343a333666343a3a2f33322d3333203d3e20323636333832.roa (raw, json)
Hash identifier:          wPIOZ8Ul1AxBBiyWU4mcaCjW4REdoKQ54xNQmYT9274=
Subject key identifier:   E0:92:FC:0F:06:30:B7:71:1F:47:F0:3A:B3:70:22:A6:19:EF:14:D1
Certificate issuer:       /CN=8E95D3CD0B54F4CD3BC974AC0D3589B283049569
Certificate serial:       5B8919DF2BE64712A4BCA2F1E319F676EB0774EA
Authority key identifier: 8E:95:D3:CD:0B:54:F4:CD:3B:C9:74:AC:0D:35:89:B2:83:04:95:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/323830343a333666343a3a2f33322d3333203d3e20323636333832.roa
Signing time:             Wed 30 Jul 2025 15:20:34 +0000
ROA not before:           Wed 30 Jul 2025 15:15:34 +0000
ROA not after:            Wed 29 Jul 2026 15:20:34 +0000
asID:                     266382
IP address blocks:        2804:36f4::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.crl
                          rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 01:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:89:19:df:2b:e6:47:12:a4:bc:a2:f1:e3:19:f6:76:eb:07:74:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E95D3CD0B54F4CD3BC974AC0D3589B283049569
        Validity
            Not Before: Jul 30 15:15:34 2025 GMT
            Not After : Jul 29 15:20:34 2026 GMT
        Subject: CN=E092FC0F0630B7711F47F03AB37022A619EF14D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:76:91:03:17:02:06:ca:5d:30:df:69:cf:1d:
                    c6:74:76:63:7b:c1:2c:4c:b1:63:29:05:5a:ff:55:
                    71:9e:b9:30:1e:a0:35:08:e6:50:ff:17:34:e6:1d:
                    b4:76:0a:b2:68:af:0f:c0:31:73:ce:5b:9d:f0:66:
                    1c:f4:14:2b:5b:76:b6:60:bc:f1:35:d5:19:4e:61:
                    cf:41:f1:7d:28:cb:24:1b:09:d7:91:6d:01:73:80:
                    a8:b4:3f:89:75:45:ef:3f:e6:45:36:9d:fa:35:77:
                    dd:54:ac:5b:b4:8e:53:2c:49:9f:7b:f7:9c:4d:68:
                    90:3b:2a:cf:3a:b7:72:6a:fa:f1:a7:7b:48:10:e2:
                    8c:b6:94:dc:33:06:ab:fe:79:74:e1:a6:32:0c:53:
                    7f:26:a9:98:7e:47:eb:e1:4c:0e:a8:12:62:48:89:
                    75:3b:66:a3:e0:e3:a4:98:d3:b6:5b:7a:5f:71:83:
                    dc:6a:3d:cf:b2:6e:3f:7c:bf:01:8a:ec:cf:e6:67:
                    39:75:b5:e9:d2:49:0b:85:c2:57:71:53:e8:ce:55:
                    cb:9a:c5:a0:ea:31:e6:40:c8:96:29:72:d1:0d:cb:
                    df:d0:86:b4:c7:15:89:8e:00:f3:23:da:18:16:1f:
                    0d:4a:8a:f5:17:52:f0:cd:d9:e8:34:b0:63:f3:1f:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:92:FC:0F:06:30:B7:71:1F:47:F0:3A:B3:70:22:A6:19:EF:14:D1
            X509v3 Authority Key Identifier:
                keyid:8E:95:D3:CD:0B:54:F4:CD:3B:C9:74:AC:0D:35:89:B2:83:04:95:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/323830343a333666343a3a2f33322d3333203d3e20323636333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:38:dc:f9:92:d8:da:ec:62:8e:03:70:ff:c7:11:f1:d0:46:
         86:6f:6c:e1:d2:cb:ea:e5:c9:94:73:b8:b6:75:13:f3:10:81:
         3d:92:d3:97:3c:27:e6:c8:c8:f4:dc:ea:bf:90:b1:e6:cd:b3:
         89:8f:df:d2:b7:78:23:09:5c:1f:4c:b3:92:d5:ab:38:a6:7d:
         2a:3f:05:ba:2e:0b:6a:0e:18:34:47:c8:2b:85:28:4e:52:a7:
         6c:3f:d8:4d:bb:06:89:74:88:71:d2:d2:e2:07:f5:54:97:8d:
         a3:6f:e5:9b:df:d4:f3:44:dd:48:0c:cb:a4:36:e8:9c:e5:83:
         62:06:5a:00:d2:0a:71:76:14:b7:d8:f3:6c:d4:17:17:59:28:
         10:3a:5a:77:9c:f4:b3:59:96:aa:74:0d:97:29:e7:67:03:55:
         16:4b:1b:bb:48:75:45:58:91:7e:a8:60:35:d9:86:0e:e9:af:
         45:4e:bd:b2:7f:c2:f4:ea:fe:28:0a:c0:1c:68:b8:f0:d3:de:
         a4:bd:49:6e:7c:68:a4:3a:cf:de:0b:fe:d9:9a:3f:a1:50:74:
         9d:34:c8:ed:83:be:4e:6a:68:5d:d4:9c:68:98:d0:06:b1:24:
         70:7d:86:d4:c5:c0:49:86:b9:43:2f:bc:5d:8e:85:f8:f8:48:
         d9:d6:a3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:48:03 2025 by rpki-client