Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a323030303a3a2f33362d3438203d3e203532353331.roa
File:                     323830343a6466343a323030303a3a2f33362d3438203d3e203532353331.roa (raw, json)
Hash identifier:          9aQXmHUcHUahSfnvYcakNp/MRKql1BmwASPPiYVRCRU=
Subject key identifier:   9C:F8:71:02:A2:25:97:C8:92:88:DA:0F:FB:01:A1:EC:DE:22:EB:F4
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       731EA52B1F1DDC2B99C0590F9ADC80CBD40DB2F4
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a323030303a3a2f33362d3438203d3e203532353331.roa
Signing time:             Wed 30 Jul 2025 20:07:28 +0000
ROA not before:           Wed 30 Jul 2025 20:02:28 +0000
ROA not after:            Wed 29 Jul 2026 20:07:28 +0000
asID:                     52531
IP address blocks:        2804:df4:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 16:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1e:a5:2b:1f:1d:dc:2b:99:c0:59:0f:9a:dc:80:cb:d4:0d:b2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Jul 30 20:02:28 2025 GMT
            Not After : Jul 29 20:07:28 2026 GMT
        Subject: CN=9CF87102A22597C89288DA0FFB01A1ECDE22EBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:23:46:8b:fb:ef:90:1b:0c:b3:48:e4:ba:fe:
                    ea:f3:e2:cc:65:c8:6a:9d:0d:49:0c:e6:f0:3f:17:
                    f1:84:14:69:2a:6b:c4:22:e5:dc:5c:a5:04:2a:07:
                    58:d5:ed:5b:2d:b0:d2:2c:9e:92:21:83:0e:1f:69:
                    77:5a:b3:75:a7:58:3d:4c:f9:ed:23:84:39:ed:40:
                    6b:7a:83:6f:b1:a9:20:29:ef:1c:ce:52:a2:9a:9d:
                    c6:5d:9a:e0:fb:c9:14:fb:74:0f:f3:05:ee:9f:97:
                    da:f4:d7:5e:9f:44:3f:9e:1d:28:8d:84:66:11:de:
                    54:b0:8e:17:a1:b7:65:e3:16:00:a4:e3:a3:3b:fa:
                    34:29:b7:c8:6a:41:7f:1b:b4:45:87:1d:cf:ba:92:
                    fb:84:c9:1c:14:b4:15:66:29:cf:cb:bd:72:0c:fa:
                    85:ea:83:aa:66:9d:35:2c:a6:55:3d:aa:21:ad:0e:
                    f2:c2:77:a4:3f:87:84:2e:d8:2d:01:d4:4b:bc:ed:
                    a2:4c:d2:f2:4d:f6:99:9a:41:1f:2c:07:a5:26:5f:
                    7c:6a:4d:2c:fc:52:34:f6:0d:5a:5c:ab:24:5b:63:
                    7f:74:73:b4:b5:3f:fe:a3:0f:8b:14:ec:ff:b1:e1:
                    f4:9b:9b:5e:6a:39:c0:ec:e1:37:36:aa:c0:ac:ae:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F8:71:02:A2:25:97:C8:92:88:DA:0F:FB:01:A1:EC:DE:22:EB:F4
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a323030303a3a2f33362d3438203d3e203532353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:df4:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:2e:d8:6d:25:8a:8a:74:b7:6f:10:3d:f3:7d:02:ee:2a:
         32:27:18:ca:1c:e3:74:d8:80:07:c8:98:5d:43:57:3a:0d:01:
         83:df:d6:d7:ca:b2:27:2f:b5:08:08:bc:87:2e:04:3c:11:40:
         a0:e1:c4:50:09:10:b4:f9:32:af:d8:96:2d:f2:6d:6a:ca:5f:
         0d:17:7e:10:86:db:72:d8:68:d9:01:64:b1:f7:13:2d:e6:f4:
         b2:e1:bc:5f:b0:10:17:f1:17:39:cc:a9:fc:2a:de:8d:48:a2:
         80:83:fd:33:27:8c:a8:94:38:43:d7:97:36:b3:c8:b6:92:50:
         a6:41:62:13:e6:f0:8b:b7:52:da:a7:4d:04:ad:da:cc:e7:80:
         af:25:e2:66:1b:c5:6e:25:cd:91:f0:02:77:da:9f:91:0a:b2:
         c8:54:97:b7:01:22:7f:b7:bc:b2:88:c2:16:73:c7:71:1d:9f:
         9e:d1:e8:bc:fa:c4:50:c8:c8:06:5d:c5:a7:bc:d5:bb:5a:83:
         9d:30:20:07:1b:98:d1:6c:12:09:6a:ad:fb:f1:2f:64:9b:ac:
         6f:d2:3d:5f:98:ca:a8:8f:b8:4a:bb:4c:83:1d:fc:0e:bc:ad:
         a3:67:de:ce:fc:ea:c0:8d:93:a0:5f:8c:82:83:a2:1c:2d:d3:
         f8:06:42:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:15:40 2025 by rpki-client