Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a343030303a3a2f33342d3334203d3e20323632333532.roa
File:                     323830343a3832303a343030303a3a2f33342d3334203d3e20323632333532.roa (raw, json)
Hash identifier:          NQ5C/UIscuMit+5F3IASlDT/gd1mbbS7hWCI9Il5/aQ=
Subject key identifier:   2A:1D:27:0E:30:38:13:64:13:27:E4:24:36:4F:36:94:3B:87:4D:20
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       5E750F66B5714C182A1D7B73817EA967A2EAE3F9
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a343030303a3a2f33342d3334203d3e20323632333532.roa
Signing time:             Tue 12 Aug 2025 14:48:16 +0000
ROA not before:           Tue 12 Aug 2025 14:43:16 +0000
ROA not after:            Tue 11 Aug 2026 14:48:16 +0000
asID:                     262352
IP address blocks:        2804:820:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:75:0f:66:b5:71:4c:18:2a:1d:7b:73:81:7e:a9:67:a2:ea:e3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Aug 12 14:43:16 2025 GMT
            Not After : Aug 11 14:48:16 2026 GMT
        Subject: CN=2A1D270E303813641327E424364F36943B874D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:ca:86:e0:96:0e:bb:f3:9c:8e:f8:3f:eb:
                    b0:fa:bf:45:2c:47:91:57:0f:1a:16:82:d0:88:96:
                    33:8e:b8:aa:9d:a4:81:6f:61:c4:c9:ef:dd:ed:7d:
                    ee:86:ca:af:f2:71:90:3d:c8:c8:79:fd:fa:5c:71:
                    a3:67:26:8e:1b:95:bb:55:7a:a2:be:6c:d2:d8:31:
                    8c:83:85:5b:ce:25:60:75:46:3b:63:13:1d:12:0a:
                    9b:9b:28:ed:ec:96:e5:7d:ff:d6:e9:39:60:79:2f:
                    7a:28:43:eb:60:7a:d0:17:8e:ee:23:f7:1d:07:c0:
                    1f:4f:14:bc:3d:e9:6e:7a:6c:17:8d:fb:07:98:2f:
                    27:48:65:64:d5:5c:9c:02:cf:26:c0:5e:f6:50:3b:
                    80:b0:d5:72:00:df:78:7f:b1:a7:d5:6b:96:65:a9:
                    f9:25:b5:f1:5c:7d:f6:18:ee:be:25:e2:86:42:8a:
                    1d:ec:5e:df:03:89:1a:de:18:73:b0:ec:84:dd:c8:
                    bc:42:e3:a3:1e:0c:7d:f5:03:cb:5f:0d:24:4d:06:
                    1f:25:fb:76:5d:79:3c:89:44:bf:51:d6:eb:72:3e:
                    60:f7:97:fe:59:6d:2a:04:0b:1b:5b:00:e0:1f:9f:
                    89:df:ce:44:7f:74:d3:af:6e:c6:4c:bb:09:41:0b:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1D:27:0E:30:38:13:64:13:27:E4:24:36:4F:36:94:3B:87:4D:20
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a343030303a3a2f33342d3334203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:820:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         71:13:49:61:42:ae:f1:79:f5:4d:25:21:78:99:2c:61:19:24:
         79:c5:e8:94:44:52:f3:d8:37:46:2b:c8:33:56:cb:b3:14:11:
         6a:7f:f2:dc:5e:c9:84:d5:cc:4b:45:b1:a4:5d:07:da:7b:48:
         46:5e:13:ec:90:7b:59:94:89:25:29:22:83:f2:ce:a0:2c:e6:
         cc:c5:8f:f1:51:46:7d:2e:63:21:5a:86:d0:9b:03:42:0e:76:
         b0:6d:27:7a:39:32:0d:58:21:45:e3:96:f0:6b:50:f1:e0:da:
         ac:a1:f8:d9:a2:b3:bd:e4:d9:55:7f:01:d6:5c:87:7c:bd:01:
         ca:c7:95:71:9e:80:3f:fd:ea:71:6b:c1:1b:31:61:57:5d:06:
         af:6c:83:37:85:05:f7:64:91:03:36:24:73:19:2b:5f:2d:b1:
         43:b2:79:33:f7:02:44:92:02:9c:2f:54:16:a4:e4:bc:99:15:
         3e:b3:70:16:e1:d5:78:cd:4e:bc:20:9b:91:5e:60:19:85:27:
         c8:3e:51:16:23:45:fa:d2:77:10:18:e4:25:3e:05:90:59:f5:
         a1:ca:99:dc:3b:8d:0a:ce:b9:b4:25:df:5f:bb:93:6e:3b:ad:
         c4:98:bf:de:dc:c2:26:58:fd:97:b0:77:dd:95:5c:4f:9b:14:
         06:4a:57:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:58:26 2025 by rpki-client