Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a3a2f33342d3334203d3e20323632333532.roa
File:                     323830343a3832303a3a2f33342d3334203d3e20323632333532.roa (raw, json)
Hash identifier:          Ey3be7FD/aEBpk6WBSFN6v9qHyiEnyqC03hmogQrfrQ=
Subject key identifier:   B0:70:FD:0B:A7:76:24:18:82:9D:85:AF:D2:BE:54:14:C5:65:E7:46
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       15A8AB36B04ED946DDD03C6F9EF8C484DBFDAA64
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a3a2f33342d3334203d3e20323632333532.roa
Signing time:             Tue 12 Aug 2025 14:48:16 +0000
ROA not before:           Tue 12 Aug 2025 14:43:16 +0000
ROA not after:            Tue 11 Aug 2026 14:48:16 +0000
asID:                     262352
IP address blocks:        2804:820::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a8:ab:36:b0:4e:d9:46:dd:d0:3c:6f:9e:f8:c4:84:db:fd:aa:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Aug 12 14:43:16 2025 GMT
            Not After : Aug 11 14:48:16 2026 GMT
        Subject: CN=B070FD0BA7762418829D85AFD2BE5414C565E746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9e:8d:16:fc:3a:9c:b2:61:2d:2c:16:a2:4e:
                    89:0d:e7:b1:b8:95:e4:b9:d4:a7:83:6b:03:f9:a4:
                    b3:6f:1a:fa:02:84:fa:d7:b8:76:75:f9:b9:59:c7:
                    82:df:f9:66:de:ef:aa:17:bd:8f:66:27:e1:eb:61:
                    17:33:96:b0:7f:5f:35:e3:db:c7:9b:69:e3:1e:51:
                    a6:8c:ff:c0:f9:96:a7:55:ad:da:86:a3:c2:81:ee:
                    1c:01:d4:e5:8c:e0:b8:e3:54:f3:13:31:11:94:48:
                    57:dd:20:5c:6a:a3:97:18:91:38:61:4c:e8:33:0e:
                    7d:4e:96:ce:26:64:96:84:01:d9:dc:44:ae:4f:aa:
                    89:7b:69:e8:15:02:b7:5b:3b:c8:24:d1:f6:ae:02:
                    33:31:b2:30:5d:aa:4b:d4:ad:ca:78:7d:2e:27:a9:
                    67:4d:a0:3b:32:1f:0e:23:54:d9:03:42:e5:9d:93:
                    b3:64:d8:4b:80:6b:2c:87:12:3f:30:eb:c7:ee:f4:
                    1e:0a:b8:05:4a:7c:00:80:22:b0:b8:31:3a:be:1a:
                    85:2a:75:60:db:23:04:25:b2:7f:4c:3c:c6:94:77:
                    a2:5a:ac:bc:7c:c1:ce:3a:d2:7e:3d:f2:b6:33:c3:
                    35:ab:29:60:0d:7f:6e:e8:b3:b1:d5:03:41:d1:f7:
                    cf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:70:FD:0B:A7:76:24:18:82:9D:85:AF:D2:BE:54:14:C5:65:E7:46
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a3a2f33342d3334203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:820::/34

    Signature Algorithm: sha256WithRSAEncryption
         9c:18:1d:6d:5b:a3:3c:a0:7a:82:7b:18:05:3c:82:f2:77:32:
         71:7b:22:ac:32:ed:e5:d5:82:8a:d3:1b:88:27:51:b9:7d:65:
         11:74:ad:a1:da:f0:ff:d0:bf:e7:0e:44:16:af:5b:18:d0:62:
         8c:f0:50:f6:5b:62:21:a9:4d:f8:d3:e7:b1:06:16:d8:f3:ca:
         9b:69:ab:dd:01:70:39:3c:06:02:1b:38:68:8a:4d:61:53:57:
         eb:02:0e:cc:f8:62:a2:6e:a7:6f:54:b3:d9:d4:7f:f1:13:8d:
         72:50:90:5d:38:7c:7c:87:cb:a8:da:6d:c0:a6:be:66:22:9a:
         e9:d7:5a:57:c4:bf:e1:54:ee:f1:b3:5e:95:77:74:4a:71:37:
         47:fa:f0:c2:fa:72:5a:57:46:97:ad:f1:b3:54:67:0a:31:3e:
         78:6d:fa:6a:81:70:3b:cb:a1:b0:e6:79:b3:19:61:e0:06:96:
         6b:01:a5:8a:68:4d:e4:dc:cb:ee:12:e1:d6:17:06:59:48:39:
         53:69:53:c1:e8:ec:32:4e:ef:a5:8b:df:75:d0:3b:19:5e:f0:
         f9:a3:4b:fa:d9:40:7c:ea:98:99:97:26:93:e7:01:fc:e0:6a:
         45:ba:49:4c:d8:d5:e2:36:c8:e4:3e:a6:bf:0c:44:c4:c5:ef:
         80:76:61:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:28:09 2025 by rpki-client