Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a633030303a3a2f33342d3334203d3e20323632333532.roa
File:                     323830343a3832303a633030303a3a2f33342d3334203d3e20323632333532.roa (raw, json)
Hash identifier:          p34TWqcaAL9lgA2WrtImUzJ6UWSm7b0Bak0gNJo1Hg0=
Subject key identifier:   9F:44:92:CA:81:15:2B:9F:44:B0:0C:9A:2F:66:13:99:95:6F:CC:0F
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       7DD48CBD3F7E70439C9FBE28466E62EE2F5F0FA4
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a633030303a3a2f33342d3334203d3e20323632333532.roa
Signing time:             Tue 12 Aug 2025 14:48:16 +0000
ROA not before:           Tue 12 Aug 2025 14:43:16 +0000
ROA not after:            Tue 11 Aug 2026 14:48:16 +0000
asID:                     262352
IP address blocks:        2804:820:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d4:8c:bd:3f:7e:70:43:9c:9f:be:28:46:6e:62:ee:2f:5f:0f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Aug 12 14:43:16 2025 GMT
            Not After : Aug 11 14:48:16 2026 GMT
        Subject: CN=9F4492CA81152B9F44B00C9A2F661399956FCC0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:c4:71:8b:e5:75:0a:66:01:6e:2a:8e:ed:
                    2c:c7:59:b5:26:b2:a5:d0:99:38:6b:3e:b0:57:b4:
                    d3:bc:32:2e:42:2a:a8:29:90:cb:95:ea:41:17:fc:
                    5a:7a:d9:b1:6e:d6:52:7d:54:e2:3c:c3:a7:e0:29:
                    da:08:fd:18:df:48:e7:69:20:ab:17:e7:d2:4f:41:
                    0c:f0:da:e3:34:80:8c:38:d4:0e:0d:ac:0f:1c:1f:
                    6b:4a:5d:17:35:3f:64:a9:1b:89:f3:5e:e2:0d:3f:
                    15:2a:dd:9d:43:df:cb:3f:35:22:df:a5:a4:c0:e0:
                    71:fc:f8:57:19:97:2f:7e:20:ed:42:1e:2b:6a:80:
                    d6:c1:57:11:8b:42:f3:92:42:46:d6:1b:a9:c2:6f:
                    b9:08:10:ea:b5:e6:8f:13:78:0b:78:0b:dc:fc:e9:
                    e3:96:00:90:27:41:cb:4d:64:45:0a:50:38:b7:74:
                    b5:51:7d:35:db:98:c3:b1:04:5e:98:a9:d5:9b:a5:
                    df:53:ad:f9:f2:fc:b6:ff:ec:3b:e2:e5:2e:0b:e1:
                    c7:24:fe:bb:0c:bb:23:49:ac:81:9d:2e:ff:04:55:
                    65:4c:f8:2c:41:28:43:bb:04:52:4b:03:60:3c:bc:
                    91:8a:93:53:33:50:56:76:08:a5:92:7c:bb:f0:bb:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:44:92:CA:81:15:2B:9F:44:B0:0C:9A:2F:66:13:99:95:6F:CC:0F
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a633030303a3a2f33342d3334203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:820:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         63:04:30:da:03:c7:7c:98:2a:65:08:3a:23:8e:93:6f:0b:0f:
         c5:94:04:57:9d:0e:50:44:fc:c7:97:fc:4f:e6:a5:2c:a6:16:
         5f:81:e6:76:ba:d6:9f:9e:9d:c7:d7:f8:e2:e9:1d:fc:46:dd:
         1b:1b:99:10:82:46:05:60:14:b7:6a:82:83:a7:57:af:29:e4:
         17:76:3c:5f:ff:43:39:9d:86:0f:55:cb:75:6b:4e:5f:a8:6c:
         f0:7d:50:d7:4b:8a:18:f5:a0:1c:1f:23:8c:8f:5d:6a:4b:73:
         40:19:13:a4:0d:4e:84:d9:7e:90:81:66:3f:7e:ab:eb:72:f7:
         86:8e:1a:d1:28:76:23:d2:c1:5b:8c:91:e2:43:63:b8:7a:a1:
         bc:8d:4d:fd:5c:6d:60:c4:27:8f:33:5a:12:04:27:55:af:2b:
         1c:47:54:f6:ad:dd:dd:c5:c3:c0:b6:4b:f1:c4:9b:62:84:17:
         b0:60:0a:f8:39:0b:93:7b:ec:45:cc:1b:b9:39:08:2a:98:6d:
         2f:0b:0b:21:53:e7:11:89:32:c4:f2:63:89:0f:ae:1f:70:ef:
         b5:a0:54:41:e0:54:81:02:28:bb:64:3d:24:3b:9b:d2:79:92:
         2d:4b:f7:d2:33:07:64:fb:c6:e5:df:d0:ad:ba:dd:5c:e1:9d:
         53:b6:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:58:46 2025 by rpki-client