Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33322d3333203d3e203532383938.roa
File:                     323830343a6139633a3a2f33322d3333203d3e203532383938.roa (raw, json)
Hash identifier:          HpYSXVRiMUCEyphfyUnjYZ8d4vusVhaATgf/hl2rd0Q=
Subject key identifier:   22:DB:81:2C:14:15:E2:1A:7B:2F:8B:9E:09:FA:22:D1:9F:5D:31:7B
Certificate issuer:       /CN=C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6
Certificate serial:       263389C043A0C3A70731FACF44AC9CBAFB984E37
Authority key identifier: C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33322d3333203d3e203532383938.roa
Signing time:             Mon 07 Jul 2025 16:53:28 +0000
ROA not before:           Mon 07 Jul 2025 16:48:28 +0000
ROA not after:            Mon 06 Jul 2026 16:53:28 +0000
asID:                     52898
IP address blocks:        2804:a9c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl
                          rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:33:89:c0:43:a0:c3:a7:07:31:fa:cf:44:ac:9c:ba:fb:98:4e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6
        Validity
            Not Before: Jul  7 16:48:28 2025 GMT
            Not After : Jul  6 16:53:28 2026 GMT
        Subject: CN=22DB812C1415E21A7B2F8B9E09FA22D19F5D317B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:33:ee:96:e1:7e:36:26:ef:9d:b2:0a:88:
                    85:b8:af:1a:f4:41:18:d7:77:01:90:15:88:49:e5:
                    4e:7e:f2:53:69:01:25:be:b8:dd:b3:26:ec:af:38:
                    0d:94:a9:dd:7d:69:66:64:bd:9a:0c:4e:24:b9:96:
                    37:4d:47:6c:1c:24:85:87:b7:0a:57:e4:8f:93:ff:
                    aa:e0:3f:eb:b9:20:cf:2e:6b:ad:6d:ba:2c:39:ae:
                    e0:07:ef:5a:de:1d:3f:01:8b:4d:49:b6:15:2f:69:
                    20:33:f7:67:6f:3d:7e:f5:73:37:a4:e7:e9:35:d0:
                    e8:54:91:d7:82:7b:0c:a0:db:cd:46:53:50:50:e8:
                    f8:de:f2:a7:c5:4c:fa:c4:40:61:69:22:80:ca:7d:
                    4b:39:80:fc:4b:16:06:3c:c7:4c:a5:bc:50:0f:07:
                    4b:13:b1:12:a0:2f:3b:11:4f:d3:28:5c:21:71:8f:
                    2c:48:9a:8c:72:16:4b:bb:f7:a1:54:56:88:8b:3d:
                    ab:95:cb:10:a7:6f:6c:8a:36:45:e2:19:24:76:c3:
                    a5:7e:07:d1:d4:fa:99:b1:16:58:69:24:ec:44:15:
                    14:a3:de:1d:a3:32:13:7a:c6:a0:62:b9:d5:e8:43:
                    1b:f5:ee:32:15:32:41:7c:26:4a:65:d8:c3:cd:b8:
                    48:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DB:81:2C:14:15:E2:1A:7B:2F:8B:9E:09:FA:22:D1:9F:5D:31:7B
            X509v3 Authority Key Identifier:
                keyid:C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33322d3333203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:08:51:3c:dc:26:71:1b:3d:73:fc:36:5c:5b:34:b3:74:e7:
         0d:11:69:20:8a:06:98:a1:46:6b:b9:c7:c2:9a:75:ca:6a:b6:
         9b:05:d6:69:34:25:a2:e1:4d:98:13:08:a4:0e:74:1b:ce:b0:
         20:2e:77:00:58:de:d3:36:5d:80:ff:c6:13:a6:e1:f0:29:77:
         3e:1c:59:97:94:b8:32:22:7a:79:3e:b6:83:c0:fb:b2:24:3a:
         ac:15:ed:cf:d3:66:c6:89:c8:ff:a7:0c:b1:59:e9:da:1c:b9:
         3e:e7:28:0a:3a:c3:94:4b:df:13:21:c0:d0:30:26:a6:31:c4:
         0d:e8:67:7f:7e:c2:b9:6b:ed:8e:2c:7a:ce:08:55:72:db:7b:
         fe:b3:c9:7f:8f:c7:6e:66:2b:d0:d7:4e:34:eb:c7:44:9a:4a:
         5c:ec:71:a4:6e:fc:fa:71:7b:8f:e3:bf:d0:b3:73:9a:0d:e1:
         60:a6:22:2e:74:a4:6f:4d:ec:d2:ac:83:c2:bd:1d:4e:47:78:
         00:f7:6f:24:65:fe:53:5f:24:31:6e:3c:b7:17:80:c4:3d:a5:
         45:d3:f5:90:88:cd:31:9e:be:81:ec:9d:6c:43:c5:dc:37:d8:
         4f:3e:46:1c:f5:f0:cc:e6:ce:00:25:90:e5:a9:4f:bb:35:f1:
         10:5c:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 18:53:58 2025 by rpki-client