Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/323830343a366336633a3a2f33322d3438203d3e20323730343637.roa
File:                     323830343a366336633a3a2f33322d3438203d3e20323730343637.roa (raw, json)
Hash identifier:          8gZng/LcYVjRvdKcIWLphoxYezlVpCWANLcyK6msRE4=
Subject key identifier:   22:38:3B:B5:D2:5B:5C:3F:86:6A:C9:0C:CF:BB:A0:9F:14:D4:6F:84
Certificate issuer:       /CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
Certificate serial:       75933B5B358F5FD2C4A6866463C94B56DA50DFFD
Authority key identifier: CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/323830343a366336633a3a2f33322d3438203d3e20323730343637.roa
Signing time:             Fri 15 Aug 2025 04:12:35 +0000
ROA not before:           Fri 15 Aug 2025 04:07:35 +0000
ROA not after:            Fri 14 Aug 2026 04:12:35 +0000
asID:                     270467
IP address blocks:        2804:6c6c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl
                          rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:93:3b:5b:35:8f:5f:d2:c4:a6:86:64:63:c9:4b:56:da:50:df:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
        Validity
            Not Before: Aug 15 04:07:35 2025 GMT
            Not After : Aug 14 04:12:35 2026 GMT
        Subject: CN=22383BB5D25B5C3F866AC90CCFBBA09F14D46F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:3a:91:25:52:70:ca:bc:35:f6:6d:2b:26:
                    bb:08:a6:0d:7d:96:dd:c4:26:12:d8:fe:84:08:e1:
                    2c:46:9b:9b:b6:f8:bc:04:66:fa:2c:02:53:b9:35:
                    2c:8b:6d:20:01:37:b6:f8:0b:78:79:b9:a7:d1:b5:
                    69:75:dc:a0:ed:61:0e:d5:d5:15:dc:d2:50:e1:3b:
                    c9:82:8a:56:0a:16:1e:0b:24:11:1c:2f:8c:7f:58:
                    69:e6:8b:73:fa:f2:52:6c:83:71:30:59:e9:05:d2:
                    a8:da:a1:9c:0b:ff:5e:04:1d:9f:ca:37:68:f5:1c:
                    e0:66:13:08:cc:14:e2:3d:a3:03:71:43:6a:86:45:
                    d5:4d:95:af:6c:f8:0a:86:e7:84:77:52:43:54:ed:
                    f2:d7:33:ac:0a:6a:ab:53:df:e7:83:ed:df:cf:cc:
                    d2:d8:67:aa:a6:ba:55:ef:20:60:41:c5:99:c7:95:
                    f9:90:74:09:4d:8e:e0:dd:39:1c:81:ee:54:5a:25:
                    ee:b6:24:ae:c7:ef:f2:83:d3:be:7e:0c:e9:7e:21:
                    8d:22:a3:b6:69:b2:8d:82:8d:b5:58:71:db:14:9e:
                    4c:87:f1:53:98:a4:a7:9c:e2:fd:23:08:22:f1:85:
                    04:46:ac:ca:e3:e6:a8:bc:34:4b:7f:93:66:e3:62:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:38:3B:B5:D2:5B:5C:3F:86:6A:C9:0C:CF:BB:A0:9F:14:D4:6F:84
            X509v3 Authority Key Identifier:
                keyid:CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/323830343a366336633a3a2f33322d3438203d3e20323730343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:22:49:01:e9:d6:cd:f1:de:b9:2f:c4:22:2c:87:27:99:12:
         56:e6:fb:43:ab:c0:87:c6:bc:4b:74:31:8e:4e:aa:b0:8d:b8:
         f3:48:66:76:d8:cc:45:b2:1d:a8:5d:15:cd:50:33:6c:7d:77:
         6e:86:7c:98:f6:d6:1d:d5:e6:61:b0:ff:d0:fd:22:b8:a1:94:
         e5:a8:9e:ab:23:80:8f:9a:e0:7d:51:0c:7d:8a:21:6d:9f:8f:
         62:cf:fb:ae:bb:32:cc:95:ad:d3:13:9b:b3:65:a8:9b:88:0c:
         6e:21:85:fb:26:d1:cc:77:14:a3:4f:1f:b8:5b:4a:b5:50:6a:
         13:fd:49:db:59:d2:19:80:31:ab:43:6a:d4:7d:ec:4c:6c:8b:
         2b:e4:6a:30:37:8d:2e:28:49:d4:4d:82:69:6d:ff:00:3f:db:
         1b:90:f7:1c:91:ec:a3:8c:bf:2a:b8:9a:7b:0b:94:d6:90:f8:
         41:47:60:e0:4e:c2:3e:1b:6c:56:2b:c7:82:8e:a9:2d:0e:c5:
         59:bf:6a:b0:fe:d0:ad:74:87:d3:4b:1a:aa:47:65:38:e3:da:
         b5:67:cb:b3:00:a1:a4:d2:f7:ff:4f:58:b2:46:29:23:a8:df:
         95:9c:04:9c:23:46:b9:86:dc:17:f9:43:d7:e9:f1:9a:19:52:
         3c:14:0e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:26:20 2025 by rpki-client