Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/323830343a336138343a3a2f33322d313238203d3e20323636303933.roa
File:                     323830343a336138343a3a2f33322d313238203d3e20323636303933.roa (raw, json)
Hash identifier:          tUH0y7lJOPWVY/0fxS90V+4wxxrTg1/bjfiV3xCNsrs=
Subject key identifier:   91:02:9B:DE:05:74:40:E6:AA:F4:B7:1A:F3:BF:02:59:6F:6D:1F:CB
Certificate issuer:       /CN=C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19
Certificate serial:       3B25875E29A47CB401BE96960B67A74F5989BA5D
Authority key identifier: C0:8F:5E:3E:F9:9E:E2:AC:9D:C7:62:2C:AF:1A:A2:15:18:75:4C:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/323830343a336138343a3a2f33322d313238203d3e20323636303933.roa
Signing time:             Wed 25 Jun 2025 20:32:27 +0000
ROA not before:           Wed 25 Jun 2025 20:27:27 +0000
ROA not after:            Wed 24 Jun 2026 20:32:27 +0000
asID:                     266093
IP address blocks:        2804:3a84::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19.crl
                          rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 01:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:25:87:5e:29:a4:7c:b4:01:be:96:96:0b:67:a7:4f:59:89:ba:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19
        Validity
            Not Before: Jun 25 20:27:27 2025 GMT
            Not After : Jun 24 20:32:27 2026 GMT
        Subject: CN=91029BDE057440E6AAF4B71AF3BF02596F6D1FCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:92:ad:c7:81:b9:9c:e8:6b:ad:6a:4f:d0:41:
                    8c:c2:36:c2:e7:33:8e:dc:ce:0a:12:14:67:95:d4:
                    6e:dd:34:17:74:70:88:00:23:32:0f:2d:df:a8:8e:
                    b5:2e:be:74:8e:e6:cf:09:75:f8:4b:fa:b3:81:2e:
                    2f:35:ed:59:89:dd:a6:fc:ed:d5:86:51:26:f7:77:
                    48:a8:02:dd:02:f1:ab:30:5a:d2:2e:57:46:46:36:
                    68:5e:f1:d2:02:92:cf:0c:cf:a7:11:37:27:ab:c8:
                    d5:7f:80:6a:27:a0:e9:7f:a1:64:ed:60:11:ed:5a:
                    a3:3d:b5:91:44:f8:1a:b7:fb:ee:cc:5f:a2:f2:c9:
                    93:31:06:41:20:84:e4:e2:36:52:ee:ef:0c:23:39:
                    e9:e0:ef:9c:7f:ee:e0:fa:19:cd:cc:b1:a2:f5:ea:
                    9d:b4:0b:7c:6e:30:b3:f1:2c:a3:a0:cc:af:2f:41:
                    48:f9:26:d0:d9:3f:99:83:3d:c2:82:43:3a:84:8d:
                    61:1f:cd:b7:dc:6e:1e:6d:ba:09:3e:eb:4a:96:d3:
                    c5:a5:78:17:a4:ab:17:9e:47:c7:ef:63:bf:36:c4:
                    08:de:7e:de:df:00:bc:a1:2b:57:28:16:27:92:db:
                    81:2b:5b:2b:52:b4:51:4f:5c:23:5d:1e:f5:fb:3a:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:02:9B:DE:05:74:40:E6:AA:F4:B7:1A:F3:BF:02:59:6F:6D:1F:CB
            X509v3 Authority Key Identifier:
                keyid:C0:8F:5E:3E:F9:9E:E2:AC:9D:C7:62:2C:AF:1A:A2:15:18:75:4C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/323830343a336138343a3a2f33322d313238203d3e20323636303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a84::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:63:4c:df:f6:01:82:2a:cd:04:10:92:41:01:ea:b7:a7:b6:
         d3:82:a3:94:21:79:6e:89:fb:42:e2:52:70:61:7c:7e:55:8b:
         89:e3:86:e3:51:60:47:8d:e1:d6:8f:33:3a:75:81:10:92:92:
         4c:d2:16:1e:55:fc:75:c4:4e:78:a3:e4:13:30:69:3a:bc:01:
         8a:86:81:d4:76:b5:94:a5:5a:f0:03:82:c9:d6:03:31:22:42:
         95:e7:93:60:42:ef:18:e7:09:ca:a0:ea:e4:8c:02:07:20:60:
         f9:6c:b1:d4:97:f4:48:8e:56:75:e9:22:2c:e9:1a:44:6d:fb:
         f2:4b:07:2e:e6:69:b5:11:f8:51:08:4c:90:54:35:b2:4d:31:
         9a:46:0b:8d:c0:14:ab:f3:1f:d3:15:0b:8d:e2:59:0a:0f:f5:
         ea:9d:c9:d3:7d:8e:b6:45:73:96:6c:1a:db:d7:54:5d:81:e5:
         9b:8f:49:23:70:c3:35:c6:98:b0:60:ee:83:c0:c5:fb:78:53:
         ec:0c:35:16:7c:4d:f6:b1:e2:4d:42:76:a6:d3:41:1b:98:22:
         18:81:b4:9f:fc:7e:35:56:2f:d2:e0:9a:86:15:25:3c:fe:4a:
         78:07:32:ad:b5:cd:e1:80:87:06:db:0a:8f:aa:69:c7:be:c9:
         25:c6:c1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:19:50 2025 by rpki-client