Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/323830343a373939633a3a2f33332d3333203d3e20323731333136.roa
File:                     323830343a373939633a3a2f33332d3333203d3e20323731333136.roa (raw, json)
Hash identifier:          9dyqlba/doiFEieE0RYOotWF/WfNx8FttH4AXlnPn5s=
Subject key identifier:   8F:06:06:B8:20:EE:A5:B4:DA:8C:C4:2C:30:57:A4:BA:E5:BF:3C:17
Certificate issuer:       /CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
Certificate serial:       56E52316147C6095B7678C34ADCAD6E711ED3CA2
Authority key identifier: 4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/323830343a373939633a3a2f33332d3333203d3e20323731333136.roa
Signing time:             Tue 12 Aug 2025 18:34:27 +0000
ROA not before:           Tue 12 Aug 2025 18:29:27 +0000
ROA not after:            Tue 11 Aug 2026 18:34:27 +0000
asID:                     271316
IP address blocks:        2804:799c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl
                          rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 12:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e5:23:16:14:7c:60:95:b7:67:8c:34:ad:ca:d6:e7:11:ed:3c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
        Validity
            Not Before: Aug 12 18:29:27 2025 GMT
            Not After : Aug 11 18:34:27 2026 GMT
        Subject: CN=8F0606B820EEA5B4DA8CC42C3057A4BAE5BF3C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:7f:05:8a:88:bf:b2:64:ae:70:e6:cf:5c:
                    90:a2:23:68:b0:b0:90:ca:2f:82:76:08:df:18:4e:
                    d7:a9:40:79:b4:cd:b4:f6:a6:0c:7b:c2:6b:54:94:
                    5b:cf:f9:5b:61:fb:24:d3:7e:75:06:9e:9f:ef:86:
                    fa:d8:39:87:41:d4:09:04:9e:59:e3:85:2b:ce:b4:
                    21:c5:e9:19:67:39:98:c4:43:04:f6:36:73:a2:8f:
                    0c:00:60:fc:db:0e:70:7f:c3:99:a4:a8:9e:f6:46:
                    63:2e:3a:23:7c:3a:01:af:4d:6c:64:e6:4f:5d:a2:
                    2d:4d:17:e3:a3:4a:79:2a:2d:80:44:1a:3e:9c:95:
                    27:1a:fc:7f:68:4b:1a:fa:51:7a:49:70:63:5c:01:
                    d9:00:32:fc:a4:13:b5:24:3d:e3:8a:a7:50:b3:f3:
                    5c:a2:59:b4:01:52:73:56:d6:06:7b:83:af:78:3e:
                    7e:42:4e:7d:2a:c0:02:f0:3f:ce:b2:6e:d3:1c:fd:
                    c4:0a:2f:2f:3c:b0:20:a2:f7:91:19:f5:3a:cb:a0:
                    1e:54:40:73:96:6c:be:22:72:85:5b:7f:4f:cb:6d:
                    6b:e0:84:b7:ef:d6:c1:16:8e:31:e4:46:c0:4c:1b:
                    5f:e3:35:8f:c1:d8:0c:c4:76:db:70:0b:0e:45:82:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:06:06:B8:20:EE:A5:B4:DA:8C:C4:2C:30:57:A4:BA:E5:BF:3C:17
            X509v3 Authority Key Identifier:
                keyid:4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/323830343a373939633a3a2f33332d3333203d3e20323731333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:799c::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:06:db:b7:0f:ee:d3:b4:02:46:70:b1:3f:af:a7:b0:7f:
         43:1b:65:90:d9:4a:d8:97:62:1d:55:59:21:19:0b:e4:14:e8:
         37:12:71:82:5a:6d:89:7b:26:ba:b2:40:d6:9e:bf:a2:ed:52:
         35:bc:78:f8:9e:9f:cd:dc:0c:06:0d:16:17:50:ae:10:a0:b2:
         7a:9e:7a:bd:80:87:91:3f:60:7b:86:cd:c4:27:b1:df:6f:84:
         d7:f0:a6:49:34:55:89:2b:bd:d4:e4:30:0e:df:79:02:e4:8a:
         d6:87:2e:aa:6f:fc:f0:ab:bb:c1:f1:2f:0c:3f:3b:bb:e3:44:
         18:c9:1b:55:99:a1:11:3a:fe:5c:cd:74:7d:04:ac:4f:2b:ca:
         44:fe:d7:0d:4b:6b:de:3e:98:54:b9:1b:8e:59:d2:69:ba:35:
         73:1f:00:76:40:c7:e1:03:59:59:05:b9:2e:c1:87:ab:51:64:
         d8:c3:d2:c1:03:0e:a7:00:66:9e:dc:ff:5c:dd:59:b4:9b:fd:
         99:ea:b1:27:7d:ba:7a:fa:f3:ed:79:99:5c:d6:42:f2:d8:7e:
         1c:74:ef:b0:50:b1:6b:26:38:21:f5:8a:61:85:d5:5f:f0:91:
         1e:62:62:17:67:5c:f4:71:ea:51:ca:67:c6:9f:8a:35:dc:44:
         4a:2c:26:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:35:15 2025 by rpki-client