Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a383030303a3a2f33332d3333203d3e20323733373133.roa
File:                     323830343a386232303a383030303a3a2f33332d3333203d3e20323733373133.roa (raw, json)
Hash identifier:          NqeGFGDWomOhKu2J8FMLAvMq0CBhEyNDrWZ/ocR4ydI=
Subject key identifier:   9F:81:10:EA:8B:A3:40:13:F6:BF:11:1C:27:52:55:6A:FF:FB:4B:C4
Certificate issuer:       /CN=FC11C1CB9E5948F558300508F91916F7B94E7D49
Certificate serial:       79579F60566CF2C6426B534846CE3AD2FD2218ED
Authority key identifier: FC:11:C1:CB:9E:59:48:F5:58:30:05:08:F9:19:16:F7:B9:4E:7D:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC11C1CB9E5948F558300508F91916F7B94E7D49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a383030303a3a2f33332d3333203d3e20323733373133.roa
Signing time:             Mon 18 Aug 2025 19:46:51 +0000
ROA not before:           Mon 18 Aug 2025 19:41:51 +0000
ROA not after:            Mon 17 Aug 2026 19:46:51 +0000
asID:                     273713
IP address blocks:        2804:8b20:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/FC11C1CB9E5948F558300508F91916F7B94E7D49.crl
                          rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/FC11C1CB9E5948F558300508F91916F7B94E7D49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC11C1CB9E5948F558300508F91916F7B94E7D49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:57:9f:60:56:6c:f2:c6:42:6b:53:48:46:ce:3a:d2:fd:22:18:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC11C1CB9E5948F558300508F91916F7B94E7D49
        Validity
            Not Before: Aug 18 19:41:51 2025 GMT
            Not After : Aug 17 19:46:51 2026 GMT
        Subject: CN=9F8110EA8BA34013F6BF111C2752556AFFFB4BC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:7e:1a:80:ba:67:18:81:60:a1:ac:49:61:
                    fb:f0:ec:52:cd:24:53:0c:66:74:f9:2a:31:f4:9b:
                    17:0e:c2:16:58:69:4d:d3:33:de:27:f1:d3:a8:7c:
                    be:ae:7b:b6:0e:41:73:fd:a4:ba:12:c1:d9:e2:db:
                    cb:63:08:c6:27:37:c1:57:73:70:14:1f:17:27:23:
                    63:7c:94:7d:e2:4e:9e:4c:56:18:4a:04:86:0a:b0:
                    98:ca:80:64:a7:98:c5:5c:72:29:1c:66:5e:f1:f1:
                    7a:3f:70:12:75:a6:c2:4a:80:62:90:5a:75:b3:68:
                    92:24:84:d1:72:f7:bd:c3:fa:ee:c2:63:7d:c5:1c:
                    41:e1:8f:a7:72:8c:72:e9:c9:96:86:10:ad:a2:e4:
                    14:f6:89:eb:78:35:de:24:a4:a7:98:16:8b:37:d5:
                    a2:49:36:6f:b2:c3:8f:f3:56:33:1b:a1:d1:42:07:
                    ce:7c:a6:36:a7:6f:ea:40:1a:b7:e7:89:ad:64:e6:
                    77:ae:18:7f:2d:5b:8c:8d:dd:0f:41:da:2c:d1:86:
                    88:a4:16:e2:5d:13:3b:d8:6a:54:ec:f5:aa:af:4e:
                    51:ec:7a:70:9c:31:5a:11:44:64:09:70:c5:a8:86:
                    a9:7b:c0:fa:92:b6:ee:00:5d:1c:2a:9a:02:1d:a1:
                    48:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:81:10:EA:8B:A3:40:13:F6:BF:11:1C:27:52:55:6A:FF:FB:4B:C4
            X509v3 Authority Key Identifier:
                keyid:FC:11:C1:CB:9E:59:48:F5:58:30:05:08:F9:19:16:F7:B9:4E:7D:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/FC11C1CB9E5948F558300508F91916F7B94E7D49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC11C1CB9E5948F558300508F91916F7B94E7D49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a383030303a3a2f33332d3333203d3e20323733373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b20:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         78:63:c7:fd:46:f1:bf:c7:0d:c5:cf:03:29:72:87:08:91:3b:
         dd:c8:b4:6a:f9:0a:c4:fc:0c:6e:72:47:27:d0:24:7f:70:d6:
         9b:1d:88:52:c1:71:08:33:02:1d:c9:e5:aa:28:57:31:20:fb:
         38:cd:6c:b5:9f:76:a8:ab:26:36:04:f2:0a:4c:ba:9d:b3:f3:
         da:38:12:32:6a:e1:bf:95:1f:7d:b6:89:eb:59:22:a5:3f:fe:
         8e:8c:bc:37:c0:4c:09:89:6e:d8:bc:9b:57:22:d9:65:e0:46:
         94:2e:7d:53:46:3b:c0:5f:b2:92:53:c5:27:ca:d1:e4:de:00:
         22:fc:c7:9a:02:1d:56:dd:38:bf:f2:8d:5d:93:f7:94:a7:e7:
         b2:80:d7:66:00:66:d3:d7:d8:9a:4d:09:33:57:00:ef:79:61:
         81:71:0b:44:e8:0d:90:42:ae:56:bf:86:88:ce:79:56:eb:73:
         c7:b0:c9:40:af:e3:62:5a:72:f0:43:b8:6f:ce:a6:81:f5:18:
         03:e1:69:62:36:02:6e:92:28:54:b3:4c:94:86:86:be:ec:fd:
         72:31:ea:dc:b9:3c:88:30:0b:4e:fc:d5:0f:68:49:db:ab:23:
         14:40:35:f4:9a:5b:9b:62:69:dd:02:d5:e6:f1:a0:48:31:47:
         a3:0a:df:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:35 2025 by rpki-client