Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
File:                     323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (raw, json)
Hash identifier:          uwtntgDhZ8NLwZsO5HmD9mt3dlpHQTwDXJ+5+Ywo8ss=
Subject key identifier:   28:E4:C1:E3:A8:6E:AC:F2:49:0E:8F:5D:4B:8F:A2:27:2D:BB:8E:9A
Certificate issuer:       /CN=ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F
Certificate serial:       7A3722EEFF32C40A3927630AA72C93E2817E1141
Authority key identifier: AC:E8:E0:81:BB:25:25:CD:B1:FC:85:C9:CE:1C:36:67:C8:3E:AC:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
Signing time:             Thu 26 Jun 2025 20:59:08 +0000
ROA not before:           Thu 26 Jun 2025 20:54:08 +0000
ROA not after:            Thu 25 Jun 2026 20:59:08 +0000
asID:                     264011
IP address blocks:        2804:2960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 01:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:37:22:ee:ff:32:c4:0a:39:27:63:0a:a7:2c:93:e2:81:7e:11:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F
        Validity
            Not Before: Jun 26 20:54:08 2025 GMT
            Not After : Jun 25 20:59:08 2026 GMT
        Subject: CN=28E4C1E3A86EACF2490E8F5D4B8FA2272DBB8E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4c:46:87:6b:ac:51:99:02:6c:c9:7c:f8:5f:
                    b7:a4:90:2e:a6:ac:06:ea:08:83:d9:e5:3d:15:e7:
                    99:c6:b2:4a:0b:3a:69:c1:f4:5c:a7:e8:9a:36:4a:
                    de:f4:70:cc:50:39:ee:e8:39:58:ef:7b:6a:fd:62:
                    4c:c1:98:19:d7:1c:d1:7c:7b:24:e8:e2:50:3f:f7:
                    5e:3e:70:20:96:a8:db:06:2c:c2:b3:05:aa:05:95:
                    19:d0:34:31:bc:3c:49:38:33:c8:cc:90:bb:76:8e:
                    28:3e:16:63:34:09:b8:9d:3a:ad:46:56:e8:c0:1a:
                    a1:cf:66:55:ce:88:eb:5f:fa:2b:a6:af:85:c7:ff:
                    50:76:4e:9c:de:fc:9c:41:3b:cd:e2:a5:f5:48:4f:
                    5b:0f:be:2f:6d:cb:b5:c0:81:0b:b6:c3:93:52:10:
                    c1:eb:d8:6f:c0:80:b6:bd:7a:78:f3:01:44:45:e0:
                    f3:51:c0:de:e8:5e:3b:2d:47:bd:b9:1b:70:f0:e9:
                    ed:44:26:6a:46:e4:00:37:55:d7:1d:f1:4e:76:db:
                    ed:e5:9d:89:a2:25:31:9b:11:b2:92:a1:30:f7:7b:
                    76:64:40:ce:86:e2:cd:c6:61:3b:9c:95:9b:08:88:
                    ba:b2:01:af:c2:d6:42:6b:0b:c9:9b:c2:04:9a:c7:
                    ca:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E4:C1:E3:A8:6E:AC:F2:49:0E:8F:5D:4B:8F:A2:27:2D:BB:8E:9A
            X509v3 Authority Key Identifier:
                keyid:AC:E8:E0:81:BB:25:25:CD:B1:FC:85:C9:CE:1C:36:67:C8:3E:AC:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2960::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:16:18:69:99:27:41:bd:24:fa:2f:62:b7:f4:94:9e:37:7f:
         26:56:30:c7:2b:d7:94:a9:62:f3:c9:58:dd:9d:9e:29:f0:df:
         76:10:8a:c8:22:03:5f:a8:40:a0:7a:14:7f:6e:9c:f8:1f:ec:
         5c:d4:c2:55:29:7b:94:4a:a3:31:3b:84:f3:52:82:59:c5:17:
         bc:7d:52:6c:5b:0e:d3:65:fa:53:92:7a:5d:eb:d1:f1:3b:d0:
         dd:06:91:c0:ca:93:6d:b9:f2:d0:c9:8e:75:1f:55:44:92:8c:
         bd:04:d5:a1:50:27:3e:4e:e0:dc:af:8c:74:9d:9e:e0:26:1f:
         a9:17:c1:72:ed:38:b0:4e:2b:1a:c0:fb:6d:7b:c1:27:06:71:
         3b:e5:67:ea:c5:36:fb:6a:98:54:2c:5e:30:7e:f7:d2:2a:9a:
         48:14:d1:15:7d:78:04:6e:03:2b:46:4d:fb:75:1a:e0:98:e8:
         e5:f8:09:4d:22:d4:ab:e0:57:53:f8:25:65:9a:60:04:5b:13:
         44:7e:44:00:52:15:c3:34:cd:d1:16:55:18:c6:22:39:b1:27:
         72:c1:be:ea:3e:06:46:7c:dc:55:59:12:a0:2d:fd:ad:33:c0:
         e4:d3:91:b3:3d:9e:96:e7:b4:c7:81:d5:19:9a:3a:b2:9e:ff:
         e7:d7:75:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:34:00 2025 by rpki-client