Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a3a2f33322d3438203d3e20323732323532.roa
File:                     323830343a383434633a3a2f33322d3438203d3e20323732323532.roa (raw, json)
Hash identifier:          yG4oCmRZMjccnD2tG1OUkP6bxyFfPBb7C2wfnRo4OPg=
Subject key identifier:   34:C4:B4:02:9F:2F:6E:05:11:F1:C4:77:D7:C1:01:11:51:A8:5F:0C
Certificate issuer:       /CN=9CA6EDC8321AC30275A76ED36FF0E5A08A25502F
Certificate serial:       3E8F14F1B9C1AFB9719DC1548351D2A506E7CB23
Authority key identifier: 9C:A6:ED:C8:32:1A:C3:02:75:A7:6E:D3:6F:F0:E5:A0:8A:25:50:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a3a2f33322d3438203d3e20323732323532.roa
Signing time:             Thu 14 Aug 2025 12:58:14 +0000
ROA not before:           Thu 14 Aug 2025 12:53:14 +0000
ROA not after:            Thu 13 Aug 2026 12:58:14 +0000
asID:                     272252
IP address blocks:        2804:844c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.crl
                          rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8f:14:f1:b9:c1:af:b9:71:9d:c1:54:83:51:d2:a5:06:e7:cb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CA6EDC8321AC30275A76ED36FF0E5A08A25502F
        Validity
            Not Before: Aug 14 12:53:14 2025 GMT
            Not After : Aug 13 12:58:14 2026 GMT
        Subject: CN=34C4B4029F2F6E0511F1C477D7C1011151A85F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:85:ab:a6:81:4c:38:8b:c6:f6:1d:ef:b7:
                    83:64:e5:06:79:82:0f:1a:a9:4e:fb:81:24:d8:61:
                    be:74:d9:bb:cb:d2:db:b1:ce:16:2b:2c:63:f4:31:
                    b5:ee:15:0d:fc:a6:6c:12:09:39:c3:b1:25:5b:02:
                    8b:d6:42:29:b5:08:fb:ce:70:43:13:23:cb:0f:70:
                    aa:6e:41:20:74:39:9d:aa:bd:5d:67:f8:fb:35:6b:
                    5f:11:47:6c:ac:96:34:e2:53:14:53:be:8e:c5:d4:
                    89:c7:6f:13:40:b8:1b:cc:6e:f6:75:6c:3b:cb:1b:
                    7c:e6:d1:27:84:a3:28:b4:a5:ee:ae:db:9a:50:be:
                    04:37:98:8a:ba:58:a7:06:3b:ba:14:dc:bc:a3:73:
                    f7:ee:8c:6d:c7:eb:14:21:37:d4:4e:97:74:7f:ef:
                    93:6b:72:b6:38:6c:41:4c:0d:e5:6b:85:7a:bb:e4:
                    c4:94:94:19:37:b0:89:bf:c9:cc:60:f0:31:ae:dd:
                    a6:0f:88:d8:a1:77:8d:7b:a1:fa:f5:87:ee:3c:ca:
                    fe:ba:90:ea:d2:b5:1d:41:c2:29:40:0b:a9:1c:a8:
                    e1:ce:8f:c1:52:c6:44:5c:c5:bb:61:3a:a7:60:e2:
                    d1:c8:c5:43:c6:23:fc:29:05:e7:94:11:52:bf:fb:
                    0d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C4:B4:02:9F:2F:6E:05:11:F1:C4:77:D7:C1:01:11:51:A8:5F:0C
            X509v3 Authority Key Identifier:
                keyid:9C:A6:ED:C8:32:1A:C3:02:75:A7:6E:D3:6F:F0:E5:A0:8A:25:50:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CA6EDC8321AC30275A76ED36FF0E5A08A25502F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a3a2f33322d3438203d3e20323732323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:844c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:e2:71:28:23:1c:4c:ad:d3:2a:75:5b:f0:eb:09:1c:51:
         07:a7:04:b3:b5:1b:0b:73:5f:b1:b5:df:b7:8d:83:e0:84:37:
         5d:f5:70:49:1c:74:35:ed:1e:b1:69:d3:d6:d5:7b:fb:04:e7:
         fa:59:c9:a6:07:8c:06:74:75:31:00:37:af:8b:08:be:f5:d6:
         b2:d2:fa:72:9e:02:8e:fd:ea:9f:9a:cc:47:66:f8:6a:83:4b:
         e2:be:51:39:d0:ea:ca:0d:1a:d6:2d:9a:24:d8:84:7d:5f:97:
         75:47:19:bc:0b:0e:f0:ce:a1:a2:5d:57:71:27:3a:7a:dc:1c:
         5f:c6:d4:fc:2e:46:7e:9e:52:ac:af:83:ee:f5:bd:b0:8d:6b:
         88:fc:38:f3:46:93:e0:4d:13:dd:b1:d1:c0:b6:7d:dd:17:50:
         a0:0e:95:cc:9e:4e:44:13:ef:1a:42:b1:f1:4c:e0:c1:16:7f:
         4b:be:0a:6e:3d:bc:a4:33:e9:c0:81:ab:1f:4f:c2:75:e2:a3:
         68:1b:fb:88:8e:ac:da:31:b8:f6:ad:d1:dd:7c:45:24:06:4e:
         5e:c4:3e:6a:b7:b1:e1:14:6e:13:5b:97:3c:ea:73:db:2d:93:
         b1:b3:f1:ac:b7:2c:f2:cc:32:ca:29:94:48:b1:aa:5c:32:23:
         65:a6:78:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:32 2025 by rpki-client