Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/1/323830343a333930383a3a2f33322d3438203d3e20323636353139.roa
File:                     323830343a333930383a3a2f33322d3438203d3e20323636353139.roa (raw, json)
Hash identifier:          hxrudgwK1me8IVN0i8aHJr+7Aq8SRyIbbzhoyoEsdNI=
Subject key identifier:   4A:7D:33:35:51:40:9F:41:E7:36:CC:E6:FE:32:EB:BA:90:2F:1B:A0
Certificate issuer:       /CN=6C835B626F252A97ED1738860649F0C3B856DC1D
Certificate serial:       76400862457D6412B6499F99010792302DB62B57
Authority key identifier: 6C:83:5B:62:6F:25:2A:97:ED:17:38:86:06:49:F0:C3:B8:56:DC:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C835B626F252A97ED1738860649F0C3B856DC1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/1/323830343a333930383a3a2f33322d3438203d3e20323636353139.roa
Signing time:             Wed 13 Aug 2025 16:03:45 +0000
ROA not before:           Wed 13 Aug 2025 15:58:45 +0000
ROA not after:            Wed 12 Aug 2026 16:03:45 +0000
asID:                     266519
IP address blocks:        2804:3908::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/1/6C835B626F252A97ED1738860649F0C3B856DC1D.crl
                          rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/1/6C835B626F252A97ED1738860649F0C3B856DC1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C835B626F252A97ED1738860649F0C3B856DC1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:40:08:62:45:7d:64:12:b6:49:9f:99:01:07:92:30:2d:b6:2b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C835B626F252A97ED1738860649F0C3B856DC1D
        Validity
            Not Before: Aug 13 15:58:45 2025 GMT
            Not After : Aug 12 16:03:45 2026 GMT
        Subject: CN=4A7D333551409F41E736CCE6FE32EBBA902F1BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:73:cd:40:d6:32:4c:bb:4d:79:3d:b8:b5:
                    26:3a:5f:b3:c8:62:3f:e0:b3:35:b7:00:52:6e:bb:
                    a2:bc:72:86:3e:a8:02:b2:70:b0:f5:54:c0:e4:f4:
                    95:98:e5:14:d7:aa:e4:3d:4a:63:ac:1f:31:b7:85:
                    46:b5:34:62:c6:e4:ba:2b:01:68:f4:7c:dd:df:e9:
                    4b:c1:7a:67:75:d8:03:f2:85:d2:6f:53:47:11:36:
                    fd:e1:f1:fe:fd:a7:67:6f:23:5c:ad:cc:15:07:47:
                    65:0c:17:05:46:52:2f:47:db:ca:df:8f:4c:b3:a1:
                    44:82:8f:92:06:89:cd:5c:1a:82:30:d2:af:26:dd:
                    d1:b4:cf:f6:70:2f:00:88:c5:ed:a2:dd:3c:43:0f:
                    57:26:76:61:cf:29:d7:0a:d4:79:70:e0:d0:7e:f1:
                    54:a0:a3:a7:83:ed:ed:20:8a:cd:14:00:be:76:1c:
                    d8:81:ce:db:76:da:a2:6b:49:72:00:e8:55:75:df:
                    ad:a5:3b:e0:59:31:02:16:04:12:9f:78:6a:f0:4c:
                    f6:e7:2a:48:11:1d:a7:c5:f4:8c:63:23:f4:1a:6c:
                    33:4e:b2:0f:96:00:bd:7c:c5:51:b2:9d:ef:93:51:
                    d6:ae:32:37:d6:03:d4:56:69:cc:42:b7:bc:08:86:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7D:33:35:51:40:9F:41:E7:36:CC:E6:FE:32:EB:BA:90:2F:1B:A0
            X509v3 Authority Key Identifier:
                keyid:6C:83:5B:62:6F:25:2A:97:ED:17:38:86:06:49:F0:C3:B8:56:DC:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/1/6C835B626F252A97ED1738860649F0C3B856DC1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C835B626F252A97ED1738860649F0C3B856DC1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/1/323830343a333930383a3a2f33322d3438203d3e20323636353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3908::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:48:66:e9:8f:27:5a:6d:61:05:1d:f5:7e:8a:ef:1f:33:f2:
         d9:21:c6:86:19:d7:03:c9:a3:f2:71:97:cd:49:8c:b0:35:d9:
         d1:cb:3b:6b:8d:35:8e:9a:d6:fb:27:7e:0f:4a:68:b4:f0:a1:
         f2:9a:2c:1a:d5:c4:85:a5:0d:4c:1b:66:97:61:9b:6f:43:1f:
         a3:07:3a:4c:71:af:dc:15:a4:ef:bf:d7:38:52:c9:ea:fd:91:
         a6:39:d5:d2:fa:5e:eb:bb:b4:ce:89:3e:5f:c3:83:a5:03:f7:
         1e:aa:e4:ee:2f:4e:53:9c:03:e3:44:dc:56:a8:b9:c7:e9:c7:
         70:9e:5a:de:03:61:6b:cb:2b:b0:08:ee:0e:24:20:be:cc:95:
         3d:df:7b:d1:9b:5c:e5:31:84:fe:cf:fe:a9:f1:52:86:3b:e2:
         64:90:23:0a:2a:39:3e:61:7f:8b:55:d6:9c:b9:0a:30:10:35:
         21:59:d5:76:07:49:f8:58:c3:6c:6c:dc:7b:51:e8:40:ab:9b:
         1b:80:e0:23:1b:34:82:7f:d4:a7:03:9e:01:32:8c:43:91:8d:
         a2:94:b2:76:db:c7:c7:84:36:be:19:ff:42:40:3a:0f:60:7f:
         57:59:f7:3e:09:9f:34:7a:1c:f8:8c:8c:15:1f:b5:38:7f:c3:
         d7:16:29:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:21:07 2025 by rpki-client