Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/323830343a316465303a3a2f33322d313238203d3e20323634343030.roa
File:                     323830343a316465303a3a2f33322d313238203d3e20323634343030.roa (raw, json)
Hash identifier:          oX/RKylP4Nd8+kRf1CuAlqfjhQMDsNU+KfOIwew2RRA=
Subject key identifier:   C7:BC:DE:A3:67:C3:53:AC:76:36:AE:C3:38:6F:91:2C:B7:0F:B8:54
Certificate issuer:       /CN=2C9FA99864590E029577FEA8F4939F2B71325AE2
Certificate serial:       3D0E7A20DE5C00FB39DBA5284DF703CFEE247098
Authority key identifier: 2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/323830343a316465303a3a2f33322d313238203d3e20323634343030.roa
Signing time:             Tue 08 Jul 2025 22:28:10 +0000
ROA not before:           Tue 08 Jul 2025 22:23:10 +0000
ROA not after:            Tue 07 Jul 2026 22:28:10 +0000
asID:                     264400
IP address blocks:        2804:1de0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.crl
                          rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0e:7a:20:de:5c:00:fb:39:db:a5:28:4d:f7:03:cf:ee:24:70:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9FA99864590E029577FEA8F4939F2B71325AE2
        Validity
            Not Before: Jul  8 22:23:10 2025 GMT
            Not After : Jul  7 22:28:10 2026 GMT
        Subject: CN=C7BCDEA367C353AC7636AEC3386F912CB70FB854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:87:8c:a9:da:b0:85:d3:96:e8:b0:db:d5:
                    0d:88:81:9b:03:f4:19:58:2c:77:7c:6c:e1:66:d7:
                    05:63:4b:c2:2d:38:3b:37:84:b8:5d:67:fe:d7:80:
                    ff:af:ab:4a:dd:15:b2:f5:76:b8:f4:4a:5d:f9:91:
                    ec:56:23:d2:01:eb:c6:ec:72:47:fc:ff:d6:70:9f:
                    0e:87:f5:85:0f:20:2e:b9:2c:17:30:89:a6:1a:e1:
                    22:57:12:44:a4:46:1a:83:28:ec:b0:14:ca:fd:dc:
                    01:44:d0:b7:54:ae:95:91:73:c3:4f:ad:0b:25:04:
                    f4:77:ae:6a:e9:6c:2f:99:99:69:46:67:ab:a1:3a:
                    ba:ac:db:ad:e9:09:ba:15:77:22:a1:4b:88:dc:83:
                    3e:f6:2a:80:1f:2b:f8:4a:f4:bc:16:db:ec:62:85:
                    2c:29:98:f9:ec:57:7b:9e:cb:73:7d:c9:f5:03:a0:
                    04:fc:b9:b1:87:0b:ca:77:a6:da:91:95:dd:37:ac:
                    f2:4e:61:51:25:af:ec:bf:44:e7:a8:c3:7d:5c:8b:
                    6a:f1:56:5b:4e:32:9d:66:10:75:12:9a:76:35:9c:
                    77:76:ac:b3:f4:90:cf:ec:50:90:19:0e:d8:79:9f:
                    14:3c:a2:51:d0:c0:ef:39:37:96:8e:11:1e:ba:45:
                    91:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BC:DE:A3:67:C3:53:AC:76:36:AE:C3:38:6F:91:2C:B7:0F:B8:54
            X509v3 Authority Key Identifier:
                keyid:2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/323830343a316465303a3a2f33322d313238203d3e20323634343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:c8:27:9f:67:2e:6a:20:e7:9a:2c:db:67:2e:28:b0:d3:6d:
         8c:34:e8:f8:13:c3:35:4a:36:8a:81:43:83:5b:d8:95:5f:2b:
         f0:7c:1a:bf:4c:93:80:53:57:31:ea:1b:48:f4:26:fe:80:f2:
         bf:90:29:ed:55:e4:4f:d7:59:30:6a:b5:60:48:73:62:48:80:
         2c:be:d6:27:9c:27:29:7c:e5:a5:a7:d0:51:7e:5f:8c:10:c2:
         db:80:fa:94:43:08:27:80:e6:97:59:47:28:04:6a:f9:a3:89:
         fb:ea:7a:ff:07:3c:73:d0:49:d3:6a:4a:0e:aa:b4:c4:88:6e:
         de:6b:b3:ed:be:a5:80:c8:60:33:92:5e:e4:c3:ef:a1:d8:f6:
         fb:03:6e:7a:a1:fb:1a:d3:b4:ae:ae:5e:b7:77:85:c6:7c:7b:
         1e:d4:fe:d1:16:20:01:33:15:38:82:e9:14:a5:81:bf:ad:cc:
         c0:e5:fd:ce:fd:10:63:e6:83:a0:4d:f8:37:aa:9d:8e:e4:65:
         c2:7d:be:fe:b3:0d:2f:51:f2:5f:20:f2:fe:d6:c8:0a:65:ed:
         a1:81:e1:a4:e2:65:4a:bf:f2:64:cf:d7:62:3f:98:91:9f:c8:
         10:18:85:4a:aa:ee:b8:0d:9f:f9:8a:11:be:ee:21:02:ae:63:
         91:8a:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:38:21 2025 by rpki-client