Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/323830343a373531633a3a2f33322d3438203d3e20323731303234.roa
File:                     323830343a373531633a3a2f33322d3438203d3e20323731303234.roa (raw, json)
Hash identifier:          kdiCLIBPgvx03r4z0/coVpN45suCV5e0imm5xVT80tc=
Subject key identifier:   E4:01:9B:E1:00:B9:70:10:A4:7C:30:EC:62:6E:AE:0B:01:62:2A:6F
Certificate issuer:       /CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
Certificate serial:       247D7F64E68271FCA94ED6BAD728E820244590C0
Authority key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/323830343a373531633a3a2f33322d3438203d3e20323731303234.roa
Signing time:             Sat 09 Aug 2025 15:02:30 +0000
ROA not before:           Sat 09 Aug 2025 14:57:30 +0000
ROA not after:            Sat 08 Aug 2026 15:02:30 +0000
asID:                     271024
IP address blocks:        2804:751c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl
                          rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 02:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7d:7f:64:e6:82:71:fc:a9:4e:d6:ba:d7:28:e8:20:24:45:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
        Validity
            Not Before: Aug  9 14:57:30 2025 GMT
            Not After : Aug  8 15:02:30 2026 GMT
        Subject: CN=E4019BE100B97010A47C30EC626EAE0B01622A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:46:60:b6:e9:ef:d2:9d:7e:e3:8d:ab:ea:
                    a9:5c:aa:55:7d:b7:b0:5c:ec:45:14:3b:f5:39:37:
                    d7:ad:1b:a2:94:5a:1f:6b:47:e7:22:7a:61:f9:ab:
                    02:01:2e:0c:48:4f:06:b4:1a:39:9a:f2:86:b4:db:
                    a0:3b:51:0c:8e:ee:7e:ca:80:d2:ef:0d:39:03:6f:
                    a4:8a:91:62:c1:e0:c5:d1:76:23:85:09:1d:b4:a7:
                    e9:a8:a8:af:88:05:fc:58:4e:a8:c1:bf:61:05:75:
                    87:1d:a6:a9:97:54:ff:07:ad:0e:53:47:dd:73:70:
                    20:19:7d:f5:62:d7:b5:01:93:c5:41:ae:d5:3c:91:
                    4e:8c:ef:08:75:f9:04:b4:ce:3c:75:2e:e9:3d:0e:
                    73:55:bf:1e:44:4d:c8:5f:29:8c:31:ce:e4:99:53:
                    26:32:d8:af:77:17:3a:ac:84:e0:52:c2:15:50:c5:
                    f2:a1:79:3d:ff:97:c3:a7:0b:39:70:fc:89:1d:45:
                    a8:fb:83:18:3a:7e:44:55:a7:1e:74:2d:6c:0b:da:
                    a7:28:ca:66:d1:bc:fb:27:ff:6b:46:c0:6c:a0:40:
                    2b:9a:14:80:85:17:2a:fd:78:bc:69:ad:b3:58:ec:
                    a2:a2:40:26:29:51:c7:b9:02:a7:82:85:e0:3e:58:
                    76:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:01:9B:E1:00:B9:70:10:A4:7C:30:EC:62:6E:AE:0B:01:62:2A:6F
            X509v3 Authority Key Identifier:
                keyid:66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/323830343a373531633a3a2f33322d3438203d3e20323731303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:751c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:0e:a9:ce:a8:8c:b1:85:95:42:45:02:6f:9e:d1:70:45:d1:
         4b:29:c2:d0:49:a1:7d:9f:9e:bd:a0:a6:7f:e8:de:d8:4c:f0:
         4e:5f:e9:8b:08:53:c2:53:28:bd:e2:8b:cc:4e:9c:98:a2:26:
         b8:a6:ca:7b:f3:d6:6c:56:8c:3e:a2:53:1a:af:53:88:7c:7a:
         ba:0e:f6:a1:ce:f0:b9:db:c9:20:58:40:dc:32:91:da:91:75:
         6e:46:f4:6c:4d:f3:70:db:d8:29:9d:c1:7d:f4:23:89:aa:c7:
         04:5e:e1:cd:e7:6a:08:5c:36:2a:1c:b1:57:64:57:11:d5:9c:
         c5:19:9b:80:f0:06:df:cc:fb:c1:14:b4:5a:1f:c5:23:e5:af:
         5e:b9:3b:ae:73:ca:bc:d9:51:a0:38:c0:89:0d:a3:0a:62:eb:
         0b:fd:89:b6:82:9d:e3:2b:74:b0:2a:66:80:d2:8b:70:be:b6:
         af:3e:2d:93:8c:7f:01:37:3a:9d:4a:91:5a:a4:8c:15:40:ad:
         9b:e4:f6:41:70:52:98:9b:00:ae:b4:6b:0a:7d:90:4e:8c:85:
         3e:f9:36:5b:ff:f3:fa:dc:8c:12:70:fe:be:c5:4d:40:f2:14:
         fb:f8:61:e7:2d:3f:2f:5e:f1:a2:f7:a3:a4:c4:fe:b3:0a:c5:
         be:67:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:58:25 2025 by rpki-client