Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/323830343a313434303a3a2f33322d3430203d3e20323633333231.roa
File:                     323830343a313434303a3a2f33322d3430203d3e20323633333231.roa (raw, json)
Hash identifier:          Jt5yBCDcazFPmlm99bqKiSoVaSE8qVxER5l9g5ESP5I=
Subject key identifier:   7B:38:40:93:48:E8:B8:45:A0:3F:DB:C8:F8:11:F6:48:FD:90:2D:7D
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       66DE968695BC884476A27F08D48DCF5F169C6575
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/323830343a313434303a3a2f33322d3430203d3e20323633333231.roa
Signing time:             Thu 26 Jun 2025 13:49:56 +0000
ROA not before:           Thu 26 Jun 2025 13:44:56 +0000
ROA not after:            Thu 25 Jun 2026 13:49:56 +0000
asID:                     263321
IP address blocks:        2804:1440::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 14:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:de:96:86:95:bc:88:44:76:a2:7f:08:d4:8d:cf:5f:16:9c:65:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Jun 26 13:44:56 2025 GMT
            Not After : Jun 25 13:49:56 2026 GMT
        Subject: CN=7B38409348E8B845A03FDBC8F811F648FD902D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:36:32:fd:12:27:6c:92:4b:30:b9:8b:b5:
                    2d:16:e6:ba:23:3a:f3:9f:15:e7:46:ff:33:19:6e:
                    f8:e7:7f:dc:06:dc:3c:2c:a9:1e:26:e1:1a:0a:43:
                    b1:57:4f:4d:c2:c4:30:a7:b2:a6:71:48:88:29:19:
                    be:63:81:02:d5:d2:88:5a:20:65:13:00:8c:74:a4:
                    01:0d:9f:f6:b5:a9:fb:17:4e:73:30:66:72:b2:ef:
                    33:45:11:8c:2c:81:74:ee:6d:3a:a1:40:c2:23:e4:
                    70:47:b6:e3:86:a4:6c:d5:7b:3f:03:03:ba:61:98:
                    bf:f9:0e:3c:98:aa:6a:83:ab:7f:88:78:19:a9:c8:
                    04:94:19:61:fe:8f:2b:e2:b7:12:98:fc:87:3b:a6:
                    02:6f:af:34:fb:20:b9:5b:7d:33:0c:c3:9b:6d:15:
                    f4:6d:3a:a6:52:fb:ce:01:41:9a:71:2f:c1:c7:5a:
                    46:d9:ad:80:c2:d6:d8:3d:40:27:4f:eb:69:8d:56:
                    c7:24:63:a5:49:6b:d9:1b:eb:a0:12:d9:71:3c:a4:
                    36:09:65:3a:95:97:c1:85:6b:cc:3b:8d:fd:98:44:
                    6e:45:54:1c:a5:40:41:42:fa:ae:cc:b5:ae:67:65:
                    40:c0:ec:df:c3:ae:0d:3e:be:72:6e:16:ae:ca:ed:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:38:40:93:48:E8:B8:45:A0:3F:DB:C8:F8:11:F6:48:FD:90:2D:7D
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/323830343a313434303a3a2f33322d3430203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:5a:ed:46:0f:ac:8c:55:e1:db:1e:f6:95:11:7b:40:da:64:
         16:fe:3e:c9:c3:a1:42:b6:7b:ba:b4:f8:16:cf:e1:66:95:12:
         6f:3a:f1:c5:6f:0a:9b:d0:10:0c:7f:9c:be:a5:b9:2e:24:31:
         41:17:20:28:d0:b0:c1:e4:85:7a:03:23:fe:8c:ad:cc:e1:68:
         06:9a:3b:f0:17:43:01:c8:e9:f5:27:1d:fc:43:83:a5:b6:7d:
         36:9f:d4:8b:69:71:c0:66:da:25:73:f5:0c:3a:14:02:35:6c:
         89:40:50:4a:88:e0:22:ba:67:1a:14:72:c6:1b:fb:2a:a2:9c:
         50:0b:03:d8:05:e3:a9:76:49:56:29:10:dd:e9:45:96:ab:98:
         2d:59:3c:cb:44:ac:71:20:8a:40:7c:5a:49:c1:24:63:bc:ca:
         97:c2:77:fe:1c:c0:82:75:b2:0a:4a:b1:dd:4b:6b:77:15:af:
         62:fc:63:a2:97:dc:44:7a:74:fb:70:55:c7:4e:63:18:79:7a:
         a8:a4:ab:97:04:8a:68:c6:12:80:e9:5f:e6:44:7f:5d:d7:63:
         18:30:f4:30:2d:24:13:83:c4:47:e0:a0:a2:6b:49:b7:28:99:
         e6:47:c8:34:52:32:ba:62:e0:4c:80:18:32:70:5d:72:61:69:
         c3:38:b2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 20:32:02 2025 by rpki-client