Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643030303a3a2f33362d3336203d3e20323636353531.roa
File:                     323830343a336463303a643030303a3a2f33362d3336203d3e20323636353531.roa (raw, json)
Hash identifier:          cNFza/TPEo+sZJycTXXXX0xPaIv8DZN6xC7VR9TCncI=
Subject key identifier:   DE:7B:0B:E5:70:FF:9A:0F:DE:89:A5:CC:39:60:79:F8:4C:23:17:61
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       144DABF8190A236348D58DEB75EA1ED1E8ECE688
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643030303a3a2f33362d3336203d3e20323636353531.roa
Signing time:             Thu 17 Jul 2025 18:00:02 +0000
ROA not before:           Thu 17 Jul 2025 17:55:02 +0000
ROA not after:            Thu 16 Jul 2026 18:00:02 +0000
asID:                     266551
IP address blocks:        2804:3dc0:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4d:ab:f8:19:0a:23:63:48:d5:8d:eb:75:ea:1e:d1:e8:ec:e6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Jul 17 17:55:02 2025 GMT
            Not After : Jul 16 18:00:02 2026 GMT
        Subject: CN=DE7B0BE570FF9A0FDE89A5CC396079F84C231761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:d3:0b:b4:97:d9:7b:7c:42:41:36:64:5b:
                    17:c7:3a:1a:1c:34:75:6b:bf:56:7e:d8:3c:90:73:
                    30:da:df:81:55:c6:c7:90:18:77:a5:b1:61:5e:39:
                    ab:82:29:84:ed:8e:c4:43:0a:de:5f:33:66:fc:b2:
                    c4:82:07:98:c0:63:6f:ff:cc:5c:95:49:37:ff:35:
                    0e:3d:7a:4a:22:16:3a:7c:7a:44:76:3c:9b:02:bb:
                    64:5f:3f:e9:af:92:50:1d:07:71:6d:bc:2f:57:cc:
                    93:2c:c4:f8:75:98:d6:b3:58:df:b7:fb:2e:99:ec:
                    4c:94:23:18:61:3e:ad:0d:7e:70:cc:e2:92:f5:61:
                    96:fe:c0:9d:d0:3a:eb:44:6e:db:72:bf:1e:fb:c0:
                    bc:34:44:20:2e:13:87:8f:49:bb:bc:33:4d:7d:f1:
                    d5:ae:56:3a:b7:ce:05:37:77:37:4e:70:30:6b:66:
                    2a:f8:06:f9:26:61:ec:59:2e:61:a6:9a:9a:46:a2:
                    58:53:8a:06:6d:c4:ee:3c:3a:be:da:c3:58:4b:9c:
                    f2:0f:b0:3b:2d:9e:46:a7:f1:90:74:2e:51:2b:d3:
                    22:a1:0a:59:dd:51:0b:85:47:6f:24:e8:57:d6:c8:
                    c2:f9:92:b5:cf:f8:8f:2d:87:c2:61:8f:9e:97:90:
                    3c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7B:0B:E5:70:FF:9A:0F:DE:89:A5:CC:39:60:79:F8:4C:23:17:61
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643030303a3a2f33362d3336203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:ae:76:66:90:f2:d3:c0:b2:77:61:cd:39:be:c3:75:4c:d6:
         5a:b0:2f:f0:8d:09:6d:fe:0d:4e:a9:fe:0c:c4:cd:00:dd:6e:
         02:83:e0:fa:fc:cc:8f:e3:99:21:08:3f:3a:cb:2b:03:55:d9:
         bf:87:e5:c6:30:30:bb:34:a1:5e:aa:5b:b2:5e:cc:72:76:ef:
         74:ce:44:37:2b:21:06:06:5d:fc:a5:64:31:08:b0:cb:75:a1:
         99:21:2e:48:c8:2b:1e:5e:e5:f7:7e:23:cf:68:5c:24:cb:16:
         d1:cf:bc:05:f3:e8:fa:6f:fb:b5:6e:d7:19:f7:6f:5e:f9:b9:
         f0:89:1a:c0:0d:9f:7c:1a:28:68:1b:8e:14:20:95:b9:5e:f3:
         fa:dd:f3:bd:39:f5:dd:5e:d7:c3:ed:1a:e1:ca:16:1e:4f:65:
         52:cf:23:a8:ca:67:c5:d8:11:8c:d4:55:55:f8:9e:38:0f:c4:
         9c:c8:dc:18:65:a9:a0:db:70:ab:64:88:3f:7e:d8:4e:d2:2e:
         21:1c:c3:43:45:2d:51:f1:0d:b5:ec:1f:b8:c8:51:81:c6:9f:
         b1:58:3f:d5:fc:67:fb:48:28:e8:dd:d5:df:82:93:79:9c:46:
         57:b9:1f:58:fb:dd:93:8e:33:bd:10:7a:94:29:df:2e:51:12:
         26:c3:a9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:51:05 2025 by rpki-client