Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/323830343a373936343a3a2f33322d3432203d3e203532373337.roa
File:                     323830343a373936343a3a2f33322d3432203d3e203532373337.roa (raw, json)
Hash identifier:          4EFjchp7sWThWIlYH9rv5ThEvIpBSEPtO9zcfPgKjZg=
Subject key identifier:   DD:9E:51:5D:AD:24:6D:42:A1:1B:36:76:B1:5C:F0:D2:02:1B:B6:DD
Certificate issuer:       /CN=F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440
Certificate serial:       2AD2524F4BEB6BF67424111757A9CE98B78F08F9
Authority key identifier: F6:2B:9E:3F:C5:DF:8B:AD:85:B5:47:8E:31:B0:44:A0:2D:0B:34:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/323830343a373936343a3a2f33322d3432203d3e203532373337.roa
Signing time:             Thu 26 Jun 2025 12:28:07 +0000
ROA not before:           Thu 26 Jun 2025 12:23:07 +0000
ROA not after:            Thu 25 Jun 2026 12:28:07 +0000
asID:                     52737
IP address blocks:        2804:7964::/32 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.crl
                          rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 11:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d2:52:4f:4b:eb:6b:f6:74:24:11:17:57:a9:ce:98:b7:8f:08:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440
        Validity
            Not Before: Jun 26 12:23:07 2025 GMT
            Not After : Jun 25 12:28:07 2026 GMT
        Subject: CN=DD9E515DAD246D42A11B3676B15CF0D2021BB6DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:4f:4e:fc:23:57:77:19:68:eb:47:4c:77:
                    e7:d9:50:7f:43:01:5d:a0:3e:88:0e:45:f7:44:0c:
                    de:51:a9:fa:59:a9:9b:ec:30:92:44:f0:b1:9d:28:
                    83:78:4b:49:ce:4e:f4:3b:55:e8:03:06:b2:4c:79:
                    59:61:9c:cf:1b:a4:73:16:f4:84:2b:de:a5:3d:4c:
                    03:fe:76:21:34:8a:73:31:9b:0c:cb:07:cf:16:d5:
                    42:81:16:a8:9f:53:cc:10:a6:75:5e:4a:ab:64:6e:
                    0e:be:ba:f0:92:96:df:e8:49:51:33:20:22:8a:fd:
                    9e:d1:71:a4:60:3f:b1:2a:9f:b2:d8:f0:38:3b:8c:
                    46:d1:9b:59:b7:b8:85:d7:c9:fa:4c:86:a4:36:e8:
                    6b:80:52:16:07:f4:e2:0a:68:f7:f2:da:ce:ef:13:
                    e8:a4:c4:3f:84:13:9d:1c:0a:79:6b:5b:6c:1f:e4:
                    ac:65:f2:d6:a5:92:7a:ad:9b:b0:51:21:5f:e2:d2:
                    27:c7:b0:05:9c:f3:1a:5b:d0:ab:77:ef:d0:c5:a5:
                    d0:a6:a0:4c:11:ef:01:86:06:80:b3:9f:3f:b6:0e:
                    e8:27:34:0f:87:57:73:47:e4:25:e5:35:a0:81:58:
                    68:bf:e0:e8:47:6a:4c:fd:58:e5:3f:13:a3:4e:fa:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9E:51:5D:AD:24:6D:42:A1:1B:36:76:B1:5C:F0:D2:02:1B:B6:DD
            X509v3 Authority Key Identifier:
                keyid:F6:2B:9E:3F:C5:DF:8B:AD:85:B5:47:8E:31:B0:44:A0:2D:0B:34:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/323830343a373936343a3a2f33322d3432203d3e203532373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7964::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:95:f7:0a:a7:46:92:e1:2b:2c:80:42:b1:33:1e:04:bb:70:
         32:00:71:be:64:59:c8:38:2b:e8:d2:60:10:df:c1:e7:77:fd:
         d5:29:86:a6:6a:6b:a7:4e:a5:c3:11:2e:4d:33:66:bc:2b:d9:
         99:26:68:72:67:05:7a:78:af:11:85:47:32:7f:0a:f9:c4:95:
         43:9f:1e:ff:c0:49:b8:aa:95:81:33:6b:2a:f8:43:44:c9:dc:
         8d:06:38:38:01:db:00:3b:65:83:3a:a4:96:b6:92:21:a5:ee:
         40:9d:e5:d3:21:cc:9a:c0:9c:db:5f:e3:ac:d8:c2:bf:1a:c5:
         a4:7e:65:de:cb:f4:fe:24:b0:f2:15:37:69:ad:6e:e0:ee:f3:
         df:95:c8:15:1b:e1:b3:f6:17:f1:6e:9a:f8:ef:e3:fa:e7:6e:
         67:46:40:c2:4f:11:5f:52:0f:b3:d3:4d:d9:35:e9:d5:8a:b7:
         fd:a2:4b:0c:e0:a3:a3:a1:60:c2:f1:f2:d5:37:c3:5b:36:68:
         4b:79:c7:e2:4e:aa:56:96:b1:82:4b:9c:87:f9:47:43:17:80:
         83:78:49:f0:56:30:8a:35:8b:f9:f9:ab:c2:0d:03:ed:0a:cb:
         eb:15:05:89:2f:f9:5f:e8:f3:d4:d1:4a:94:4b:e1:0d:85:3b:
         10:1d:55:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:14:55 2025 by rpki-client