Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/323830343a3236633a3a2f33322d313238203d3e20323632383133.roa
File:                     323830343a3236633a3a2f33322d313238203d3e20323632383133.roa (raw, json)
Hash identifier:          eJ1o3/fQqpIKDSLSDU4eiam/tALYpESFGVAjlJobtp0=
Subject key identifier:   A4:10:40:C2:76:C6:B4:AA:4C:A6:96:82:E4:BF:1B:9E:D1:DD:84:3E
Certificate issuer:       /CN=768C468840EAB0C1EAF4BADFFD473AF4BC4719CD
Certificate serial:       1ACEFD00206615D7ECB6615ED3DAB2C17403A5FB
Authority key identifier: 76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/323830343a3236633a3a2f33322d313238203d3e20323632383133.roa
Signing time:             Sat 12 Jul 2025 17:00:00 +0000
ROA not before:           Sat 12 Jul 2025 16:55:00 +0000
ROA not after:            Sun 12 Jul 2026 17:00:00 +0000
asID:                     262813
IP address blocks:        2804:26c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.crl
                          rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ce:fd:00:20:66:15:d7:ec:b6:61:5e:d3:da:b2:c1:74:03:a5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768C468840EAB0C1EAF4BADFFD473AF4BC4719CD
        Validity
            Not Before: Jul 12 16:55:00 2025 GMT
            Not After : Jul 12 17:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b7:0a:21:ed:37:27:39:0f:63:4f:db:e7:79:
                    2b:0b:a0:97:8e:f4:92:88:01:a3:59:e1:f1:64:eb:
                    b6:82:44:48:3f:4a:80:3a:da:0b:b6:38:1a:0c:44:
                    54:7f:93:93:e7:fd:d3:6a:5d:88:d5:c9:9c:51:00:
                    27:98:ea:75:2c:86:84:90:5a:67:ba:6f:d1:c0:50:
                    42:aa:35:dd:fd:7b:79:82:d2:80:eb:67:ec:47:3e:
                    f7:1a:14:ef:62:90:32:a4:34:21:09:bd:b2:bb:d7:
                    8d:ac:51:e5:03:bf:fa:db:65:10:09:27:9a:7b:1d:
                    c8:f7:db:7e:b9:ce:91:ed:c5:32:55:42:6a:a9:49:
                    82:06:31:cb:51:60:95:5f:b2:6f:d6:49:53:f5:46:
                    02:d8:09:c6:ee:d5:ae:99:e1:4f:cf:e9:bc:29:32:
                    ef:41:51:f1:be:cd:b0:c5:1d:a6:9e:b9:c9:ed:b8:
                    2c:5b:62:7d:99:ff:5a:12:0a:d1:4b:b8:21:98:06:
                    86:30:ab:62:c5:37:70:a4:89:cb:02:8d:7f:6d:57:
                    e9:02:21:77:7a:ae:e5:64:f0:85:36:c3:25:af:72:
                    57:99:03:69:10:0d:50:c4:5d:06:dc:b8:6e:bb:59:
                    42:00:b1:0b:3e:d8:f4:27:a9:99:ce:ce:1b:cc:ff:
                    c7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:10:40:C2:76:C6:B4:AA:4C:A6:96:82:E4:BF:1B:9E:D1:DD:84:3E
            X509v3 Authority Key Identifier:
                keyid:76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/323830343a3236633a3a2f33322d313238203d3e20323632383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:6d:06:28:f3:71:30:ed:1b:36:f0:5c:97:9d:ce:de:ff:61:
         cb:dd:c9:5d:3c:0a:2e:d4:8c:32:44:b1:b9:99:45:5d:a4:b0:
         39:0f:81:9d:f4:6f:22:68:9b:a4:6e:ca:3a:d3:35:3e:2f:57:
         88:9a:14:da:e5:d5:ed:25:33:57:1a:4c:db:1d:30:05:b9:36:
         e1:46:6b:0c:27:0c:17:da:39:96:8d:90:44:57:79:d1:f1:56:
         60:84:60:85:72:ab:b1:62:c4:e2:14:25:8b:60:54:8f:d6:c5:
         d9:bc:be:71:9f:92:e1:2a:be:38:79:3f:1d:82:3c:b8:d0:5b:
         74:cc:75:2f:8b:49:42:c0:a3:23:58:f6:d4:0c:f1:29:c5:0a:
         88:b9:26:30:ec:22:40:84:bc:d3:bb:fe:47:27:1e:0f:6b:8f:
         17:1b:80:07:5c:82:d9:cd:49:ab:dc:f9:83:3a:de:14:00:be:
         b6:17:5d:02:0e:e7:30:fb:56:1a:d1:60:17:c3:24:63:3d:54:
         be:5b:06:82:c2:fc:58:e8:0d:99:42:49:7a:1d:dc:08:90:69:
         f5:cf:62:21:43:be:5d:f9:51:c5:4a:a0:33:cb:7b:bf:6d:bd:
         67:4e:f0:bf:cf:0c:38:94:39:04:e4:31:cc:43:d5:f2:b9:bc:
         42:f3:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:10:50 2025 by rpki-client