Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SnCNBzySef6rMmLdcZTkXdaPfSXzDA9KyULkExUwoaQ/0/323830343a3763343a3a2f33332d313238203d3e20323632333231.roa
File:                     323830343a3763343a3a2f33332d313238203d3e20323632333231.roa (raw, json)
Hash identifier:          UiUdd6MRhJZN3BUxrtZqVpJayzO7NWsdCmnSRU2rrCk=
Subject key identifier:   17:6A:63:94:77:95:62:C3:2E:AB:C6:73:A3:E0:47:CE:A7:25:15:44
Certificate issuer:       /CN=62ADD0EED40E3D32F7CB7ABA0991E8A9A6ACFA1E
Certificate serial:       0DBF924A54C51F0F2F583F29678BA72E24059B75
Authority key identifier: 62:AD:D0:EE:D4:0E:3D:32:F7:CB:7A:BA:09:91:E8:A9:A6:AC:FA:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62ADD0EED40E3D32F7CB7ABA0991E8A9A6ACFA1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SnCNBzySef6rMmLdcZTkXdaPfSXzDA9KyULkExUwoaQ/0/323830343a3763343a3a2f33332d313238203d3e20323632333231.roa
Signing time:             Tue 19 Aug 2025 19:22:55 +0000
ROA not before:           Tue 19 Aug 2025 19:17:55 +0000
ROA not after:            Tue 18 Aug 2026 19:22:55 +0000
asID:                     262321
IP address blocks:        2804:7c4::/33 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8SnCNBzySef6rMmLdcZTkXdaPfSXzDA9KyULkExUwoaQ/0/62ADD0EED40E3D32F7CB7ABA0991E8A9A6ACFA1E.crl
                          rsync://rpki-repo.registro.br/repo/8SnCNBzySef6rMmLdcZTkXdaPfSXzDA9KyULkExUwoaQ/0/62ADD0EED40E3D32F7CB7ABA0991E8A9A6ACFA1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62ADD0EED40E3D32F7CB7ABA0991E8A9A6ACFA1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bf:92:4a:54:c5:1f:0f:2f:58:3f:29:67:8b:a7:2e:24:05:9b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ADD0EED40E3D32F7CB7ABA0991E8A9A6ACFA1E
        Validity
            Not Before: Aug 19 19:17:55 2025 GMT
            Not After : Aug 18 19:22:55 2026 GMT
        Subject: CN=176A6394779562C32EABC673A3E047CEA7251544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:63:51:cf:fb:be:e9:53:0c:0c:e0:53:51:
                    54:4c:9f:9b:8e:73:b8:bb:bb:22:b9:86:24:26:7b:
                    fd:7a:6e:23:4a:7f:c1:d8:54:0e:65:b3:87:23:c6:
                    cf:5b:53:4a:6a:9c:68:08:f0:09:26:3e:4e:21:00:
                    66:82:f0:5e:41:07:61:b7:a4:4d:8d:ec:24:03:7c:
                    7d:bd:85:6e:10:18:24:ee:45:03:5f:c1:4d:9b:68:
                    76:7c:94:cd:5c:3d:4d:cd:e4:03:42:9a:8a:3f:f3:
                    10:0e:aa:66:77:21:98:08:82:dc:fe:a3:68:e0:28:
                    bc:38:44:96:27:7f:a0:61:2a:71:41:04:11:eb:a0:
                    d0:01:20:a8:7b:4e:60:b3:32:ac:8a:ad:21:43:d7:
                    55:a2:4c:c9:f6:c8:33:36:b3:27:4e:52:b3:3d:30:
                    fa:25:2d:be:f1:3c:9d:7f:8c:25:22:b0:0f:f2:bd:
                    3e:2d:5d:16:d0:ed:11:1b:95:9f:fa:3b:e4:82:62:
                    7a:a3:61:07:18:f7:d8:59:35:18:2e:aa:c0:bf:f4:
                    49:1c:d0:6a:91:54:03:de:e1:d1:91:f3:c1:e4:88:
                    88:3d:5e:f8:df:f6:83:be:fc:0f:9c:f0:fb:42:f7:
                    f7:c6:e7:e5:a9:c3:15:d8:87:dc:eb:e2:fe:5b:3f:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6A:63:94:77:95:62:C3:2E:AB:C6:73:A3:E0:47:CE:A7:25:15:44
            X509v3 Authority Key Identifier:
                keyid:62:AD:D0:EE:D4:0E:3D:32:F7:CB:7A:BA:09:91:E8:A9:A6:AC:FA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SnCNBzySef6rMmLdcZTkXdaPfSXzDA9KyULkExUwoaQ/0/62ADD0EED40E3D32F7CB7ABA0991E8A9A6ACFA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62ADD0EED40E3D32F7CB7ABA0991E8A9A6ACFA1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SnCNBzySef6rMmLdcZTkXdaPfSXzDA9KyULkExUwoaQ/0/323830343a3763343a3a2f33332d313238203d3e20323632333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c4::/33

    Signature Algorithm: sha256WithRSAEncryption
         41:f2:b6:f1:5f:b5:ab:86:d2:52:a0:60:f5:c3:a8:d7:e5:6e:
         b3:ac:cc:e6:c2:b6:ac:d4:a6:a2:6f:ec:5f:f9:0e:9e:4d:2b:
         85:e6:db:7f:1f:ba:32:5c:46:74:5e:0d:c0:83:24:19:6f:59:
         b1:7b:a5:15:f6:d1:7e:2a:58:4d:6c:a6:cb:53:35:22:5f:fc:
         11:21:35:3e:88:bb:a1:8b:0c:96:3f:95:54:81:24:0a:27:29:
         a4:15:53:e2:19:a9:99:8c:7f:48:fd:3f:79:97:04:99:d5:93:
         a5:bc:77:e8:89:72:e3:d4:2e:76:25:35:db:85:1f:33:fb:76:
         c8:c3:ff:a5:c6:c0:c1:ad:1c:c7:9b:04:bc:e7:7b:ba:36:2c:
         22:a9:62:de:6e:6a:4c:70:d9:8c:57:40:63:8e:92:d8:fc:10:
         ec:ed:80:84:c0:06:12:05:98:3a:7f:5b:59:78:5f:ae:ee:c4:
         c4:e9:be:5c:51:15:af:55:0f:55:5c:36:9d:7d:ae:bc:0f:23:
         03:f4:08:80:90:00:cc:4c:0d:e4:94:ac:11:c9:5a:47:54:cb:
         a7:4c:c2:bc:34:36:8b:54:d9:db:4b:43:dc:90:6e:60:e5:51:
         24:fa:3e:be:66:16:c6:78:34:52:4f:c8:93:5f:de:fb:56:a5:
         20:af:db:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:12 2025 by rpki-client