Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/323830343a343766343a633030303a3a2f33342d3334203d3e20323637303838.roa
File:                     323830343a343766343a633030303a3a2f33342d3334203d3e20323637303838.roa (raw, json)
Hash identifier:          N4J6JaYRJCcs9H3pBr2y5X9sqKL5SKuAwg0cOYyKMws=
Subject key identifier:   46:24:93:7E:08:E1:C6:A8:59:F8:12:61:5E:73:B0:15:DE:92:E0:B8
Certificate issuer:       /CN=C72086566EE782E49254BF59EB3177E027E3F1E6
Certificate serial:       7051EAD6104ABA5729EAE0EF26C5BE9B77BCB143
Authority key identifier: C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/323830343a343766343a633030303a3a2f33342d3334203d3e20323637303838.roa
Signing time:             Wed 08 Oct 2025 11:53:32 +0000
ROA not before:           Wed 08 Oct 2025 11:48:32 +0000
ROA not after:            Wed 07 Oct 2026 11:53:32 +0000
asID:                     267088
IP address blocks:        2804:47f4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.crl
                          rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:51:ea:d6:10:4a:ba:57:29:ea:e0:ef:26:c5:be:9b:77:bc:b1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C72086566EE782E49254BF59EB3177E027E3F1E6
        Validity
            Not Before: Oct  8 11:48:32 2025 GMT
            Not After : Oct  7 11:53:32 2026 GMT
        Subject: CN=4624937E08E1C6A859F812615E73B015DE92E0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:73:fe:c4:b7:06:d5:8b:f8:66:84:82:71:
                    c2:97:a6:c1:a2:ba:d8:1e:d3:5b:71:41:08:b2:44:
                    55:5f:6e:9b:7b:ea:53:71:cf:a6:2c:04:9e:9e:54:
                    04:16:73:4a:f5:ad:80:98:f3:5c:45:d0:11:b4:16:
                    d7:a9:54:e0:e5:6a:91:dc:bc:b8:bf:8f:60:7f:26:
                    6c:cc:d6:89:8d:df:a7:db:4c:41:4c:6a:6a:1b:bf:
                    07:25:7f:26:ca:eb:c4:3f:44:a0:69:82:2b:42:d0:
                    f2:64:00:04:8f:9d:11:9d:18:a8:38:64:7d:3a:22:
                    a1:b7:9a:c8:e2:e6:a1:23:bb:24:15:2f:c3:36:c9:
                    41:a9:d3:8a:65:a7:34:af:dc:b6:77:e8:53:ac:ac:
                    c5:ca:72:c2:c9:7c:a6:80:bd:ee:5c:c1:5f:81:55:
                    84:b5:e4:ec:2f:00:ac:c6:9c:20:cb:d8:16:70:06:
                    29:63:88:61:38:df:39:f3:d4:dd:90:33:35:3f:7d:
                    ea:bb:fe:a8:a6:09:87:91:c1:34:03:d6:7d:4a:86:
                    42:ec:9d:b6:03:99:21:fa:69:71:4f:3c:98:c1:bb:
                    66:a3:5a:60:cb:a9:57:0c:a7:11:da:59:30:16:2d:
                    eb:c1:cc:23:04:d7:6a:7f:27:d4:b0:df:c1:ae:83:
                    5c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:24:93:7E:08:E1:C6:A8:59:F8:12:61:5E:73:B0:15:DE:92:E0:B8
            X509v3 Authority Key Identifier:
                keyid:C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/323830343a343766343a633030303a3a2f33342d3334203d3e20323637303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47f4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:d4:99:82:f9:b0:79:03:29:1c:ee:fe:87:f1:67:8c:32:e0:
         64:02:b0:3d:07:7b:17:81:d7:97:cd:5b:e4:7a:ab:a7:de:e3:
         a3:c3:5b:25:2a:f6:c7:e2:6e:f5:ad:ef:41:40:f4:6a:9b:01:
         ea:da:f3:f8:84:63:8d:4c:8a:b7:ab:f6:53:47:34:dc:1c:f8:
         4b:5b:0d:99:24:b5:9e:eb:53:36:fa:02:e9:d2:28:b0:0b:fb:
         7d:c9:10:04:91:4e:1e:41:50:7c:61:49:b3:19:60:55:2b:c3:
         5e:d7:52:f4:e1:a8:dc:02:e8:21:6e:ad:e6:b3:df:e8:40:48:
         31:aa:20:7d:69:43:10:e6:d5:ba:5e:9f:18:d3:02:60:eb:cb:
         63:d6:60:24:eb:f9:f5:74:72:e4:65:94:0e:4d:15:02:10:b8:
         42:15:d8:50:62:30:a3:60:d2:7a:17:6e:47:ff:19:e1:5e:8b:
         a2:8d:05:eb:59:d8:81:09:1a:7d:74:9c:c8:50:c3:2f:af:e6:
         13:c5:63:cc:a3:96:2c:5a:52:e5:e2:47:e9:9e:8a:df:2b:23:
         b3:40:5f:00:13:ee:d2:b7:27:36:f2:b3:7e:0b:45:bb:88:20:
         34:76:d4:be:75:10:c7:27:f5:92:bf:2d:2a:78:ea:ab:84:c0:
         6a:c2:b4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:35 2025 by rpki-client