Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a3a2f33322d3438203d3e20323639363634.roa
File:                     323830343a363830303a3a2f33322d3438203d3e20323639363634.roa (raw, json)
Hash identifier:          qfb6AfqGl8bOQeHXD/A3gn8XVKh+t8Os//kVhwqFnkU=
Subject key identifier:   29:72:28:F7:81:C4:03:D8:9F:65:75:6F:F2:9E:BC:0B:75:F5:86:39
Certificate issuer:       /CN=BCC70231E0F5873F65D74BA9E22BDB4A1E52E437
Certificate serial:       4265FF747DDB882E1866F0605135C22E77883E6E
Authority key identifier: BC:C7:02:31:E0:F5:87:3F:65:D7:4B:A9:E2:2B:DB:4A:1E:52:E4:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a3a2f33322d3438203d3e20323639363634.roa
Signing time:             Fri 15 Aug 2025 18:10:32 +0000
ROA not before:           Fri 15 Aug 2025 18:05:32 +0000
ROA not after:            Fri 14 Aug 2026 18:10:32 +0000
asID:                     269664
IP address blocks:        2804:6800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl
                          rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 05:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:65:ff:74:7d:db:88:2e:18:66:f0:60:51:35:c2:2e:77:88:3e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC70231E0F5873F65D74BA9E22BDB4A1E52E437
        Validity
            Not Before: Aug 15 18:05:32 2025 GMT
            Not After : Aug 14 18:10:32 2026 GMT
        Subject: CN=297228F781C403D89F65756FF29EBC0B75F58639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:70:d1:01:1e:35:74:f1:3e:67:56:c0:bc:
                    df:a4:74:4c:d8:f0:44:01:d3:a7:ec:48:b1:e2:54:
                    7e:84:98:43:ca:4a:15:32:cb:4e:0f:55:2a:a6:87:
                    30:f4:fc:32:fb:03:5a:d4:6e:83:d2:d0:8b:9a:1a:
                    fd:cb:e3:19:08:33:1f:cf:e5:73:b7:04:df:b1:4b:
                    ae:0b:44:67:7c:b9:96:43:71:6c:d0:74:29:5a:44:
                    34:d8:d7:7f:28:75:72:ab:55:d3:9f:90:34:4a:7f:
                    ca:b9:71:69:3c:50:7f:61:a3:89:5c:81:72:81:5c:
                    44:27:6a:cc:17:2d:8e:f1:23:67:f8:51:b6:44:bf:
                    8e:73:46:f7:4a:16:12:ae:45:72:7e:8f:ea:83:1d:
                    70:22:f7:e9:2c:ff:8f:e8:54:5b:60:59:84:db:0b:
                    a1:1b:bd:0c:fa:00:c3:c8:5f:44:63:a6:ac:ad:a5:
                    c4:18:46:7a:2b:00:63:d8:4e:65:fa:7a:2a:40:20:
                    ba:32:af:ed:3e:3e:47:f5:0d:32:cd:95:9c:51:e7:
                    ec:5b:2a:f6:fb:67:21:7b:68:71:67:19:3a:1e:78:
                    c3:66:ff:61:94:6d:a5:f9:9e:be:ce:31:2e:65:ae:
                    aa:24:70:7e:80:e2:c3:e3:a2:a6:6c:e3:a2:89:0a:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:72:28:F7:81:C4:03:D8:9F:65:75:6F:F2:9E:BC:0B:75:F5:86:39
            X509v3 Authority Key Identifier:
                keyid:BC:C7:02:31:E0:F5:87:3F:65:D7:4B:A9:E2:2B:DB:4A:1E:52:E4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a3a2f33322d3438203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6800::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:57:52:99:ff:3e:5d:dd:35:24:c3:3b:95:fb:57:9c:66:
         7f:76:2b:24:85:dc:08:af:2b:60:23:86:e2:fd:8f:74:d1:38:
         d8:3b:2e:02:36:d7:8d:c9:6e:89:8b:ef:45:0f:f0:35:01:2d:
         fb:dc:b3:e0:fd:41:e6:43:00:a2:19:1b:e0:c1:21:7c:79:a3:
         78:2b:6d:18:0f:c6:a0:85:b9:a8:cb:4a:7e:9b:c9:8e:e7:23:
         8b:63:58:8a:52:3e:88:b2:9c:db:2e:1e:da:81:5c:8e:3f:11:
         13:96:f3:e7:e6:0e:01:07:2c:e0:0e:94:46:5d:98:59:0c:e7:
         7e:e0:36:c0:41:b3:0b:01:58:0e:f9:bd:84:fd:f2:aa:12:b5:
         5b:22:31:58:d3:3f:4c:9c:bd:dc:36:e8:ad:63:d9:36:84:c6:
         c2:5e:18:cc:55:63:ad:f2:c2:3f:86:9a:6e:23:78:27:c4:d3:
         02:0d:7c:67:cb:d7:d8:12:51:11:83:ef:5d:20:d3:e4:11:e5:
         df:6c:23:b1:47:28:aa:55:a1:30:52:ba:3c:c1:68:ee:85:a9:
         b5:4f:f3:55:bc:9b:eb:e6:14:29:f7:5b:83:4e:9d:a2:be:03:
         28:17:8c:0d:23:69:e1:f8:9a:f6:09:40:9b:a6:4e:02:b2:ae:
         88:a0:fc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:29:46 2025 by rpki-client