Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/323830343a373962383a313030303a3a2f33362d3336203d3e20323731333233.roa
File:                     323830343a373962383a313030303a3a2f33362d3336203d3e20323731333233.roa (raw, json)
Hash identifier:          TMnww9g6uI4AIprV6ySZ4b5mWCCMKY/Gd3dIE6oEYk4=
Subject key identifier:   A8:80:E3:E2:E6:C3:10:B0:86:3F:DF:A5:78:1E:B5:58:EF:FF:24:8A
Certificate issuer:       /CN=922B9B809E9734E02F711EB097B94EB6316A606D
Certificate serial:       75ED079FA072F3C5A955E0EB4D336100B87AACD2
Authority key identifier: 92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/323830343a373962383a313030303a3a2f33362d3336203d3e20323731333233.roa
Signing time:             Sat 09 Aug 2025 13:04:55 +0000
ROA not before:           Sat 09 Aug 2025 12:59:55 +0000
ROA not after:            Sat 08 Aug 2026 13:04:55 +0000
asID:                     271323
IP address blocks:        2804:79b8:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl
                          rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ed:07:9f:a0:72:f3:c5:a9:55:e0:eb:4d:33:61:00:b8:7a:ac:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922B9B809E9734E02F711EB097B94EB6316A606D
        Validity
            Not Before: Aug  9 12:59:55 2025 GMT
            Not After : Aug  8 13:04:55 2026 GMT
        Subject: CN=A880E3E2E6C310B0863FDFA5781EB558EFFF248A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:9e:01:13:9d:a0:6a:00:7d:dd:2b:18:de:
                    c1:24:33:a7:da:c5:29:c9:2d:9e:bc:e4:09:3b:1e:
                    ad:05:ea:3f:75:4d:95:e0:e4:d3:54:c3:b8:ac:f8:
                    31:12:7c:43:09:3b:61:5b:f2:c7:0d:8f:ca:32:d8:
                    96:1c:1d:0e:10:2e:55:a9:88:fc:2a:44:2d:fa:70:
                    af:14:4d:87:0c:8b:2c:3f:14:a9:b0:87:f5:e6:dd:
                    e9:a3:4d:8e:3b:d9:04:4c:21:70:4d:26:e9:44:0c:
                    5e:8e:69:bb:41:fc:63:a5:9b:f3:c6:89:33:92:30:
                    71:ff:d1:05:2a:20:82:3f:6d:6d:32:cf:0a:99:7e:
                    52:af:9c:77:c2:98:b6:dd:08:09:99:b0:ce:9d:7d:
                    f3:44:7c:50:3b:9f:38:1f:da:60:53:3b:63:b7:87:
                    58:63:52:7d:22:86:6e:75:2d:ba:65:76:37:5d:f4:
                    11:6a:85:ca:60:2e:7e:7f:26:84:4b:34:d2:d3:22:
                    6a:16:16:9c:ea:de:f8:db:70:3c:cd:b7:df:e2:20:
                    f6:2e:51:d0:c1:f5:a7:30:de:27:22:44:53:51:69:
                    19:7f:06:80:4f:99:af:fa:4d:6a:d4:7f:92:82:77:
                    01:b0:c9:c9:74:ab:d0:a0:4a:d9:3c:a6:cf:00:1c:
                    db:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:80:E3:E2:E6:C3:10:B0:86:3F:DF:A5:78:1E:B5:58:EF:FF:24:8A
            X509v3 Authority Key Identifier:
                keyid:92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/323830343a373962383a313030303a3a2f33362d3336203d3e20323731333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79b8:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         32:9a:67:bd:64:43:ad:7f:bd:7a:17:b3:79:12:59:1e:91:fe:
         b7:ad:04:df:6d:83:7c:5b:d8:eb:24:7c:78:ac:18:09:32:22:
         73:c4:ba:92:f0:5e:99:6a:26:4c:20:10:ef:82:c6:c4:35:a0:
         91:f9:0c:26:00:fc:0e:4d:60:53:5d:fe:0f:0b:47:83:40:60:
         1a:ca:5e:aa:65:9e:54:ed:69:93:d6:89:5f:8b:50:99:76:e2:
         85:62:c4:f7:a0:40:37:a4:10:2a:21:2a:60:54:cc:c8:91:02:
         9b:69:f1:25:52:24:43:21:df:bd:e5:de:10:bf:8f:09:24:1e:
         f5:64:cb:fd:75:32:af:d6:5c:82:13:d7:1d:8a:7e:41:c9:6c:
         e9:ac:2d:52:7c:d5:1a:19:91:f6:4e:a8:15:5b:23:f3:a5:0d:
         8c:16:12:f8:19:ff:6a:be:50:3d:1d:6a:2f:d2:fc:de:55:46:
         30:98:fb:d6:9e:c6:03:79:08:2e:d1:e3:27:de:5e:61:07:65:
         a9:0c:b6:5f:4b:ec:e7:b7:7c:91:a7:0f:15:fa:68:6f:23:4d:
         88:73:bc:4a:d6:c1:c3:6e:01:29:7a:b1:7e:3b:e8:7c:a3:fd:
         41:fd:ce:88:a1:0e:45:db:68:e7:de:4f:05:01:3c:cc:9d:63:
         30:d3:b6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:58:39 2025 by rpki-client