Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/323830343a373962383a333030303a3a2f33362d3336203d3e20323731333233.roa
File:                     323830343a373962383a333030303a3a2f33362d3336203d3e20323731333233.roa (raw, json)
Hash identifier:          2o6XI+Z+MOGbHThPK1YR6SM5PX+Fk5qwVn7AI6uJvLE=
Subject key identifier:   B8:68:68:2E:19:35:3C:EB:29:C4:46:D2:F0:E2:A1:F6:17:3F:26:59
Certificate issuer:       /CN=922B9B809E9734E02F711EB097B94EB6316A606D
Certificate serial:       50EDC46EBF9DE1602A9DFAFFA6A2378D8760E2AC
Authority key identifier: 92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/323830343a373962383a333030303a3a2f33362d3336203d3e20323731333233.roa
Signing time:             Sat 09 Aug 2025 13:06:00 +0000
ROA not before:           Sat 09 Aug 2025 13:01:00 +0000
ROA not after:            Sat 08 Aug 2026 13:06:00 +0000
asID:                     271323
IP address blocks:        2804:79b8:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl
                          rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ed:c4:6e:bf:9d:e1:60:2a:9d:fa:ff:a6:a2:37:8d:87:60:e2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922B9B809E9734E02F711EB097B94EB6316A606D
        Validity
            Not Before: Aug  9 13:01:00 2025 GMT
            Not After : Aug  8 13:06:00 2026 GMT
        Subject: CN=B868682E19353CEB29C446D2F0E2A1F6173F2659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:10:d3:ec:5a:c9:64:28:13:af:98:d1:3c:67:
                    32:1d:88:ac:68:11:32:b0:35:c2:62:4d:87:12:77:
                    09:ab:19:82:26:ea:57:59:a4:5d:7a:24:78:da:a2:
                    31:ef:58:2e:29:3d:ed:70:b3:a2:90:61:f4:0b:4c:
                    73:c4:85:47:be:13:43:32:c9:08:ab:5b:ee:ee:fb:
                    50:d6:f5:08:0a:d8:cc:b8:82:b2:42:a2:e3:4e:17:
                    d5:0f:4a:93:83:a1:01:1c:30:2e:ec:b2:95:73:58:
                    c4:38:60:63:f5:82:b9:a4:81:14:66:ca:41:fd:df:
                    b3:b1:27:96:63:44:7c:25:7a:e5:1e:fd:63:ac:13:
                    9a:10:e4:d2:8d:6b:7b:dc:44:7a:4b:dc:9f:0a:da:
                    d7:01:93:c8:34:8e:8d:ef:86:ee:b3:b5:51:c2:90:
                    5e:d5:6f:a2:11:04:e5:87:0a:eb:b6:74:7b:a9:ae:
                    be:79:cc:fc:05:94:48:78:9f:2e:11:ac:8c:f8:e9:
                    46:0a:bf:10:a7:9a:67:11:41:f8:17:a7:d1:60:34:
                    d5:ca:58:c3:d9:34:d3:88:c0:a5:8e:78:11:26:d0:
                    da:96:27:b2:59:48:22:0e:3f:e5:24:98:f6:fb:d0:
                    c8:98:29:69:ba:3b:a5:3b:77:55:7b:9d:29:08:82:
                    33:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:68:68:2E:19:35:3C:EB:29:C4:46:D2:F0:E2:A1:F6:17:3F:26:59
            X509v3 Authority Key Identifier:
                keyid:92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/323830343a373962383a333030303a3a2f33362d3336203d3e20323731333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79b8:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         20:18:9e:f4:63:32:7b:ed:fb:8e:f0:f8:dd:1f:a2:5b:f9:72:
         96:e7:45:0a:6c:62:4e:74:c7:da:94:a8:d2:02:f0:21:3b:ef:
         19:42:b7:42:e0:ad:9a:c4:4e:d0:92:ff:89:66:7e:fa:a4:21:
         bb:ef:9a:5e:b8:6d:13:56:3f:83:f9:d3:69:43:3c:dc:1a:1e:
         4e:a1:46:4e:33:1e:6f:be:80:7b:fc:3a:32:0e:04:12:70:f2:
         dc:6a:78:b2:62:7a:12:d4:0a:b5:34:69:7e:d8:de:96:69:0c:
         76:aa:f2:8c:fb:b7:47:91:29:ab:68:4c:97:3e:df:5f:5d:96:
         ab:8d:f4:c6:8e:bd:5e:09:57:03:71:05:87:e4:73:55:b9:62:
         45:5c:34:2e:a0:98:35:13:b6:f3:2a:a3:d1:a6:e0:fd:6d:55:
         6e:9c:bc:ff:94:cb:ed:6e:5a:f4:b8:ff:c0:88:77:50:d1:ab:
         97:7e:67:5e:8f:28:15:8d:f5:d3:0b:6c:4c:6d:b8:39:5e:87:
         99:2f:5b:66:6f:79:16:b7:bd:1a:4e:87:12:17:62:82:4a:30:
         2e:c0:30:f7:e0:1a:74:30:f9:be:a7:a9:97:3a:05:b9:1d:b2:
         13:1d:d5:ce:26:4e:8a:02:b8:b3:2f:10:23:34:73:5d:31:18:
         93:cb:ee:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:37:18 2025 by rpki-client