Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/323830343a6632343a3a2f33322d313238203d3e20323633353637.roa
File:                     323830343a6632343a3a2f33322d313238203d3e20323633353637.roa (raw, json)
Hash identifier:          mjK/zjt4yzwTGIANGxBfkRBdXiLh2Sa/ZJrRKHITJgU=
Subject key identifier:   B8:8E:91:72:8C:D4:AB:75:01:FF:6E:5E:85:BF:63:E7:DA:9C:B0:10
Certificate issuer:       /CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3
Certificate serial:       2BE32235A6DC3230076E9ABD614E62E72CC1C7D5
Authority key identifier: 67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/323830343a6632343a3a2f33322d313238203d3e20323633353637.roa
Signing time:             Wed 02 Jul 2025 17:01:19 +0000
ROA not before:           Wed 02 Jul 2025 16:56:19 +0000
ROA not after:            Wed 01 Jul 2026 17:01:19 +0000
asID:                     263567
IP address blocks:        2804:f24::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl
                          rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 04:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e3:22:35:a6:dc:32:30:07:6e:9a:bd:61:4e:62:e7:2c:c1:c7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3
        Validity
            Not Before: Jul  2 16:56:19 2025 GMT
            Not After : Jul  1 17:01:19 2026 GMT
        Subject: CN=B88E91728CD4AB7501FF6E5E85BF63E7DA9CB010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:85:aa:43:cc:99:41:1f:24:b4:9d:99:4a:3d:
                    e2:9a:0b:d3:cf:67:c5:b6:5d:35:b0:55:81:a7:85:
                    9b:f3:3b:5c:fb:a2:6e:ae:05:82:ac:38:0f:55:2b:
                    16:29:42:d8:b0:f5:4c:a4:2c:ef:02:fc:83:16:9b:
                    c1:f3:15:14:89:2d:91:8c:68:a6:c1:55:b2:20:85:
                    c5:6f:35:51:e8:67:a8:43:73:4c:18:86:f2:92:32:
                    c5:49:aa:2d:81:cd:bc:da:12:b7:a7:75:97:0b:52:
                    5f:f2:90:9e:e3:65:e4:38:7c:f1:4f:cc:c1:34:b1:
                    75:f4:14:76:f4:fb:4c:03:80:60:94:0b:80:d2:c4:
                    95:28:41:41:a1:a7:06:00:8d:db:6f:33:1d:76:be:
                    32:3d:54:22:e6:2d:66:7a:4a:05:10:5a:69:ff:cf:
                    94:9f:03:ec:9b:39:33:11:99:80:85:c5:ac:fa:33:
                    8d:54:99:05:ad:3f:5b:23:2e:99:e0:c2:09:b6:f7:
                    9c:c2:8e:87:85:69:17:31:87:ee:15:a4:bf:73:9d:
                    12:96:dc:de:2e:1b:17:e5:50:8b:c5:31:b2:49:7d:
                    5b:0c:43:69:59:e4:07:92:6b:a8:95:d8:04:b4:75:
                    f1:00:d5:a7:5b:de:18:5c:ae:11:1d:a6:20:13:18:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8E:91:72:8C:D4:AB:75:01:FF:6E:5E:85:BF:63:E7:DA:9C:B0:10
            X509v3 Authority Key Identifier:
                keyid:67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/323830343a6632343a3a2f33322d313238203d3e20323633353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f24::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:8b:ff:ce:48:27:3e:74:60:41:c5:a8:cb:8e:d8:2f:c5:ad:
         b6:29:d0:2e:7d:fe:bb:50:fc:6a:87:12:a1:7b:bc:76:a9:98:
         8b:c0:0e:cf:99:30:1b:35:28:2d:03:60:ed:2c:f9:7f:98:a0:
         cf:37:8f:d0:6c:3f:42:0f:f5:c5:54:3c:51:9d:c3:1b:d7:43:
         32:0c:7d:05:e4:d4:67:d2:b2:7a:00:32:43:a0:ce:1b:53:3f:
         e2:f9:bf:52:02:f3:b7:f7:88:fe:a4:47:13:7b:52:44:ed:1b:
         18:68:df:0d:5b:06:7e:b7:d3:8a:ec:48:6d:da:33:f0:77:26:
         a7:70:ce:b5:7e:61:25:c7:e3:3a:8d:1d:a6:9b:6a:f1:f1:b9:
         69:64:c3:e6:80:4a:2f:94:fc:27:f9:56:9e:ad:0f:c1:2a:d5:
         d8:ab:a0:4f:19:b1:db:cb:05:74:48:90:42:01:43:20:b7:af:
         4c:5a:70:88:df:90:bb:fa:da:ab:4a:55:c6:54:8a:c2:67:4d:
         13:ef:fd:88:8d:d3:19:e9:9c:e0:00:aa:70:4a:97:c4:47:76:
         98:c4:4b:69:94:7d:79:dd:52:20:02:bb:4d:52:1d:d3:a3:32:
         37:37:51:a8:89:dd:b9:f4:0b:2a:0e:67:5d:d8:e2:25:07:9a:
         90:40:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 14:21:29 2025 by rpki-client