Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/323830343a376131383a3a2f33322d313238203d3e20323731333437.roa
File:                     323830343a376131383a3a2f33322d313238203d3e20323731333437.roa (raw, json)
Hash identifier:          RiT+Jr/qWk/mKEE5Yn7Gn/093I92rwAI8YyPWCFq+rM=
Subject key identifier:   0E:21:50:27:2E:BA:6A:27:88:96:B2:85:F9:E3:C9:94:3C:B5:07:C0
Certificate issuer:       /CN=8FBA71A8DD4044953FA3772B55E18831A51A7141
Certificate serial:       68BD08B73E0830726ECC3204287CD554013C27F6
Authority key identifier: 8F:BA:71:A8:DD:40:44:95:3F:A3:77:2B:55:E1:88:31:A5:1A:71:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FBA71A8DD4044953FA3772B55E18831A51A7141.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/323830343a376131383a3a2f33322d313238203d3e20323731333437.roa
Signing time:             Fri 27 Jun 2025 16:19:22 +0000
ROA not before:           Fri 27 Jun 2025 16:14:22 +0000
ROA not after:            Fri 26 Jun 2026 16:19:22 +0000
asID:                     271347
IP address blocks:        2804:7a18::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.crl
                          rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FBA71A8DD4044953FA3772B55E18831A51A7141.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 01:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bd:08:b7:3e:08:30:72:6e:cc:32:04:28:7c:d5:54:01:3c:27:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FBA71A8DD4044953FA3772B55E18831A51A7141
        Validity
            Not Before: Jun 27 16:14:22 2025 GMT
            Not After : Jun 26 16:19:22 2026 GMT
        Subject: CN=0E2150272EBA6A278896B285F9E3C9943CB507C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:82:85:56:6d:df:5f:40:49:16:83:de:58:
                    84:76:9d:5b:59:95:65:2a:20:73:31:9f:0f:f9:21:
                    42:b5:3d:59:03:8a:9c:d3:ff:b9:82:ea:94:e2:84:
                    57:f2:b5:6f:b6:12:88:5a:41:00:71:08:d0:84:f3:
                    51:ec:f9:30:8f:dd:f3:c1:14:30:22:9b:dd:6b:95:
                    93:03:37:91:d8:7b:9d:b8:c8:5c:b5:94:3e:4b:17:
                    fc:da:3c:d0:ef:06:43:9b:9c:c9:9c:c8:f6:1b:75:
                    4a:11:b8:25:88:8a:9d:a4:bd:3d:60:34:0e:d4:e3:
                    b1:34:0a:19:69:6e:f1:72:18:1d:3d:2f:24:fd:4a:
                    29:fe:69:8a:4f:8c:c8:78:a8:05:82:f6:a1:5b:f8:
                    27:8e:e1:da:d0:db:ec:40:ce:fd:9e:b4:44:ca:5b:
                    74:b9:1e:06:11:a6:ae:e2:aa:3b:86:4f:5a:9b:5d:
                    73:e7:25:00:3d:57:43:9e:00:86:02:30:a6:78:63:
                    ff:bd:11:68:05:98:e2:db:ee:90:f0:69:83:f5:40:
                    64:80:ee:7d:06:ec:a6:3c:3c:f2:78:4f:09:89:26:
                    3f:b3:e3:05:a9:98:55:16:0f:3c:c5:dd:96:75:8d:
                    2e:fa:cf:24:49:ee:38:99:22:c5:26:72:17:2c:86:
                    26:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:21:50:27:2E:BA:6A:27:88:96:B2:85:F9:E3:C9:94:3C:B5:07:C0
            X509v3 Authority Key Identifier:
                keyid:8F:BA:71:A8:DD:40:44:95:3F:A3:77:2B:55:E1:88:31:A5:1A:71:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FBA71A8DD4044953FA3772B55E18831A51A7141.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/323830343a376131383a3a2f33322d313238203d3e20323731333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a18::/32

    Signature Algorithm: sha256WithRSAEncryption
         dc:ef:74:b1:64:73:1c:ef:ea:d1:43:7d:61:f5:38:e8:47:eb:
         2b:81:ae:40:20:90:85:7a:38:bd:e0:34:43:f7:07:3b:46:90:
         13:d3:18:37:f6:36:a2:64:d8:2b:b9:f5:47:92:14:18:c1:0e:
         22:9c:bf:2e:14:d4:98:30:8c:12:ed:05:13:23:68:a5:18:e1:
         2f:99:1e:a4:8c:78:a8:af:75:7e:c4:5a:07:91:f7:9a:9f:24:
         7b:9c:b0:d3:ed:86:22:2c:b7:b5:0e:8b:8c:8a:93:71:90:04:
         67:56:01:1e:56:a1:6e:02:de:1b:e6:b5:45:22:b8:ff:dd:54:
         fa:6c:68:ef:01:29:97:11:8c:da:a1:c1:66:ed:e8:02:0c:8f:
         3a:0b:97:a6:0f:9c:ad:c8:29:da:c9:76:35:e2:00:fd:bc:26:
         fb:7f:88:ce:93:14:23:28:f3:58:7a:d4:46:0a:24:ff:bf:58:
         11:88:64:5d:8e:4e:a8:59:e8:06:a0:1b:9d:89:3c:b2:88:1a:
         5e:80:5e:93:17:1e:f8:83:3d:45:20:47:01:1b:f0:fe:ab:df:
         2e:16:36:bb:dd:a7:de:3b:ee:00:22:e0:82:dd:c9:c5:f8:bf:
         14:d6:37:f7:dd:42:65:6c:b2:50:8f:00:d5:1f:59:d9:63:52:
         89:15:1a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:24:18 2025 by rpki-client