Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a3a2f33342d3334203d3e20323731363939.roa
File:                     323830343a376661303a3a2f33342d3334203d3e20323731363939.roa (raw, json)
Hash identifier:          L/LlTXtN2enYzT79kDaPfAQt0BSIXufWRnry1Mc8zBU=
Subject key identifier:   CF:4E:72:E1:22:C9:C7:86:16:29:D4:C0:4F:18:25:6D:DF:6F:1C:F5
Certificate issuer:       /CN=F292A8F647A00800145AA8D3CD40704C603AE5A7
Certificate serial:       45BBCD13713D86A25191AB6A42C14E82E7766929
Authority key identifier: F2:92:A8:F6:47:A0:08:00:14:5A:A8:D3:CD:40:70:4C:60:3A:E5:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F292A8F647A00800145AA8D3CD40704C603AE5A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a3a2f33342d3334203d3e20323731363939.roa
Signing time:             Wed 20 Aug 2025 16:48:20 +0000
ROA not before:           Wed 20 Aug 2025 16:43:20 +0000
ROA not after:            Wed 19 Aug 2026 16:48:20 +0000
asID:                     271699
IP address blocks:        2804:7fa0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/F292A8F647A00800145AA8D3CD40704C603AE5A7.crl
                          rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/F292A8F647A00800145AA8D3CD40704C603AE5A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F292A8F647A00800145AA8D3CD40704C603AE5A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 19:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bb:cd:13:71:3d:86:a2:51:91:ab:6a:42:c1:4e:82:e7:76:69:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F292A8F647A00800145AA8D3CD40704C603AE5A7
        Validity
            Not Before: Aug 20 16:43:20 2025 GMT
            Not After : Aug 19 16:48:20 2026 GMT
        Subject: CN=CF4E72E122C9C7861629D4C04F18256DDF6F1CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:90:e7:38:a1:c3:06:4f:08:23:dd:04:47:
                    1a:a6:4a:c5:93:01:be:ee:f8:1c:ae:8d:37:49:f3:
                    d5:85:85:11:e5:11:1c:a2:a7:c6:42:96:08:51:00:
                    27:06:18:0f:00:be:8e:5b:33:69:35:51:fe:28:eb:
                    8f:da:c8:ea:45:a9:0c:60:dc:f6:72:4f:c4:68:71:
                    42:79:93:bb:b4:9b:2d:5c:fb:3d:4c:89:a6:e7:6c:
                    a8:04:59:76:a3:f9:00:95:3f:ab:66:b5:e8:67:70:
                    28:af:38:f3:94:09:71:78:90:98:55:e1:2c:b1:dc:
                    49:1a:74:12:d8:78:4f:f0:cd:4b:2f:7d:7e:9e:4e:
                    7a:3e:af:5d:42:64:17:38:1d:b3:44:0e:95:f0:ac:
                    e8:b6:6b:db:21:1d:fb:c6:fd:6b:06:7f:44:a4:fb:
                    d2:6a:1b:84:cb:38:02:6d:27:f5:c7:37:ec:ee:62:
                    39:a3:3c:26:d4:c1:48:0f:86:9e:b3:2b:a1:57:6c:
                    ea:92:64:41:90:7d:7b:a5:90:03:1b:77:88:89:35:
                    fd:cb:0a:8b:73:16:40:b4:b3:b7:03:4a:69:8f:6c:
                    03:30:f4:65:b1:f9:46:ca:d7:85:6a:be:41:a1:b1:
                    1e:6f:9e:6e:73:90:1f:37:6e:8c:3a:47:eb:0b:0f:
                    46:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4E:72:E1:22:C9:C7:86:16:29:D4:C0:4F:18:25:6D:DF:6F:1C:F5
            X509v3 Authority Key Identifier:
                keyid:F2:92:A8:F6:47:A0:08:00:14:5A:A8:D3:CD:40:70:4C:60:3A:E5:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/F292A8F647A00800145AA8D3CD40704C603AE5A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F292A8F647A00800145AA8D3CD40704C603AE5A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a3a2f33342d3334203d3e20323731363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa0::/34

    Signature Algorithm: sha256WithRSAEncryption
         06:91:07:17:48:76:e3:98:97:f2:47:75:6b:59:04:fb:fd:9e:
         76:ad:40:a5:4c:7b:17:b0:e8:b4:a1:ac:e5:08:b2:36:da:26:
         61:e9:a6:c2:61:49:13:ee:92:10:6c:d0:ec:3e:8b:5c:be:df:
         9e:5e:c7:3c:15:e3:b3:52:8f:cf:aa:31:3b:e1:e7:1d:16:0c:
         1f:67:61:b5:c4:e9:2f:1a:15:58:a3:86:6a:ea:ed:38:22:b1:
         8d:3e:6a:a9:be:10:6a:b7:d5:2e:6b:f4:c6:dd:ee:06:9b:52:
         f0:35:8b:32:9a:9a:68:47:c1:77:33:a1:62:d0:6a:7c:e2:22:
         f0:e1:d9:d7:03:33:45:93:96:19:8c:7c:1c:c7:1a:f1:4e:5e:
         0e:70:2f:a4:d1:97:cb:77:f8:33:b2:9b:ee:b3:71:3d:dc:1f:
         eb:de:98:b7:d2:c9:a8:6a:02:ba:a4:08:3e:b6:4a:54:fc:77:
         37:65:fb:da:71:4f:89:c8:95:8d:71:59:92:78:c9:45:7f:e3:
         e9:7e:c5:ff:38:82:b2:21:aa:33:ee:b3:b7:bd:22:48:a4:48:
         62:3d:39:2c:89:32:f0:4a:0d:d2:5f:04:41:3f:49:a9:ec:e8:
         88:92:7a:d5:df:04:78:b2:af:91:40:ae:87:c9:21:5a:89:88:
         cd:0e:83:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:11:12 2025 by rpki-client