Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3332203d3e20323636303836.roa
File:                     323830343a336136343a3a2f33322d3332203d3e20323636303836.roa (raw, json)
Hash identifier:          eNWvNAP89sbMkK5FxByDC/FaoHi/Nvocjs+IRujIpR4=
Subject key identifier:   27:F5:01:3A:D7:1B:9A:04:EA:BC:89:53:07:09:BF:B8:49:9D:CD:D8
Certificate issuer:       /CN=44FC5A9A664B2444F593AABE0FA542C0DF508B03
Certificate serial:       5BD20F2F512140AB09FA3E08BA0CADC3FB880921
Authority key identifier: 44:FC:5A:9A:66:4B:24:44:F5:93:AA:BE:0F:A5:42:C0:DF:50:8B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44FC5A9A664B2444F593AABE0FA542C0DF508B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3332203d3e20323636303836.roa
Signing time:             Thu 26 Jun 2025 21:01:19 +0000
ROA not before:           Thu 26 Jun 2025 20:56:19 +0000
ROA not after:            Thu 25 Jun 2026 21:01:19 +0000
asID:                     266086
IP address blocks:        2804:3a64::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/44FC5A9A664B2444F593AABE0FA542C0DF508B03.crl
                          rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/44FC5A9A664B2444F593AABE0FA542C0DF508B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44FC5A9A664B2444F593AABE0FA542C0DF508B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 05:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d2:0f:2f:51:21:40:ab:09:fa:3e:08:ba:0c:ad:c3:fb:88:09:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44FC5A9A664B2444F593AABE0FA542C0DF508B03
        Validity
            Not Before: Jun 26 20:56:19 2025 GMT
            Not After : Jun 25 21:01:19 2026 GMT
        Subject: CN=27F5013AD71B9A04EABC89530709BFB8499DCDD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:13:ed:ec:99:ba:07:d3:36:83:1e:16:52:
                    33:87:51:3c:25:78:bb:75:ab:ff:f4:48:66:b7:c3:
                    d7:79:ab:84:bf:98:67:67:2d:7f:1a:8e:0c:7f:3d:
                    21:29:9b:31:58:b7:90:aa:cf:16:a3:ec:b9:e0:2f:
                    81:61:c3:47:a7:4d:06:40:f5:32:b1:b0:a9:43:ab:
                    28:eb:59:dd:f7:c3:3d:af:18:e9:b9:8a:ad:74:a8:
                    c4:e3:5e:ec:d8:8f:f8:b1:c8:ae:b4:f8:4e:c4:59:
                    4c:f0:c5:c6:63:e5:45:4f:ea:10:90:ea:00:27:f6:
                    4e:10:3e:61:62:2f:7f:0c:33:02:11:90:d7:a9:43:
                    4c:b3:65:c5:54:89:4c:22:ef:3f:3a:cf:c1:02:3f:
                    cc:92:7e:04:92:9b:f0:8a:34:86:5e:7f:49:12:3b:
                    d5:bb:4d:cc:75:cc:e2:3b:53:71:93:3e:9d:3f:8b:
                    26:c7:c6:fb:2c:cb:9c:f5:d2:b9:9c:56:7e:9c:b7:
                    83:78:7c:ac:13:30:2d:a5:5a:29:d6:5c:5e:63:46:
                    9b:df:6a:03:78:47:0d:6e:0f:45:c5:d2:4a:71:59:
                    14:cb:be:2a:65:12:ff:99:d8:1b:7c:97:fc:b1:41:
                    7c:8c:78:64:34:63:bc:7f:63:2c:d0:93:b7:ae:2d:
                    d4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F5:01:3A:D7:1B:9A:04:EA:BC:89:53:07:09:BF:B8:49:9D:CD:D8
            X509v3 Authority Key Identifier:
                keyid:44:FC:5A:9A:66:4B:24:44:F5:93:AA:BE:0F:A5:42:C0:DF:50:8B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/44FC5A9A664B2444F593AABE0FA542C0DF508B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44FC5A9A664B2444F593AABE0FA542C0DF508B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3332203d3e20323636303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:2c:f7:33:84:ea:2f:da:1d:95:b1:47:e7:e3:d9:2c:26:ba:
         38:8f:cd:42:e9:16:ad:70:af:65:12:c5:7e:38:48:28:d8:17:
         27:83:b5:a7:df:c6:4a:f3:b0:0e:f2:27:ce:b2:70:20:55:ad:
         34:c9:be:dd:09:b0:a4:68:88:0f:42:b9:d3:81:cb:5a:32:f4:
         f8:8c:1a:25:9b:f2:36:9e:f8:87:d5:2d:53:15:4b:24:26:05:
         1d:49:ea:28:60:32:04:c8:2d:41:50:17:df:06:a3:67:67:6b:
         10:5d:3c:6d:27:8c:a1:49:71:19:2a:2e:3f:af:57:90:19:c9:
         9c:39:20:2c:70:26:f4:83:75:d4:da:d3:18:9b:a3:66:96:30:
         47:ac:3b:e3:8f:c7:1b:3d:b2:60:f5:29:22:d3:d0:37:56:16:
         13:f7:b9:fa:a6:12:7d:20:e3:c6:77:a0:4d:30:b3:dd:a6:da:
         5b:33:92:d5:8d:ed:ed:b2:54:30:77:62:1f:e7:7a:47:1a:0c:
         d4:22:44:3a:38:81:bd:ae:80:e1:ae:e8:61:c2:26:22:24:fd:
         9e:69:89:bb:13:d6:f1:eb:b5:01:96:37:47:c8:c8:75:a0:01:
         56:31:f3:6d:e4:37:ee:9f:73:1b:05:16:b1:ee:4e:55:7b:c6:
         4d:14:3c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:40:34 2025 by rpki-client