Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d313238203d3e20323636303231.roa
File:                     323830343a333934303a3a2f33322d313238203d3e20323636303231.roa (raw, json)
Hash identifier:          6Knr8V1SrDkhEFuki7D17IGL0FDVRYXBE5dma/X1Ubw=
Subject key identifier:   61:C7:EC:72:A4:3C:9A:A8:56:A4:A4:A5:0D:B5:65:99:E8:0E:B5:23
Certificate issuer:       /CN=796A68FA93CF85A55F75079A8CE26E4D9CF1EC83
Certificate serial:       256524858EFD6FA0BFAAFE4D46D7AC57A919745E
Authority key identifier: 79:6A:68:FA:93:CF:85:A5:5F:75:07:9A:8C:E2:6E:4D:9C:F1:EC:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/796A68FA93CF85A55F75079A8CE26E4D9CF1EC83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d313238203d3e20323636303231.roa
Signing time:             Mon 30 Jun 2025 18:29:01 +0000
ROA not before:           Mon 30 Jun 2025 18:24:01 +0000
ROA not after:            Mon 29 Jun 2026 18:29:01 +0000
asID:                     266021
IP address blocks:        2804:3940::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/796A68FA93CF85A55F75079A8CE26E4D9CF1EC83.crl
                          rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/796A68FA93CF85A55F75079A8CE26E4D9CF1EC83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/796A68FA93CF85A55F75079A8CE26E4D9CF1EC83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 21:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:65:24:85:8e:fd:6f:a0:bf:aa:fe:4d:46:d7:ac:57:a9:19:74:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796A68FA93CF85A55F75079A8CE26E4D9CF1EC83
        Validity
            Not Before: Jun 30 18:24:01 2025 GMT
            Not After : Jun 29 18:29:01 2026 GMT
        Subject: CN=61C7EC72A43C9AA856A4A4A50DB56599E80EB523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:06:ec:4e:ce:21:04:65:6f:ba:45:19:69:
                    75:34:61:7d:89:01:45:69:90:22:84:13:b9:15:99:
                    9c:ae:5e:84:a7:dd:34:fc:5e:78:69:7a:ea:6e:21:
                    23:e4:d6:c6:3b:fc:49:12:3a:69:a1:90:6e:e6:f8:
                    ce:84:76:46:f9:5a:c1:67:d0:e2:11:c1:13:6f:66:
                    ca:26:1d:6d:c1:35:fa:dd:19:42:36:1f:ba:f5:d7:
                    df:19:d7:92:b4:68:e4:27:31:a5:97:40:14:0b:64:
                    b0:16:79:c5:57:a6:d9:67:37:94:62:5e:94:68:ae:
                    a4:3e:0b:d4:07:ba:f0:b0:e5:88:f2:b4:62:e0:a9:
                    30:4d:b8:aa:f1:30:1a:71:f2:4d:ff:f2:7b:42:db:
                    c2:01:ce:f7:be:86:04:02:22:17:c7:38:36:ed:3f:
                    63:17:12:5d:84:d1:ff:b0:97:04:7e:7e:a6:38:8f:
                    b1:c5:4a:14:48:43:4b:8f:be:55:96:33:cf:0d:37:
                    94:5e:78:9e:fe:de:28:69:d1:f2:85:c9:53:35:d7:
                    f5:53:c1:94:f9:16:09:2a:83:97:81:4c:86:a4:d3:
                    6b:b8:28:2d:8f:3f:50:d1:b5:11:72:1d:1d:a9:1d:
                    69:fb:26:f3:7f:27:43:78:86:19:ef:05:0b:dc:f0:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C7:EC:72:A4:3C:9A:A8:56:A4:A4:A5:0D:B5:65:99:E8:0E:B5:23
            X509v3 Authority Key Identifier:
                keyid:79:6A:68:FA:93:CF:85:A5:5F:75:07:9A:8C:E2:6E:4D:9C:F1:EC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/796A68FA93CF85A55F75079A8CE26E4D9CF1EC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/796A68FA93CF85A55F75079A8CE26E4D9CF1EC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d313238203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3940::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:6e:35:a6:bf:c0:45:ed:1d:f4:b5:55:d2:db:fc:5d:ca:19:
         a4:36:3c:48:08:2c:f1:43:ec:b3:0e:ce:a6:e4:25:c7:c7:37:
         8a:25:94:09:d7:03:42:6d:4e:d4:60:00:b9:8c:75:06:ee:a3:
         c7:e2:7f:b7:e5:6b:8a:2f:b3:5a:9b:e9:bd:67:56:83:02:6b:
         2f:3f:55:36:d3:12:fe:ca:2c:4b:eb:0a:9c:ef:0a:89:d0:fd:
         aa:2b:7d:2a:d0:e1:79:70:04:52:fa:62:b9:41:16:4c:e8:8e:
         10:fb:91:26:bc:d5:5c:7a:4d:0f:64:0c:7e:de:0f:93:71:1b:
         c6:d6:f2:fc:6e:d9:88:be:28:ba:2e:b7:fa:10:de:bd:cc:8d:
         d6:1d:40:4b:fe:ed:c8:3b:d1:19:c0:96:ce:53:aa:d1:4c:ca:
         08:85:0f:8a:db:64:42:32:fe:4d:b6:f9:eb:a3:79:87:15:07:
         b7:bb:cf:4a:01:b6:02:10:78:d5:40:08:76:1a:92:d7:c1:d6:
         75:2f:54:3c:ab:12:4e:16:7f:e4:d9:17:80:a0:27:44:1d:58:
         db:c7:dd:00:73:c0:c6:a5:8f:85:12:95:09:78:2f:5d:ec:51:
         52:3f:e5:78:2e:79:d9:05:6a:f3:42:bd:8e:93:0d:e5:ef:f3:
         4a:4a:d8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:11:34 2025 by rpki-client