Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a3a2f34342d3434203d3e20323633393935.roa
File:                     323830343a323931303a3a2f34342d3434203d3e20323633393935.roa (raw, json)
Hash identifier:          19YYElrSUoCNGtrtG01beRgcwWRs9m7ywAl7Jl+phzY=
Subject key identifier:   61:87:AE:C9:F6:81:E3:4A:84:B8:88:62:DB:1A:8F:B8:85:BE:BE:5C
Certificate issuer:       /CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
Certificate serial:       22112019E2C2554BAB6893A26C3BD54AFD4EB9EB
Authority key identifier: D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a3a2f34342d3434203d3e20323633393935.roa
Signing time:             Wed 30 Jul 2025 13:15:51 +0000
ROA not before:           Wed 30 Jul 2025 13:10:51 +0000
ROA not after:            Wed 29 Jul 2026 13:15:51 +0000
asID:                     263995
IP address blocks:        2804:2910::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:11:20:19:e2:c2:55:4b:ab:68:93:a2:6c:3b:d5:4a:fd:4e:b9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
        Validity
            Not Before: Jul 30 13:10:51 2025 GMT
            Not After : Jul 29 13:15:51 2026 GMT
        Subject: CN=6187AEC9F681E34A84B88862DB1A8FB885BEBE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:aa:f4:89:fe:9d:bd:cd:d2:64:dc:83:a4:
                    08:25:51:10:a4:60:86:ed:de:99:35:7b:a4:e2:b1:
                    7e:6e:95:ca:44:22:26:90:1e:d7:a0:17:3f:38:a2:
                    09:a2:af:78:06:c0:1e:16:a1:42:b8:99:13:33:f6:
                    bb:eb:14:a3:dd:51:27:e0:ae:6a:64:de:9e:25:59:
                    b5:50:b9:51:3e:13:02:d6:47:d1:f2:a7:fb:13:89:
                    78:5d:c1:9d:43:94:5b:1a:e0:0e:54:7c:62:44:60:
                    78:d8:cf:57:a0:f2:17:77:c6:8a:c4:e3:a0:88:73:
                    3c:e0:a5:24:56:e4:e0:a7:71:46:96:9c:db:fb:71:
                    e8:51:31:12:1f:8f:67:92:28:7a:45:4f:61:7d:cc:
                    74:4c:68:cf:a4:35:31:4c:2d:cd:34:b0:40:3a:ff:
                    7c:f7:42:5f:0c:d2:11:29:d4:e4:b2:64:c7:38:b4:
                    8c:15:9f:f6:2b:98:e4:50:c5:26:fe:09:0b:f7:bb:
                    16:fe:d1:dc:93:60:2d:13:1c:f5:67:34:08:3b:98:
                    0e:3b:3e:db:6d:2e:25:84:8c:8a:0f:c7:66:77:e6:
                    a5:11:ab:04:60:01:cd:3d:17:4b:ed:4f:5d:73:59:
                    9d:7b:07:3c:d0:02:1f:0e:3d:c5:1b:55:03:34:60:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:87:AE:C9:F6:81:E3:4A:84:B8:88:62:DB:1A:8F:B8:85:BE:BE:5C
            X509v3 Authority Key Identifier:
                keyid:D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a3a2f34342d3434203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2910::/44

    Signature Algorithm: sha256WithRSAEncryption
         88:c2:02:7c:fe:4b:5e:aa:18:a8:0c:7b:8d:e5:6e:d8:60:ec:
         d4:db:80:7f:62:2b:cc:6e:d7:ae:58:30:02:45:e2:74:22:dc:
         8c:1d:d3:a7:29:a9:26:a7:94:12:82:4d:3f:41:f1:20:58:14:
         40:fb:fa:ae:5f:12:5c:c1:90:dc:75:23:de:51:bb:63:2f:f0:
         db:1f:02:b4:f2:85:8b:07:31:a8:fc:39:e6:ff:2d:6f:e1:68:
         f4:21:a0:24:96:1c:2b:9b:ed:c7:72:1f:b0:3f:0c:d0:80:ae:
         f6:52:d5:7d:e5:51:6c:48:26:c9:11:f9:fc:33:21:f5:53:00:
         9a:4d:23:09:41:ff:09:9a:3a:98:96:d5:ce:9e:ed:19:da:01:
         9e:98:40:5c:7f:c3:a5:69:5d:79:77:83:bb:a2:2e:be:88:ec:
         bd:91:1f:33:1a:6d:99:f2:a1:11:be:ce:bd:fc:25:8e:ea:70:
         a3:60:f2:30:3a:19:c5:00:ef:54:ea:ca:99:81:16:ed:69:a0:
         48:b6:88:03:e1:f5:9f:48:da:b5:89:d7:d5:54:88:d7:01:6d:
         64:cf:36:d9:11:bb:0b:dc:bc:29:cf:ed:a8:67:91:13:6c:0f:
         e4:5b:4a:48:69:77:0c:91:bd:d9:f0:8d:a3:61:fd:33:07:03:
         ec:08:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:00 2025 by rpki-client