Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/323830343a353439303a3a2f33322d3438203d3e20323638363538.roa
File:                     323830343a353439303a3a2f33322d3438203d3e20323638363538.roa (raw, json)
Hash identifier:          i83s5u9huhbJHapQ9/OBbf/QCqrm4HELSWsH4LVEbM4=
Subject key identifier:   44:F9:09:68:AC:AE:BE:5E:8C:85:D8:13:50:EF:64:93:6C:61:9F:93
Certificate issuer:       /CN=8A69DBA77EB0808EB688E651EBCCCE0049B548D3
Certificate serial:       2C434A605D86B790C9C2C80A383648D2049DD891
Authority key identifier: 8A:69:DB:A7:7E:B0:80:8E:B6:88:E6:51:EB:CC:CE:00:49:B5:48:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/323830343a353439303a3a2f33322d3438203d3e20323638363538.roa
Signing time:             Tue 05 Aug 2025 12:29:14 +0000
ROA not before:           Tue 05 Aug 2025 12:24:14 +0000
ROA not after:            Tue 04 Aug 2026 12:29:14 +0000
asID:                     268658
IP address blocks:        2804:5490::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.crl
                          rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:43:4a:60:5d:86:b7:90:c9:c2:c8:0a:38:36:48:d2:04:9d:d8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A69DBA77EB0808EB688E651EBCCCE0049B548D3
        Validity
            Not Before: Aug  5 12:24:14 2025 GMT
            Not After : Aug  4 12:29:14 2026 GMT
        Subject: CN=44F90968ACAEBE5E8C85D81350EF64936C619F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2b:f8:94:80:a9:0b:51:6c:71:5c:af:8e:b4:
                    fe:64:e8:83:b4:11:c3:0d:66:5a:91:d1:7e:54:47:
                    cc:52:7d:4f:ad:52:f2:b3:ee:d0:7a:01:c9:f3:82:
                    8d:af:36:ef:7a:c5:9d:2a:5e:e9:76:60:19:d7:a4:
                    68:22:ea:1f:b5:a3:39:6b:9c:58:74:56:3d:2b:f5:
                    16:aa:c1:69:b6:77:9e:bb:43:4b:a9:ff:7a:87:d1:
                    8c:5e:35:bd:7e:7b:4f:03:d5:e3:7c:91:9b:24:e9:
                    68:3a:25:93:db:98:9a:e2:70:f5:53:c2:dc:dd:db:
                    6d:0b:cc:f0:da:d9:5c:0e:eb:4a:26:4b:49:47:c2:
                    8a:25:45:96:19:a9:4c:41:3a:d0:c0:0e:dd:53:7b:
                    ae:da:44:a9:0b:eb:33:e9:5e:fc:13:b3:01:94:8e:
                    7f:aa:4a:6d:95:21:27:f6:7e:fb:f9:61:e8:8d:aa:
                    97:af:10:fa:98:38:a9:df:3b:1c:a5:96:eb:46:4b:
                    ac:13:f1:d1:77:6f:77:21:2c:71:12:f0:6f:00:d7:
                    ca:ef:a0:6f:08:a2:6d:46:56:55:11:b7:9f:4e:54:
                    60:29:3e:fe:30:46:f1:6e:ef:bf:bd:f8:b1:52:50:
                    13:15:32:d8:e2:ca:b3:9b:d4:6a:8a:9a:2a:a1:72:
                    d6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F9:09:68:AC:AE:BE:5E:8C:85:D8:13:50:EF:64:93:6C:61:9F:93
            X509v3 Authority Key Identifier:
                keyid:8A:69:DB:A7:7E:B0:80:8E:B6:88:E6:51:EB:CC:CE:00:49:B5:48:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/323830343a353439303a3a2f33322d3438203d3e20323638363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5490::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:e4:7a:98:ea:73:11:4a:b2:42:b8:75:0b:e0:81:cf:2e:e2:
         94:12:2f:5a:23:47:56:e2:1a:5d:ad:52:02:9e:d6:91:11:55:
         d6:b4:fc:03:37:8b:27:99:c1:f8:24:82:84:6d:33:f6:c7:4c:
         cd:eb:41:fe:1b:4e:d0:c9:54:28:ca:3f:bb:3a:07:9e:86:15:
         04:d5:ff:43:91:44:c7:ab:8c:5f:8f:14:10:a6:4d:d8:b1:05:
         0a:a1:7a:6d:d8:04:99:43:92:85:f4:46:68:aa:8f:f7:3b:a2:
         02:b4:08:46:be:cf:63:f4:a4:f4:ee:20:8f:69:f1:4c:b4:ee:
         22:81:2e:10:ae:b5:80:7a:0c:a8:b5:af:b7:73:6a:97:ad:88:
         93:4e:bc:53:58:4d:fe:38:e5:78:27:c8:73:45:bd:a9:67:83:
         f3:cd:09:e3:f4:e4:28:31:8b:1f:3e:1a:90:d6:3e:4c:c7:90:
         71:8e:a0:ef:10:c9:dd:a6:b8:da:80:84:97:12:c9:eb:ba:66:
         92:e4:9d:7a:dc:01:51:2d:ed:77:0d:59:ba:b0:0a:4a:33:e6:
         dd:ec:4a:52:22:f5:cf:f1:9d:67:68:77:60:1f:0f:f0:27:ee:
         37:28:b8:67:e7:4b:23:82:49:15:48:35:d3:99:8b:b3:c6:6f:
         b9:46:ed:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:46:24 2025 by rpki-client