Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/323830343a346136383a3a2f33322d3438203d3e20323637323338.roa
File:                     323830343a346136383a3a2f33322d3438203d3e20323637323338.roa (raw, json)
Hash identifier:          msHoPUSYrUwGeC3fLacj8Ud0xMnhlH3k7zjdzU5zufA=
Subject key identifier:   4C:62:8A:45:C5:34:78:8D:33:C8:FA:BE:F7:4B:E9:0D:5B:B3:25:61
Certificate issuer:       /CN=3969F32AA0FDF3D39ABBAD2837C7749831899397
Certificate serial:       09B52C4F75BE75D24AFFFA3BD3FFE0DFC420FE1A
Authority key identifier: 39:69:F3:2A:A0:FD:F3:D3:9A:BB:AD:28:37:C7:74:98:31:89:93:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3969F32AA0FDF3D39ABBAD2837C7749831899397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/323830343a346136383a3a2f33322d3438203d3e20323637323338.roa
Signing time:             Thu 07 Aug 2025 13:14:43 +0000
ROA not before:           Thu 07 Aug 2025 13:09:43 +0000
ROA not after:            Thu 06 Aug 2026 13:14:43 +0000
asID:                     267238
IP address blocks:        2804:4a68::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/3969F32AA0FDF3D39ABBAD2837C7749831899397.crl
                          rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/3969F32AA0FDF3D39ABBAD2837C7749831899397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3969F32AA0FDF3D39ABBAD2837C7749831899397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 02:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b5:2c:4f:75:be:75:d2:4a:ff:fa:3b:d3:ff:e0:df:c4:20:fe:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3969F32AA0FDF3D39ABBAD2837C7749831899397
        Validity
            Not Before: Aug  7 13:09:43 2025 GMT
            Not After : Aug  6 13:14:43 2026 GMT
        Subject: CN=4C628A45C534788D33C8FABEF74BE90D5BB32561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:99:af:64:72:f0:fc:e8:6b:db:59:b7:05:f9:
                    3f:53:dd:61:2a:eb:30:ac:35:0e:69:eb:b6:92:69:
                    51:b6:72:d7:96:8e:c9:cb:78:31:60:74:23:c1:4d:
                    27:cf:d7:f2:e8:c5:b1:40:78:04:52:78:35:54:13:
                    c7:0d:9c:4e:a3:9a:8f:83:bc:f6:00:bc:ba:cf:2c:
                    3b:9e:bf:80:4a:d9:37:04:1a:55:d8:c8:9e:1b:9a:
                    0f:d5:a0:c3:fa:cb:fb:2a:fa:ef:01:04:ed:d8:5d:
                    20:ac:67:7b:3c:80:85:f4:4d:25:e2:e2:4f:df:f2:
                    1e:62:b3:6b:bc:83:46:70:75:1b:bd:9e:49:39:92:
                    f2:ec:22:e5:45:17:5c:23:cb:54:f5:9e:53:78:4f:
                    8a:42:95:8e:59:b1:64:85:14:42:87:0f:87:af:8e:
                    36:2d:8c:34:63:1c:13:7f:4e:c7:83:94:0c:4b:21:
                    33:5f:da:36:88:2c:e0:46:7e:33:92:85:24:09:c7:
                    9f:79:2b:3e:ba:42:ce:2a:46:cd:f0:5e:d8:82:b7:
                    19:09:6e:56:a6:dd:09:a6:57:9e:98:fb:d4:63:71:
                    68:d3:61:da:e6:c4:f0:a6:3f:c2:91:54:68:96:6b:
                    6b:a2:19:c3:aa:47:6d:8e:f2:e6:e0:46:3e:37:3b:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:62:8A:45:C5:34:78:8D:33:C8:FA:BE:F7:4B:E9:0D:5B:B3:25:61
            X509v3 Authority Key Identifier:
                keyid:39:69:F3:2A:A0:FD:F3:D3:9A:BB:AD:28:37:C7:74:98:31:89:93:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/3969F32AA0FDF3D39ABBAD2837C7749831899397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3969F32AA0FDF3D39ABBAD2837C7749831899397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/323830343a346136383a3a2f33322d3438203d3e20323637323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a68::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:29:8b:4b:85:2e:70:19:0f:7e:02:b2:1b:1a:4b:ec:1d:fc:
         6b:7f:b3:e9:5d:52:13:6d:28:9f:9a:1c:b6:d0:4b:e2:18:f8:
         f9:9b:2a:b0:0e:92:f2:d0:12:6a:c4:24:8e:c5:d6:95:39:e2:
         e3:33:95:61:41:67:c7:03:41:7d:70:7f:0c:8e:6c:81:71:10:
         22:b2:29:0f:34:1a:62:a9:14:c1:e0:2d:f2:76:c6:ed:e2:09:
         5e:78:2f:aa:d1:8c:98:44:5f:fa:b6:28:a9:26:2f:b5:0e:85:
         53:fb:22:b3:ed:ea:9a:80:7e:41:9e:1f:c2:74:e7:42:b0:01:
         e3:d6:7d:4c:55:a1:09:49:2a:23:8a:45:7c:70:f5:31:77:95:
         28:12:93:13:05:1b:8d:af:47:24:e5:c3:4e:e2:32:bf:dc:76:
         63:8d:53:e0:88:17:3e:55:03:02:41:9a:ff:91:e7:1c:96:34:
         42:f1:42:75:62:51:01:c9:a2:b5:86:35:3c:6b:4b:f1:0f:26:
         2a:20:7e:b0:67:55:8d:f5:f6:0f:62:53:e5:c2:8a:4d:f2:c8:
         61:06:cd:16:46:e6:66:23:ef:5f:47:a8:1f:d9:c7:fc:2a:6b:
         95:a1:d9:d3:dc:b2:0b:72:39:10:eb:21:20:06:3e:9a:48:8f:
         c0:78:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:02:34 2025 by rpki-client