Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a383030303a3a2f33342d3334203d3e20323639353032.roa
File:                     323830343a363539383a383030303a3a2f33342d3334203d3e20323639353032.roa (raw, json)
Hash identifier:          dzu9tuct1RxnOQsuYwhNyNFZIXaF1PpjJhm1TFDilas=
Subject key identifier:   30:B0:F7:6F:3D:83:F3:21:4D:78:AB:86:63:7D:A1:3C:23:A5:12:57
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       1FC00DD2818E8738CE8042F9286E4D7BAC6C4FBF
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a383030303a3a2f33342d3334203d3e20323639353032.roa
Signing time:             Sat 16 Aug 2025 14:00:40 +0000
ROA not before:           Sat 16 Aug 2025 13:55:40 +0000
ROA not after:            Sat 15 Aug 2026 14:00:40 +0000
asID:                     269502
IP address blocks:        2804:6598:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c0:0d:d2:81:8e:87:38:ce:80:42:f9:28:6e:4d:7b:ac:6c:4f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: Aug 16 13:55:40 2025 GMT
            Not After : Aug 15 14:00:40 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:13:7f:4e:42:ca:92:71:71:61:1b:ae:9c:
                    ba:fb:ef:5b:ea:5d:c4:ea:9c:5b:68:f2:0d:bf:18:
                    7e:df:49:e7:5c:c9:a1:92:d7:3c:89:aa:ad:fe:17:
                    94:54:0b:4a:54:8a:6e:16:f2:24:14:23:1e:75:5f:
                    fb:89:3e:00:8e:2c:c3:b9:ce:2b:de:6d:59:a8:31:
                    e2:62:da:ef:e8:5a:1b:62:ef:76:e3:b3:80:7a:aa:
                    d6:71:88:2b:9a:14:d8:f5:88:db:76:99:57:5d:e6:
                    47:5b:34:84:37:b4:e0:68:23:4d:f0:49:c2:79:63:
                    50:7a:40:90:87:09:20:9a:93:e4:ba:14:23:b8:d3:
                    11:67:40:0a:cb:64:c0:a1:25:d4:02:c2:d2:3e:8f:
                    13:58:15:be:8f:4b:51:37:ff:88:89:08:bd:e1:fd:
                    d1:65:25:2c:eb:8a:f1:86:15:cf:f6:43:a5:f4:ad:
                    0a:8f:01:b6:ff:fc:1f:96:3d:de:80:42:9c:8a:5b:
                    85:bb:35:34:8b:c5:cc:c7:1b:ec:cd:f9:9b:2d:61:
                    eb:74:00:43:61:46:e9:27:19:22:ce:27:d1:41:e8:
                    4e:33:d8:be:54:27:5a:66:e8:16:4b:07:83:c3:9a:
                    48:63:25:a1:73:ed:f8:01:0d:73:0f:d3:36:0a:90:
                    94:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B0:F7:6F:3D:83:F3:21:4D:78:AB:86:63:7D:A1:3C:23:A5:12:57
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a383030303a3a2f33342d3334203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8d:b9:e2:eb:b4:35:2b:80:b8:bb:66:67:4d:b2:a0:c2:2a:8e:
         7c:7a:41:76:25:59:ac:f3:4f:53:43:61:57:a3:c0:e9:5a:83:
         f1:eb:3d:6c:a0:83:03:ae:d1:67:18:38:2b:05:82:4a:24:7d:
         60:88:15:a1:ce:65:a2:30:30:d6:b2:5e:e6:45:b7:5b:c4:8b:
         0c:26:43:54:b8:c3:2c:ae:46:ad:9f:cb:b5:f6:b4:ba:51:bb:
         8d:5b:48:1c:c1:13:4e:c9:ef:7d:90:a7:ba:95:4a:ae:6a:f8:
         c8:35:e6:2f:49:16:4d:67:cd:38:bf:57:c6:f5:80:6e:64:33:
         97:6d:f1:1f:1a:9f:a8:55:06:fc:8f:c2:86:ea:fc:23:c9:a5:
         0c:d3:d2:a3:09:bd:14:39:be:70:df:71:9b:a0:ce:d2:73:45:
         93:96:ab:19:89:1a:5f:df:a5:5a:89:79:de:6f:76:7b:49:3d:
         f6:e1:3b:61:56:19:7b:52:ec:35:82:13:95:56:b1:1f:ab:15:
         a9:51:63:bf:75:db:a8:b9:77:73:d8:2a:e3:63:09:ab:15:f8:
         19:50:69:a9:eb:1a:3d:8b:8e:3c:ee:22:a0:bc:a1:ba:29:4f:
         b0:24:cc:37:88:94:30:a4:9b:7a:e4:08:2d:e4:2d:da:9d:7d:
         8d:13:59:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:04 2025 by rpki-client