Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/323830343a353232633a3a2f33322d313238203d3e20323638353030.roa
File:                     323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (raw, json)
Hash identifier:          VL/snBcA4TQASO1JgrhJJ4GnQSQZ2IO6gxXlLXQGjG8=
Subject key identifier:   CB:63:F7:11:47:6C:A0:48:65:3E:87:9B:A1:1C:4E:11:1D:25:AA:20
Certificate issuer:       /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
Certificate serial:       08718A016347E6F1FBC7B6711BF79A7C03216A9A
Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/323830343a353232633a3a2f33322d313238203d3e20323638353030.roa
Signing time:             Wed 30 Jul 2025 17:02:29 +0000
ROA not before:           Wed 30 Jul 2025 16:57:29 +0000
ROA not after:            Wed 29 Jul 2026 17:02:29 +0000
asID:                     268500
IP address blocks:        2804:522c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl
                          rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:71:8a:01:63:47:e6:f1:fb:c7:b6:71:1b:f7:9a:7c:03:21:6a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
        Validity
            Not Before: Jul 30 16:57:29 2025 GMT
            Not After : Jul 29 17:02:29 2026 GMT
        Subject: CN=CB63F711476CA048653E879BA11C4E111D25AA20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:9b:6d:19:07:cc:b4:c8:76:6f:98:ff:0a:
                    28:04:e0:81:17:b9:33:e4:6a:e9:2c:66:5e:02:da:
                    62:0b:d6:6a:9c:cf:d3:60:c8:32:8e:bb:ae:c5:e8:
                    dc:07:0b:31:41:9c:84:cc:25:cb:96:c7:cc:14:33:
                    38:e5:75:ca:ba:72:4f:5b:c3:16:d2:0b:5e:d7:ad:
                    39:4a:eb:5a:61:5e:cd:da:7f:4a:a8:68:df:b9:fe:
                    aa:c1:e9:ab:a9:5c:0e:93:dd:2f:de:c0:9a:55:76:
                    b9:78:f1:6f:71:72:44:9b:3c:f7:14:03:78:ac:c7:
                    1f:02:55:61:1d:8f:3a:52:88:18:c4:53:0b:a2:ad:
                    b7:4a:e6:29:b5:db:c6:47:79:a0:12:62:9b:53:33:
                    79:7d:3a:c7:a0:8e:ba:fb:2b:64:36:50:bb:87:a6:
                    20:53:06:61:25:88:b3:dc:84:f0:f7:78:e2:02:14:
                    25:fd:d2:ed:8d:8b:a2:e3:d2:93:89:eb:f3:65:63:
                    3b:2c:2d:54:0f:f8:85:f3:2e:3f:5d:61:07:83:7f:
                    a7:ec:4d:cf:26:5e:c5:0b:e1:cc:3b:0c:c4:d4:4c:
                    8c:85:13:e1:c7:de:a9:17:af:09:b1:68:51:3e:17:
                    25:7a:e4:b1:47:8b:8d:3d:13:05:5e:4a:6d:ca:a7:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:63:F7:11:47:6C:A0:48:65:3E:87:9B:A1:1C:4E:11:1D:25:AA:20
            X509v3 Authority Key Identifier:
                keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/323830343a353232633a3a2f33322d313238203d3e20323638353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:522c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:80:04:4d:a5:b4:02:25:57:94:5f:31:6c:b0:f7:82:e9:
         81:2e:79:66:54:36:e2:84:c1:fe:77:52:02:ab:f8:6a:33:5e:
         3a:ac:df:28:0f:aa:c3:d8:a1:65:6e:23:e6:33:79:a9:57:ae:
         c5:b6:7e:fe:a9:8c:6b:9b:58:9b:8c:dd:2f:56:40:5d:91:b2:
         40:ef:0f:64:6a:0c:be:22:63:86:d9:d7:03:f0:bf:06:c7:12:
         4c:ab:56:2f:b5:1b:01:ae:8a:c5:64:c5:13:b5:ea:4c:60:11:
         25:0a:c7:27:7e:53:97:e6:cd:d3:41:9c:e9:02:1b:3b:26:27:
         54:1a:e1:75:3a:2b:8b:20:e4:4b:60:01:d3:c4:2f:e1:c2:de:
         1d:94:6b:0c:a6:c6:a6:94:1d:79:14:16:76:8a:b8:be:31:5c:
         f3:82:b7:03:59:d8:01:9a:72:27:d4:4c:ed:83:a6:12:0e:3b:
         59:49:93:da:80:3c:5e:f0:c2:81:b0:41:76:67:7a:5a:66:fe:
         28:48:dc:be:2b:2a:4b:c2:08:db:c0:3f:1f:45:48:9b:44:c7:
         fa:67:81:21:10:63:50:01:dc:6f:05:14:3b:05:a0:51:b9:12:
         db:9e:3e:e1:b1:17:f0:1a:5f:e9:33:ab:2a:8b:b2:bc:14:a4:
         55:99:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:04:01 2025 by rpki-client