Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/323830343a326138633a3a2f33322d313238203d3e20323634303738.roa
File:                     323830343a326138633a3a2f33322d313238203d3e20323634303738.roa (raw, json)
Hash identifier:          Hx489dbw0xBKHvFEVEJjZMcl6oVuFF1lFEMMSNPFpPI=
Subject key identifier:   20:7E:42:20:14:69:1C:17:E8:2C:A3:A0:5C:9F:89:99:5A:30:29:16
Certificate issuer:       /CN=07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D
Certificate serial:       40C9FDBD5D0589DD06348D7251F7A6830F3C96AD
Authority key identifier: 07:AB:5B:F7:03:FA:8C:CB:0F:64:75:B5:C9:2C:CD:05:F9:2C:88:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/323830343a326138633a3a2f33322d313238203d3e20323634303738.roa
Signing time:             Sat 23 Aug 2025 01:02:55 +0000
ROA not before:           Sat 23 Aug 2025 00:57:55 +0000
ROA not after:            Sat 22 Aug 2026 01:02:55 +0000
asID:                     264078
IP address blocks:        2804:2a8c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.crl
                          rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 02:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c9:fd:bd:5d:05:89:dd:06:34:8d:72:51:f7:a6:83:0f:3c:96:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D
        Validity
            Not Before: Aug 23 00:57:55 2025 GMT
            Not After : Aug 22 01:02:55 2026 GMT
        Subject: CN=207E422014691C17E82CA3A05C9F89995A302916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:08:fa:3c:e1:7c:87:a8:19:a8:24:95:df:
                    82:1f:28:d1:46:b4:7f:6f:54:a7:c2:12:97:77:d7:
                    34:d7:f7:b6:07:1b:d0:6c:56:f8:d6:90:53:c9:a7:
                    85:d2:ec:0c:6a:cd:b5:f7:da:08:c6:4a:1e:f5:ef:
                    17:97:4f:4e:2a:69:f8:e4:a8:8d:57:36:14:47:8f:
                    80:8f:a9:1c:64:37:21:7a:15:7f:74:1a:0e:9e:38:
                    db:7c:f6:fc:d4:0c:14:93:fe:54:b7:1d:1f:7b:1e:
                    64:dd:c9:ad:ed:89:2e:9b:2c:63:82:e4:86:51:58:
                    09:c0:14:3a:3c:34:7b:0f:5e:ce:e2:7d:96:2b:b8:
                    35:8b:7e:30:8b:85:dc:7d:be:bf:6a:9a:da:43:2c:
                    c8:f9:40:34:07:09:d7:55:28:b0:07:c4:99:46:1e:
                    c8:a1:d7:0a:4b:45:79:ff:02:57:0d:41:2e:70:f6:
                    c7:ef:26:74:03:e5:8b:a6:b6:e5:d4:4f:89:16:ee:
                    1d:2e:8d:31:e6:f0:5a:6c:76:d3:50:8c:8a:c3:1a:
                    16:e1:70:e1:75:a7:1f:1a:6f:99:8a:15:63:88:94:
                    ae:c2:3d:b1:82:88:40:e1:1e:72:3c:81:2a:ae:ed:
                    65:54:23:25:3e:5b:5b:69:4c:6d:fb:43:84:90:1d:
                    d5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7E:42:20:14:69:1C:17:E8:2C:A3:A0:5C:9F:89:99:5A:30:29:16
            X509v3 Authority Key Identifier:
                keyid:07:AB:5B:F7:03:FA:8C:CB:0F:64:75:B5:C9:2C:CD:05:F9:2C:88:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07AB5BF703FA8CCB0F6475B5C92CCD05F92C882D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/323830343a326138633a3a2f33322d313238203d3e20323634303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:c9:19:f9:95:77:29:42:c0:1b:46:1d:17:c6:a8:7f:35:a6:
         8b:83:e6:e9:6d:91:a9:ed:a2:c9:d5:c0:79:a3:59:c5:ee:7f:
         84:98:93:e8:29:67:74:9e:35:5f:9d:19:ac:bb:de:01:a7:4c:
         db:36:9a:77:a8:13:35:4f:36:7a:d0:82:6d:dc:06:d7:ee:46:
         04:5f:74:c9:8e:01:eb:74:28:2e:8a:d6:60:41:03:17:68:ce:
         fa:83:99:be:a8:68:e1:e9:ee:bd:fe:38:22:3a:64:58:e2:b8:
         91:93:1c:8f:d6:d8:9f:b3:3a:ff:64:b0:72:06:10:ab:68:25:
         ef:b3:f7:c6:e0:40:1c:6e:3d:5d:b7:7d:e8:ee:2e:bd:8f:06:
         8c:92:95:37:a7:82:5c:44:fd:14:d0:e3:e7:cc:46:65:dc:9d:
         4d:b1:ae:c2:85:cd:b1:18:66:c2:1b:8a:20:f8:de:04:1c:f5:
         e3:a5:e8:0c:fb:16:2b:59:f8:16:ed:e0:28:95:5c:9f:9c:78:
         72:08:35:e7:c6:28:cb:e3:d3:e7:25:c6:98:e3:00:65:4d:48:
         ef:5c:88:4f:f6:93:2a:3f:d6:c9:32:57:e2:2a:1a:dc:5a:8d:
         cb:27:c6:97:bb:7a:08:1f:f9:1e:32:45:49:71:e7:ad:9b:ee:
         b9:30:95:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:59:58 2025 by rpki-client