Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/323830343a3739303a3a2f33322d3438203d3e203238363533.roa
File:                     323830343a3739303a3a2f33322d3438203d3e203238363533.roa (raw, json)
Hash identifier:          KjO9HHbv/U5dGfYHzV6HQeR9wWMJIZhbW/pXoh0rCOA=
Subject key identifier:   1D:9F:21:9C:2D:35:56:89:A8:05:12:9C:2F:21:96:5F:95:CB:E9:5F
Certificate issuer:       /CN=667E147F41B8931495CA63574998633ECA590500
Certificate serial:       31F98478B06F137AFB3AE9D00FE9F1CE2416E8D6
Authority key identifier: 66:7E:14:7F:41:B8:93:14:95:CA:63:57:49:98:63:3E:CA:59:05:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/667E147F41B8931495CA63574998633ECA590500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/323830343a3739303a3a2f33322d3438203d3e203238363533.roa
Signing time:             Fri 22 Aug 2025 17:59:00 +0000
ROA not before:           Fri 22 Aug 2025 17:54:00 +0000
ROA not after:            Fri 21 Aug 2026 17:59:00 +0000
asID:                     28653
IP address blocks:        2804:790::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/667E147F41B8931495CA63574998633ECA590500.crl
                          rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/667E147F41B8931495CA63574998633ECA590500.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/667E147F41B8931495CA63574998633ECA590500.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f9:84:78:b0:6f:13:7a:fb:3a:e9:d0:0f:e9:f1:ce:24:16:e8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667E147F41B8931495CA63574998633ECA590500
        Validity
            Not Before: Aug 22 17:54:00 2025 GMT
            Not After : Aug 21 17:59:00 2026 GMT
        Subject: CN=1D9F219C2D355689A805129C2F21965F95CBE95F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:52:4d:b2:11:bd:9d:4e:02:0e:04:5c:fe:60:
                    4d:9b:c7:89:5e:52:c9:2a:6f:01:9e:f3:f8:9c:95:
                    aa:8a:85:d7:69:d7:cd:98:49:52:d0:34:5c:b1:b9:
                    f3:1f:dd:f0:28:87:ab:6b:68:f0:e8:35:1e:79:38:
                    6a:82:31:fc:76:5a:26:a0:42:d7:b4:79:2c:d5:13:
                    15:d8:f0:cd:0a:2b:d3:08:4f:da:8d:db:38:a2:08:
                    32:dc:94:20:40:59:49:4b:92:dd:14:0a:20:62:ab:
                    3d:69:75:5c:a2:86:98:eb:22:b6:d2:97:96:9c:6e:
                    42:12:fb:6d:e6:1b:4d:0e:e7:6c:b6:cc:6b:04:b2:
                    72:99:4c:a9:d4:3b:02:af:f5:da:2b:1d:0c:34:45:
                    c5:08:4c:d8:27:16:7b:46:1d:ae:f2:ab:71:26:c5:
                    85:05:89:92:f4:e3:db:72:30:f8:90:ea:8b:a4:e0:
                    86:f8:46:ee:66:e0:c4:63:02:86:86:b3:7d:9a:f7:
                    77:a8:e7:7c:0f:b0:e3:33:d2:ee:48:46:7e:5e:1d:
                    b4:b7:e3:e6:b9:1c:7e:3e:fa:2c:04:4b:bb:ba:8c:
                    dd:7b:01:9f:35:12:47:23:a4:f4:7a:5f:e6:0b:cd:
                    bb:b1:4c:c9:30:25:e1:7b:dd:f9:9a:78:a2:74:5f:
                    97:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9F:21:9C:2D:35:56:89:A8:05:12:9C:2F:21:96:5F:95:CB:E9:5F
            X509v3 Authority Key Identifier:
                keyid:66:7E:14:7F:41:B8:93:14:95:CA:63:57:49:98:63:3E:CA:59:05:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/667E147F41B8931495CA63574998633ECA590500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/667E147F41B8931495CA63574998633ECA590500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/323830343a3739303a3a2f33322d3438203d3e203238363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:790::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:1a:cb:d5:13:fb:8f:8e:03:a4:ae:6b:dd:a4:3e:d3:f2:60:
         b6:8a:5a:04:63:c1:46:7e:c0:f4:20:0e:f0:db:fa:7b:3b:ed:
         1e:97:4a:da:e1:54:ac:e7:04:7b:04:a4:8e:24:d4:48:d1:ee:
         df:36:fc:fd:ad:32:9f:82:d6:ee:fd:5d:8a:b5:65:39:e0:da:
         29:83:41:c0:1e:b5:ef:a7:79:ea:b2:de:ec:4e:e8:79:8e:18:
         1b:d8:46:61:a0:d9:8b:8a:bb:d0:ed:e9:51:fa:0c:21:b9:be:
         96:92:ff:b5:4f:e1:e3:08:4b:fb:75:0e:81:49:a0:6a:dd:0e:
         a9:5b:98:94:71:43:1c:55:74:a3:83:e2:db:19:ba:9b:e3:65:
         d4:c6:ae:5b:c9:d4:7a:6c:34:4e:14:9a:37:99:68:07:06:1a:
         1e:b1:99:0c:07:e8:f7:25:01:1a:00:54:f3:91:58:8c:73:e4:
         0d:c8:88:7f:78:fc:f3:44:03:df:a8:62:48:ff:10:61:2e:62:
         64:d5:08:df:e4:52:f2:36:55:28:5b:7f:c2:82:a9:b2:54:bf:
         37:7b:43:1c:53:f0:94:f7:17:9c:2f:83:c2:7d:13:e7:f3:d3:
         31:df:85:6c:47:d5:5d:f9:1b:6e:43:8d:fd:42:7b:cc:17:60:
         3e:89:d2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:08 2025 by rpki-client