Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/323830343a323936383a3a2f33322d3438203d3e20323634303133.roa
File:                     323830343a323936383a3a2f33322d3438203d3e20323634303133.roa (raw, json)
Hash identifier:          bcoHVYwFXHbpmom8wN+techsG6j1YQ+WqNEhM+tHWss=
Subject key identifier:   18:E9:5D:3B:48:B6:45:FF:B5:74:03:24:DC:01:FA:A3:62:2B:62:F4
Certificate issuer:       /CN=7FE47B22E1D00A16DC5F3525694FF71E9831FBEF
Certificate serial:       34F7A0BB759FCDEDF7B726D1208B9F20327656A2
Authority key identifier: 7F:E4:7B:22:E1:D0:0A:16:DC:5F:35:25:69:4F:F7:1E:98:31:FB:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/323830343a323936383a3a2f33322d3438203d3e20323634303133.roa
Signing time:             Tue 19 Aug 2025 14:32:07 +0000
ROA not before:           Tue 19 Aug 2025 14:27:07 +0000
ROA not after:            Tue 18 Aug 2026 14:32:07 +0000
asID:                     264013
IP address blocks:        2804:2968::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.crl
                          rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f7:a0:bb:75:9f:cd:ed:f7:b7:26:d1:20:8b:9f:20:32:76:56:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FE47B22E1D00A16DC5F3525694FF71E9831FBEF
        Validity
            Not Before: Aug 19 14:27:07 2025 GMT
            Not After : Aug 18 14:32:07 2026 GMT
        Subject: CN=18E95D3B48B645FFB5740324DC01FAA3622B62F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:65:7a:e3:dd:71:36:ca:8b:73:43:b4:c6:7d:
                    c2:4e:d0:6d:b2:18:28:a2:9b:c3:89:d6:de:b1:c3:
                    2e:be:21:50:56:6f:8a:45:9d:16:36:3a:2c:6b:08:
                    7f:87:36:91:79:d2:71:c2:65:f9:08:71:68:33:b9:
                    7f:3f:89:9b:3c:95:c1:b5:36:bd:cb:1b:c1:7c:5b:
                    a8:01:b8:fe:e5:18:00:08:29:04:bd:6a:1e:14:15:
                    dd:c8:05:da:9b:f9:3e:6a:aa:6b:ef:72:f2:a0:a6:
                    1c:fa:45:8d:a2:2d:27:b4:0e:27:7a:98:27:61:e0:
                    b1:5f:21:6e:d2:ad:c3:26:c4:9b:b1:89:c1:f6:a3:
                    89:56:d4:99:f2:cb:0c:be:b7:da:fb:d9:8e:10:ec:
                    4c:11:fe:e9:66:03:0b:e1:85:5d:da:4e:b2:f8:ab:
                    ff:d5:3c:5b:bb:1d:bf:a6:2e:51:f7:a3:82:dd:97:
                    97:e3:50:b5:4c:86:6e:5c:e0:c7:68:cb:af:74:63:
                    3e:ea:60:3d:c1:33:26:ea:8b:e6:9a:16:92:87:ae:
                    f2:97:ef:c8:f4:05:8a:d1:5e:83:b5:11:e5:b8:07:
                    15:c5:3a:fd:d1:98:c3:29:6e:04:ad:ed:48:0e:41:
                    9d:bd:c0:f7:ac:35:f6:90:20:18:cc:84:36:b0:0b:
                    10:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E9:5D:3B:48:B6:45:FF:B5:74:03:24:DC:01:FA:A3:62:2B:62:F4
            X509v3 Authority Key Identifier:
                keyid:7F:E4:7B:22:E1:D0:0A:16:DC:5F:35:25:69:4F:F7:1E:98:31:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/323830343a323936383a3a2f33322d3438203d3e20323634303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2968::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:93:fb:bd:ed:ba:ff:d1:49:3e:84:b6:9f:5e:84:fb:c6:3a:
         5f:70:f0:45:83:41:d9:61:2a:99:3d:53:21:50:31:3e:e3:56:
         50:97:4c:c5:fa:c1:e8:ce:20:07:b4:20:c3:e1:6a:19:4e:47:
         18:28:06:73:d9:8d:36:74:22:04:cb:6e:d5:45:2f:4e:0e:f8:
         85:97:af:8d:08:be:e0:e5:17:e6:b5:39:25:e1:c3:7b:43:e9:
         b6:f3:73:aa:d4:e6:f7:60:0a:ba:3b:7f:2d:65:6b:1a:99:23:
         83:a4:09:f3:a0:f2:5e:fb:a0:38:01:c4:c1:cb:0c:5f:45:7f:
         06:10:97:d0:45:51:8a:0d:31:05:e2:5f:a3:f5:6a:ad:8b:6c:
         ed:98:7f:2e:52:a0:1b:36:f7:3f:7d:17:76:53:8f:a5:27:96:
         f1:15:b8:41:4a:73:18:50:0c:0f:f2:35:9c:b2:f7:43:ef:6f:
         71:01:dd:b5:af:bf:94:4d:d4:08:71:0f:9c:ba:b2:4b:db:4a:
         ab:a8:7f:c3:09:df:5e:ed:68:36:13:ff:89:18:3a:53:5e:31:
         aa:fd:e8:8b:d5:b8:8f:ec:f0:cf:53:91:84:17:5b:e0:4b:2f:
         2f:cf:cf:4c:4b:84:41:50:60:43:5b:fc:15:a4:05:12:5b:e8:
         6e:8b:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:30 2025 by rpki-client