Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3332203d3e20323636343731.roa
File:                     323830343a333835383a3a2f33322d3332203d3e20323636343731.roa (raw, json)
Hash identifier:          bWK4O43+gE4KEb6J2bHNfbpXhC07jCdUKr0KuhsHuXI=
Subject key identifier:   F9:8A:F3:02:2B:6E:EB:FC:62:A2:32:D8:DC:22:2A:3C:74:3B:1D:EC
Certificate issuer:       /CN=7450D09D3099C74B5BA0650438B50168D9296DA8
Certificate serial:       31162DE8A5C566F6CDB9283D6AC6A089F04E5D38
Authority key identifier: 74:50:D0:9D:30:99:C7:4B:5B:A0:65:04:38:B5:01:68:D9:29:6D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7450D09D3099C74B5BA0650438B50168D9296DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3332203d3e20323636343731.roa
Signing time:             Thu 07 Aug 2025 12:37:52 +0000
ROA not before:           Thu 07 Aug 2025 12:32:52 +0000
ROA not after:            Thu 06 Aug 2026 12:37:52 +0000
asID:                     266471
IP address blocks:        2804:3858::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/7450D09D3099C74B5BA0650438B50168D9296DA8.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/7450D09D3099C74B5BA0650438B50168D9296DA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7450D09D3099C74B5BA0650438B50168D9296DA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:16:2d:e8:a5:c5:66:f6:cd:b9:28:3d:6a:c6:a0:89:f0:4e:5d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7450D09D3099C74B5BA0650438B50168D9296DA8
        Validity
            Not Before: Aug  7 12:32:52 2025 GMT
            Not After : Aug  6 12:37:52 2026 GMT
        Subject: CN=F98AF3022B6EEBFC62A232D8DC222A3C743B1DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:7d:6b:11:56:89:ea:dc:d4:49:a3:07:34:
                    80:e3:b1:f6:f4:47:fc:6d:f5:9b:9c:7d:02:07:5f:
                    3d:80:d3:5b:6e:c2:7c:cd:fd:2a:75:a4:66:f7:a5:
                    a3:d2:d1:b9:10:b6:e6:07:fb:32:d3:87:68:28:da:
                    3e:2c:76:01:75:2c:f2:45:d0:61:24:27:a0:1f:12:
                    6c:ce:5c:18:34:b9:d2:22:4a:da:47:dd:e2:a7:0d:
                    e9:3a:48:da:11:2c:c5:71:83:18:52:1a:12:6d:67:
                    e2:35:a1:6e:d9:61:9f:58:7d:70:fe:7d:d5:e1:d5:
                    7c:96:8c:23:fb:81:9a:a7:a3:c5:7e:b6:c5:28:9b:
                    7f:dc:3c:99:9d:8b:f3:d1:d4:20:fc:4f:d4:8d:48:
                    c8:3f:2f:cb:e0:2a:7e:a4:1d:c9:45:77:f1:64:2d:
                    0b:9a:74:2c:dd:15:46:25:b3:fb:12:38:71:36:62:
                    04:42:64:04:85:c3:4c:08:5e:7c:d4:20:92:59:62:
                    b6:fe:af:d5:38:8b:51:da:d9:02:ba:97:3e:d1:1b:
                    e0:87:8a:2a:3f:15:8c:28:c8:57:a9:2f:72:a8:ed:
                    8e:3b:f8:be:68:5a:cd:cd:53:72:85:8b:8c:87:12:
                    ec:44:76:31:5e:40:07:f6:a8:80:d5:1f:37:84:4e:
                    a9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8A:F3:02:2B:6E:EB:FC:62:A2:32:D8:DC:22:2A:3C:74:3B:1D:EC
            X509v3 Authority Key Identifier:
                keyid:74:50:D0:9D:30:99:C7:4B:5B:A0:65:04:38:B5:01:68:D9:29:6D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/7450D09D3099C74B5BA0650438B50168D9296DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7450D09D3099C74B5BA0650438B50168D9296DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3332203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3858::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:69:6d:67:62:c7:06:12:02:e2:d8:27:15:f4:77:83:1b:48:
         1c:40:48:85:17:8a:f5:fa:72:85:9f:05:1a:dc:ca:d9:0d:d4:
         3c:0c:16:91:fb:d8:af:13:6d:2f:f1:42:0a:d4:93:92:96:4d:
         4f:ed:49:64:b9:b0:b7:b9:11:16:ff:66:97:51:8d:48:a2:04:
         ac:fb:2a:5b:95:4f:ee:af:fd:9c:76:80:8c:02:8f:3a:ce:15:
         06:ef:02:51:97:4a:86:75:e6:0b:3b:07:23:78:b4:fa:7b:c3:
         d3:27:73:a4:a7:4d:f7:fe:78:a4:d1:be:4d:22:23:95:d0:c5:
         1f:bb:74:e5:bd:33:07:6b:12:e4:31:58:cd:c8:72:16:af:8b:
         41:f5:5f:78:2e:c4:f1:9d:1c:e2:08:ff:cd:87:40:1f:8d:d0:
         e1:37:b9:c8:84:02:ca:a8:d3:1b:e7:ff:92:b3:ef:18:c7:4e:
         2e:4d:b9:bd:d2:be:0e:9b:15:c9:5a:af:c6:dd:ac:d0:63:06:
         57:c1:df:94:0d:96:10:39:c8:e2:03:63:e6:1c:1f:40:58:e3:
         49:6f:2d:b7:16:a6:8d:db:5c:07:17:d3:f5:89:08:99:0c:16:
         4d:f4:7a:02:cf:42:e5:22:d5:62:00:c0:7d:30:c3:5a:bb:dc:
         58:bf:aa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:57:04 2025 by rpki-client