Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/323830343a333835343a3a2f33322d3438203d3e20323636343730.roa
File:                     323830343a333835343a3a2f33322d3438203d3e20323636343730.roa (raw, json)
Hash identifier:          Rt3Ghe/q2qPQlvEAALGJgYe4YX6sC8J9+AagxNkAnCw=
Subject key identifier:   74:DA:CE:5F:7D:AD:BD:01:F1:18:96:0F:FD:3A:A7:2A:39:1D:B1:3D
Certificate issuer:       /CN=1908A7AF56301BD37FE69645FBE82277D187BAB6
Certificate serial:       015756C7036A8C2B4EE8FA8FD71B284DFA8DD0C5
Authority key identifier: 19:08:A7:AF:56:30:1B:D3:7F:E6:96:45:FB:E8:22:77:D1:87:BA:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1908A7AF56301BD37FE69645FBE82277D187BAB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/323830343a333835343a3a2f33322d3438203d3e20323636343730.roa
Signing time:             Thu 14 Aug 2025 15:53:00 +0000
ROA not before:           Thu 14 Aug 2025 15:48:00 +0000
ROA not after:            Thu 13 Aug 2026 15:53:00 +0000
asID:                     266470
IP address blocks:        2804:3854::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/1908A7AF56301BD37FE69645FBE82277D187BAB6.crl
                          rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/1908A7AF56301BD37FE69645FBE82277D187BAB6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1908A7AF56301BD37FE69645FBE82277D187BAB6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:57:56:c7:03:6a:8c:2b:4e:e8:fa:8f:d7:1b:28:4d:fa:8d:d0:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1908A7AF56301BD37FE69645FBE82277D187BAB6
        Validity
            Not Before: Aug 14 15:48:00 2025 GMT
            Not After : Aug 13 15:53:00 2026 GMT
        Subject: CN=74DACE5F7DADBD01F118960FFD3AA72A391DB13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0b:31:e0:7f:34:96:73:4a:2c:18:00:ac:dd:
                    3a:d4:f5:a5:e4:27:c7:77:05:c4:d3:d8:42:e8:28:
                    6c:c1:80:5e:bb:e0:83:0a:bc:24:1d:c8:a8:5a:cc:
                    df:d7:3f:77:41:ee:04:e7:7d:11:01:c1:3f:be:2a:
                    ed:64:31:e7:8a:88:47:d9:76:62:0a:b7:43:ab:99:
                    0b:15:eb:7c:f6:7e:cf:62:1e:3f:91:6d:c6:c0:ec:
                    04:71:29:95:fe:c0:21:6e:71:e8:31:aa:53:42:70:
                    67:4f:ae:55:41:0e:40:1f:aa:00:1a:5c:ff:bb:b7:
                    63:d8:cb:90:e3:09:0f:c7:07:48:36:66:9c:01:d1:
                    10:8b:25:c5:db:41:15:87:fb:77:97:ef:6d:63:a4:
                    41:fe:21:59:e1:50:bb:04:c6:d2:43:21:ec:92:9b:
                    49:48:4c:d1:c1:38:f2:72:98:ef:ec:86:6d:45:04:
                    24:53:ec:f5:7a:d6:b8:3a:4e:04:e7:47:be:fb:30:
                    b2:6f:b1:91:87:83:bd:ef:27:ae:3a:ad:34:e3:e5:
                    69:3c:39:c7:96:13:2d:04:1d:00:67:c8:86:09:56:
                    8c:de:db:47:62:14:bd:dd:c6:70:34:89:b8:bc:fb:
                    87:9d:d7:a5:c5:51:5d:24:4b:9b:23:41:a7:3c:b1:
                    1d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DA:CE:5F:7D:AD:BD:01:F1:18:96:0F:FD:3A:A7:2A:39:1D:B1:3D
            X509v3 Authority Key Identifier:
                keyid:19:08:A7:AF:56:30:1B:D3:7F:E6:96:45:FB:E8:22:77:D1:87:BA:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/1908A7AF56301BD37FE69645FBE82277D187BAB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1908A7AF56301BD37FE69645FBE82277D187BAB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/323830343a333835343a3a2f33322d3438203d3e20323636343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3854::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:40:e4:49:e4:d7:e3:a4:22:25:96:e8:83:8e:6f:4c:a6:d3:
         ea:c1:37:8d:cb:33:02:f7:9b:35:6a:5e:73:22:72:7b:6d:f3:
         b7:3e:52:7d:82:19:2a:95:60:76:fc:1c:93:3f:36:65:2c:a5:
         5e:fd:c7:53:9a:c6:30:e5:91:e3:0d:58:72:0f:1d:b7:0d:3e:
         66:27:e6:af:93:a9:70:2c:b0:b4:3a:f5:36:cb:77:4a:00:6b:
         0b:ee:11:8d:08:12:ba:97:ca:7a:53:d6:1d:89:fe:c5:22:13:
         40:17:0f:dc:58:42:f2:cd:cf:ad:9e:23:6a:11:1b:0c:ef:d7:
         fe:65:ff:b6:b7:5d:f5:9f:d4:1f:5a:69:20:1c:cc:7d:22:56:
         67:eb:b8:38:d1:0e:f6:e7:3f:5d:4f:dc:bd:93:a9:89:2d:f0:
         88:da:5d:1e:30:a5:c8:83:aa:0b:db:42:13:e6:1e:34:c1:35:
         e5:2f:01:f5:92:81:8a:15:ee:7f:04:a9:91:a4:8a:35:1e:91:
         e5:9d:53:b8:ff:be:be:a4:20:91:36:2e:05:16:c0:88:ed:c1:
         05:e0:d9:6d:2c:0e:5e:a1:82:55:69:a1:8c:c1:26:34:46:8d:
         9a:90:17:ce:56:c3:03:c7:3c:5a:97:c6:39:81:58:0b:e4:76:
         2c:3a:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:58:05 2025 by rpki-client