Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a3966383a3a2f33322d313238203d3e20323632373733.roa
File:                     323830343a3966383a3a2f33322d313238203d3e20323632373733.roa (raw, json)
Hash identifier:          /Vl6cpUJz2YgRc+eP5FjIuRNB1HLC6HisiupBrH2F+Y=
Subject key identifier:   DB:01:C7:F0:1B:53:07:24:52:1C:62:92:EE:DA:77:E2:EC:4C:66:BF
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       79406CC4CC41F421C5F5F6CF9EAF35F4E01BEA48
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a3966383a3a2f33322d313238203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 14:46:57 +0000
ROA not before:           Mon 11 Aug 2025 14:41:57 +0000
ROA not after:            Mon 10 Aug 2026 14:46:57 +0000
asID:                     262773
IP address blocks:        2804:9f8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:40:6c:c4:cc:41:f4:21:c5:f5:f6:cf:9e:af:35:f4:e0:1b:ea:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 14:41:57 2025 GMT
            Not After : Aug 10 14:46:57 2026 GMT
        Subject: CN=DB01C7F01B530724521C6292EEDA77E2EC4C66BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:72:ae:3a:24:22:bc:d8:d3:51:6a:45:f7:
                    33:57:f7:ec:ad:c5:5c:25:e9:1c:50:ff:42:65:c7:
                    1b:ff:62:b5:76:30:9d:9a:ca:35:b8:c3:7c:d9:96:
                    63:22:54:a6:46:82:53:51:df:75:99:34:19:2c:9f:
                    12:6b:aa:67:57:b4:58:b9:1f:cd:e5:19:64:8e:96:
                    d9:7a:73:27:b8:ce:4b:34:50:53:81:89:7a:77:4f:
                    b6:0f:7e:20:09:a6:2f:10:1f:98:96:68:2e:11:f9:
                    ed:27:16:50:c0:3a:8b:68:54:f4:94:99:1a:fb:b2:
                    f5:5b:c1:ed:21:b5:1c:15:f7:56:1c:9c:72:ce:55:
                    25:98:22:e3:01:1c:e7:06:68:19:b1:40:c7:e6:5c:
                    e1:bf:60:91:46:28:29:ff:3d:d1:bd:e0:af:20:89:
                    6b:e9:16:8c:2d:1e:20:b4:39:5a:71:01:e7:5b:78:
                    2c:b7:53:62:56:cf:5a:4b:ba:ba:30:5a:4e:d5:21:
                    54:fd:6b:b2:79:fb:64:3d:bb:8b:37:5c:f2:28:a2:
                    ec:83:9b:e4:87:26:50:58:47:36:07:84:cd:8a:44:
                    e1:2a:d1:55:ef:f6:16:96:5f:49:23:3e:b5:9f:fc:
                    0b:e3:14:0a:76:fa:78:35:d9:b0:af:f7:e3:76:27:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:01:C7:F0:1B:53:07:24:52:1C:62:92:EE:DA:77:E2:EC:4C:66:BF
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a3966383a3a2f33322d313238203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:3c:37:8f:d6:a0:a2:2a:53:04:54:30:00:e6:1a:8a:ed:51:
         76:a9:1d:ad:70:8d:15:21:ac:15:f7:4b:e8:47:5d:cf:69:67:
         88:dc:6a:a8:15:d2:e6:51:9a:5d:b2:a7:77:52:12:df:46:bd:
         3f:7b:8d:eb:d9:e8:37:92:c7:17:95:2e:c8:8e:01:97:97:91:
         84:5b:c7:b3:27:13:e1:88:cc:35:4e:c2:b3:95:42:3c:5a:37:
         3c:1e:e6:5e:50:4c:ea:60:ac:59:e2:1c:13:d5:0e:2a:5c:6f:
         fa:d2:a3:0e:99:8f:03:2a:5a:91:5c:8c:1a:4e:16:e0:4e:bb:
         97:94:76:f9:9c:b4:59:5a:3f:39:42:d6:04:56:5e:75:34:db:
         73:5d:23:22:38:29:64:57:7f:46:61:b8:b0:77:42:6e:6f:9b:
         c6:50:c5:02:e6:2d:42:f9:d6:ab:7a:02:f0:99:84:38:17:9d:
         b5:99:55:26:8b:9c:ed:a7:01:c0:b1:72:58:09:e1:31:fb:74:
         6b:a0:f8:e6:02:81:69:5d:30:42:0e:e8:bc:42:34:2a:4a:eb:
         fd:3b:ba:29:f7:18:34:b4:21:e4:b2:01:1b:5a:8a:1c:cd:91:
         45:67:7a:96:77:0b:85:79:3d:0c:83:fa:06:c3:3d:c3:44:fc:
         52:1e:3a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:08:52 2025 by rpki-client