Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/323830343a353966633a3a2f33322d313238203d3e20323638373338.roa
File:                     323830343a353966633a3a2f33322d313238203d3e20323638373338.roa (raw, json)
Hash identifier:          YWtnKwx3klbu9MAu6MOtd9+cJMXR/zaTU7e+i6U0BXs=
Subject key identifier:   47:56:5B:2A:99:72:86:43:FA:6C:EE:56:7B:FA:B6:A2:E4:0B:BE:EA
Certificate issuer:       /CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59
Certificate serial:       57CA4930E54D1332C700F5D93E3D313C7D5F3DD9
Authority key identifier: 7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/323830343a353966633a3a2f33322d313238203d3e20323638373338.roa
Signing time:             Tue 26 Aug 2025 17:06:46 +0000
ROA not before:           Tue 26 Aug 2025 17:01:46 +0000
ROA not after:            Tue 25 Aug 2026 17:06:46 +0000
asID:                     268738
IP address blocks:        2804:59fc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl
                          rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ca:49:30:e5:4d:13:32:c7:00:f5:d9:3e:3d:31:3c:7d:5f:3d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59
        Validity
            Not Before: Aug 26 17:01:46 2025 GMT
            Not After : Aug 25 17:06:46 2026 GMT
        Subject: CN=47565B2A99728643FA6CEE567BFAB6A2E40BBEEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:2a:07:e2:18:3a:cd:de:1d:f1:69:4a:f8:
                    af:7f:6d:24:67:e8:14:54:d0:87:45:54:91:77:35:
                    3a:f2:92:5c:f8:7e:62:e8:64:28:90:d6:7f:70:8b:
                    97:5e:ea:75:5a:e4:c0:eb:f5:f2:8f:89:09:7c:41:
                    4d:d2:9c:f4:e6:6c:25:43:8e:01:d4:25:bf:70:fd:
                    49:21:c3:e7:db:66:b3:2b:90:e1:c1:5b:bb:60:8e:
                    03:f8:92:24:d6:fc:e7:0d:0e:fc:f4:d9:3c:0b:18:
                    e2:db:29:92:99:68:ca:88:03:86:a3:8f:93:25:00:
                    68:8b:93:5f:df:50:8f:9a:1a:d2:8a:4b:8e:e0:1b:
                    87:f7:5b:6d:1d:6b:0b:5c:75:c0:3d:ab:47:00:9c:
                    96:7d:aa:ff:af:63:36:8e:5a:b5:c1:5d:68:9f:4b:
                    0d:e7:08:74:22:07:a8:f3:69:e6:6e:08:89:e5:0c:
                    60:e9:e5:35:1b:89:1a:c0:93:0d:73:48:e7:a5:ee:
                    89:ef:36:ae:78:11:d6:3a:28:d1:f7:c4:2c:57:ad:
                    71:67:e8:71:2a:d3:6a:61:71:12:90:e4:73:d7:f2:
                    11:55:df:a6:ff:3f:04:e6:db:5f:c3:13:e6:9c:23:
                    96:83:1b:df:8e:58:dc:06:8e:e4:12:56:04:6a:0e:
                    37:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:56:5B:2A:99:72:86:43:FA:6C:EE:56:7B:FA:B6:A2:E4:0B:BE:EA
            X509v3 Authority Key Identifier:
                keyid:7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/323830343a353966633a3a2f33322d313238203d3e20323638373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:75:0f:45:7f:65:df:cc:2d:41:0c:9c:65:84:a9:f6:0d:c8:
         c7:78:05:2d:fc:cb:20:4a:e2:ba:ae:e3:b9:5f:dd:4e:7f:8a:
         18:e6:9f:ee:a7:bf:f4:db:7e:3c:1e:dc:d0:bb:10:ea:7f:15:
         05:27:ff:6e:6b:85:87:cd:1b:7e:0b:f1:39:49:c2:b9:ac:e4:
         80:14:a4:11:b9:91:93:64:37:fb:c4:be:6c:c6:4c:a8:db:d6:
         99:03:9e:c4:d4:ba:bc:34:12:6c:01:6e:a2:9b:ad:7f:53:74:
         60:a3:f2:82:d1:28:77:cc:d9:2d:91:4e:b7:fc:28:31:78:c2:
         c0:ef:f4:12:99:c0:81:03:ab:d2:e0:31:87:73:81:9f:fe:63:
         b1:90:0b:66:ce:3a:0f:5e:9f:23:78:dd:df:a7:8e:a6:b1:fc:
         53:2d:3b:72:85:a3:b9:c4:be:cf:d1:fc:d9:48:30:69:cd:f5:
         ce:83:e5:9f:cf:84:7d:f1:44:c4:81:03:e3:b5:ee:c6:a2:79:
         53:2b:0f:c1:30:e5:68:ad:5c:43:d6:e0:e1:7b:b8:f2:28:2a:
         21:c4:47:df:70:4d:4e:02:1c:6c:9d:7c:3a:c0:2f:25:32:7c:
         7e:68:e7:b2:2f:e5:b3:1b:ce:b9:79:25:ec:be:06:47:4c:27:
         b1:00:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:45 2025 by rpki-client