Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a3a2f33322d3336203d3e203631353931.roa
File:                     323830343a323331633a3a2f33322d3336203d3e203631353931.roa (raw, json)
Hash identifier:          ujKJOJOQAvWAsr0ZFm3EI2gJw/ZoBqIEAn2Tv/Lr3l8=
Subject key identifier:   D2:0E:D0:02:66:43:E2:F9:C6:C6:D8:35:44:09:9E:76:9A:20:7B:79
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       70176DDEFC36441D6F4FC816926AC5C11E919372
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a3a2f33322d3336203d3e203631353931.roa
Signing time:             Mon 14 Jul 2025 21:00:00 +0000
ROA not before:           Mon 14 Jul 2025 20:55:00 +0000
ROA not after:            Mon 13 Jul 2026 21:00:00 +0000
asID:                     61591
IP address blocks:        2804:231c::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:17:6d:de:fc:36:44:1d:6f:4f:c8:16:92:6a:c5:c1:1e:91:93:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jul 14 20:55:00 2025 GMT
            Not After : Jul 13 21:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c1:d6:0d:b6:e5:93:be:d2:0c:21:e2:83:17:
                    39:e2:2e:c9:5f:19:ff:e6:79:a8:2a:e3:c3:b3:34:
                    f1:24:3e:0a:bf:e8:9f:ab:06:4d:d5:66:01:2b:42:
                    88:6b:9c:3a:37:65:1c:6f:dc:12:b1:d2:8c:44:03:
                    2a:8e:ae:a8:15:7a:4e:33:82:1d:c1:0c:5b:c7:7d:
                    b7:14:f6:af:75:3a:32:5e:6f:d3:84:ff:d6:59:de:
                    ae:0f:53:d6:6b:84:a3:a7:a6:33:76:cf:de:55:d6:
                    0a:eb:cd:fd:57:24:32:e2:f8:e0:68:db:69:37:93:
                    99:a0:12:c8:96:9b:0e:2a:d6:2c:95:e2:46:b9:66:
                    b7:72:31:d2:9c:33:c6:ff:6a:27:7f:2c:a5:d6:3e:
                    6d:e3:1d:47:42:81:77:25:b5:42:88:95:69:17:13:
                    a4:5e:d7:3b:5a:33:7c:ba:1c:af:d0:1c:e1:53:f6:
                    9f:f0:28:d4:80:94:8f:f3:44:05:a7:19:52:df:34:
                    a2:87:50:f3:07:ed:d4:c5:fe:99:9c:db:31:05:34:
                    05:21:75:0e:94:51:a0:41:55:5d:54:da:f5:f9:71:
                    83:68:33:65:09:05:29:3d:75:7a:a1:01:31:16:d3:
                    d7:12:bd:cc:c7:ff:3d:3c:cc:e4:5c:b9:c4:de:1a:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0E:D0:02:66:43:E2:F9:C6:C6:D8:35:44:09:9E:76:9A:20:7B:79
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a3a2f33322d3336203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:64:27:41:c0:89:58:c9:4e:ef:6a:c7:c3:c1:22:ac:ea:fb:
         78:b5:b7:d3:48:75:9a:70:b0:93:ac:07:2d:5b:cd:84:94:f0:
         a4:d3:13:bd:3a:78:ea:54:b0:6b:cc:36:8f:d8:5a:92:a0:11:
         4c:af:42:40:59:13:a1:0e:62:a7:43:ec:6f:2b:ff:f5:c9:1d:
         65:c9:63:6e:12:dd:2d:61:ab:a0:e6:2a:b8:5a:da:fa:51:58:
         30:8b:71:07:64:b4:ec:ee:2d:f2:63:58:c7:87:47:d2:b9:ae:
         41:da:9b:e9:83:50:73:43:1c:20:89:44:46:ae:66:75:bc:2e:
         f4:ab:54:5a:0f:5d:68:29:18:eb:69:32:45:c1:96:f0:ea:27:
         c3:5a:15:e3:58:6e:d9:4b:8b:89:c7:c5:e3:2b:27:22:5f:6c:
         37:9e:18:72:a3:74:9c:43:dd:82:25:55:f6:48:e8:b5:1c:0b:
         98:0f:6b:58:f5:de:63:d4:b7:4d:cc:19:c6:a3:50:fa:72:fb:
         f6:98:39:88:dd:1b:47:2d:fd:ee:65:dc:3e:9c:0d:0d:ac:e8:
         81:1f:7b:01:63:89:4a:cd:8d:87:02:6a:7b:9a:79:9a:5a:17:
         a0:f5:af:7c:a5:bd:ee:44:47:da:36:eb:06:e5:9e:06:c5:49:
         7b:cb:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:32:46 2025 by rpki-client