Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/323830343a343830383a3a2f33322d313238203d3e20323637303933.roa
File:                     323830343a343830383a3a2f33322d313238203d3e20323637303933.roa (raw, json)
Hash identifier:          TYrUYvbnC8BPKhENEy7PHQFkz3DfZs8uct6D4OHN640=
Subject key identifier:   20:D2:3B:B3:A0:D0:BD:85:39:67:E5:2C:8F:45:3F:81:68:D6:95:03
Certificate issuer:       /CN=8969EE982CBE9BCDB5B100091931153438B2D419
Certificate serial:       20511CE76B00D65186B4617C87927FA0F5EBBFF4
Authority key identifier: 89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/323830343a343830383a3a2f33322d313238203d3e20323637303933.roa
Signing time:             Fri 27 Jun 2025 19:08:12 +0000
ROA not before:           Fri 27 Jun 2025 19:03:12 +0000
ROA not after:            Fri 26 Jun 2026 19:08:12 +0000
asID:                     267093
IP address blocks:        2804:4808::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl
                          rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 22:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:51:1c:e7:6b:00:d6:51:86:b4:61:7c:87:92:7f:a0:f5:eb:bf:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8969EE982CBE9BCDB5B100091931153438B2D419
        Validity
            Not Before: Jun 27 19:03:12 2025 GMT
            Not After : Jun 26 19:08:12 2026 GMT
        Subject: CN=20D23BB3A0D0BD853967E52C8F453F8168D69503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:28:c9:00:4b:da:29:3d:89:6a:92:ad:b0:
                    3a:8a:2d:bf:72:58:b9:9d:75:ee:fc:88:2c:90:93:
                    fb:3a:3d:26:dd:f1:c4:35:fc:08:85:cf:5b:79:16:
                    c7:da:c8:fa:e8:67:80:89:54:93:bc:5c:6c:10:e3:
                    62:18:75:6c:b5:c0:a7:cb:06:f5:06:5b:5f:82:46:
                    d7:40:f9:57:c2:23:4e:f7:31:13:ae:e1:82:41:20:
                    9f:75:8d:e4:e0:8e:fc:d6:5e:f9:b8:f5:bd:10:8a:
                    9c:2d:ca:98:7d:90:a4:ff:35:8b:1f:e3:c2:3b:84:
                    02:d9:da:2d:a0:9f:7f:03:6f:07:99:c6:9b:2e:ef:
                    9f:63:1f:e6:9a:bf:e8:44:e5:b2:3d:d3:25:df:ff:
                    5e:17:04:f7:4f:fc:e8:96:04:d3:8b:7a:0a:2c:49:
                    a2:e4:da:97:36:8d:fd:fa:36:d5:43:4e:1f:99:47:
                    e5:08:6b:f6:19:53:a4:16:2a:f2:1c:66:02:47:4d:
                    5b:02:6f:24:5e:65:cb:4b:4a:aa:0c:96:a3:e3:b1:
                    7e:76:96:47:fc:81:1c:a7:6c:78:5f:f8:8f:b0:70:
                    0d:f3:94:d2:3b:1a:2c:55:25:ea:50:d8:f0:fe:23:
                    f5:e0:5c:84:58:ff:b8:4f:c4:08:aa:66:67:6c:5c:
                    cd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D2:3B:B3:A0:D0:BD:85:39:67:E5:2C:8F:45:3F:81:68:D6:95:03
            X509v3 Authority Key Identifier:
                keyid:89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/323830343a343830383a3a2f33322d313238203d3e20323637303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4808::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:b5:3e:df:43:a1:48:50:4f:0e:65:e8:16:07:cf:f8:32:92:
         a8:3d:a1:fd:29:12:92:0b:3f:92:b8:96:28:a8:a9:ca:ef:f2:
         aa:46:56:64:7c:0d:c9:b4:74:ef:4b:90:ba:ea:e7:f0:57:8c:
         88:9a:df:5c:46:90:2a:06:97:03:6a:b9:93:b1:97:96:5b:0f:
         e4:21:0c:d3:a6:04:05:92:cf:37:2f:28:ac:59:c1:e4:86:84:
         29:37:c4:79:4d:f1:41:f0:95:a0:7e:ea:39:f3:c0:34:15:3e:
         9f:21:db:81:05:36:1d:c2:9d:66:2c:7a:5b:6e:1f:1c:d9:86:
         95:f8:b8:cc:f4:56:9e:e4:32:2f:6c:0f:ec:fa:ed:86:54:50:
         bb:2f:8b:d0:24:69:f9:ae:bc:cd:de:ba:db:ac:ee:fd:9f:35:
         1e:35:e7:52:dd:77:26:ae:0d:46:12:22:c8:74:9c:66:64:ee:
         95:48:d7:ef:2e:04:17:d9:1e:2a:14:d6:e6:55:16:6e:09:1b:
         16:1a:91:5f:e6:8f:12:f4:c7:09:db:95:c7:1c:15:3c:b3:09:
         a8:1d:1f:c5:fe:91:c6:a4:5d:87:3e:c2:19:57:6b:c2:94:9f:
         22:10:e9:fb:3d:96:57:94:47:17:28:c2:30:80:43:d7:4a:3f:
         47:14:ab:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:53:01 2025 by rpki-client