Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a383030303a3a2f33332d3333203d3e20323732363336.roa
File:                     323830343a383635343a383030303a3a2f33332d3333203d3e20323732363336.roa (raw, json)
Hash identifier:          i4YSwaUJwzOroVNaHggBxVPKQRdqS6xZHAkElmkFJb8=
Subject key identifier:   D2:00:DE:57:0E:10:BF:04:9A:6B:4C:39:3B:DD:A5:F1:DB:E2:EE:B3
Certificate issuer:       /CN=9DDDE3346BC9D5D003676856DD2EB4B001661C4D
Certificate serial:       76E026A35ECD063CE2969F16F398807231294EB3
Authority key identifier: 9D:DD:E3:34:6B:C9:D5:D0:03:67:68:56:DD:2E:B4:B0:01:66:1C:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DDDE3346BC9D5D003676856DD2EB4B001661C4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a383030303a3a2f33332d3333203d3e20323732363336.roa
Signing time:             Mon 07 Jul 2025 18:47:57 +0000
ROA not before:           Mon 07 Jul 2025 18:42:57 +0000
ROA not after:            Mon 06 Jul 2026 18:47:57 +0000
asID:                     272636
IP address blocks:        2804:8654:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/9DDDE3346BC9D5D003676856DD2EB4B001661C4D.crl
                          rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/9DDDE3346BC9D5D003676856DD2EB4B001661C4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DDDE3346BC9D5D003676856DD2EB4B001661C4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 09:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e0:26:a3:5e:cd:06:3c:e2:96:9f:16:f3:98:80:72:31:29:4e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DDDE3346BC9D5D003676856DD2EB4B001661C4D
        Validity
            Not Before: Jul  7 18:42:57 2025 GMT
            Not After : Jul  6 18:47:57 2026 GMT
        Subject: CN=D200DE570E10BF049A6B4C393BDDA5F1DBE2EEB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:11:1b:36:9f:c7:36:c2:fb:2b:f4:20:ba:
                    a6:da:21:dc:78:ee:95:d0:44:a2:55:4e:4d:e4:18:
                    00:41:6a:39:ca:28:ae:32:c9:08:c0:96:90:4f:46:
                    3d:14:fe:18:15:62:af:58:f8:62:12:0e:97:d5:a0:
                    1d:3c:54:d1:f5:5c:de:df:db:80:a0:00:cc:e1:c6:
                    ca:45:84:97:d8:54:c9:46:2c:e6:53:18:2c:2b:64:
                    94:22:24:fe:ae:a4:a8:60:66:0d:0c:7b:76:5a:10:
                    09:23:39:0a:de:22:0e:4c:6c:a5:20:e7:34:fb:59:
                    f7:61:b2:de:25:a2:ce:99:41:6a:c2:6d:4b:7d:11:
                    ca:43:10:60:13:8f:f6:7a:48:53:c9:52:59:ad:73:
                    1c:d8:50:9b:75:42:19:d0:d9:b9:e8:24:36:e0:f0:
                    d0:ff:1d:f9:1f:c4:c2:b3:49:7e:04:ac:15:fb:8e:
                    17:2f:4a:fc:8c:7b:9f:98:62:ec:55:a5:1a:a4:9c:
                    36:28:88:4d:92:4b:db:41:a0:4a:d8:d6:ea:d2:40:
                    05:a7:e3:1f:79:9f:cb:a7:78:aa:0a:ba:1a:2b:49:
                    47:5e:43:24:3d:e9:07:60:d6:60:bd:7d:c3:e2:d4:
                    d5:1c:f7:6b:b1:29:97:ed:de:85:3a:59:1e:8a:54:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:00:DE:57:0E:10:BF:04:9A:6B:4C:39:3B:DD:A5:F1:DB:E2:EE:B3
            X509v3 Authority Key Identifier:
                keyid:9D:DD:E3:34:6B:C9:D5:D0:03:67:68:56:DD:2E:B4:B0:01:66:1C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/9DDDE3346BC9D5D003676856DD2EB4B001661C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DDDE3346BC9D5D003676856DD2EB4B001661C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a383030303a3a2f33332d3333203d3e20323732363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8654:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7f:78:44:7c:d7:5e:54:61:db:31:62:8a:74:63:35:92:74:7e:
         d8:33:4c:66:26:5e:56:ab:bd:50:1b:be:08:f2:1e:de:f7:21:
         b0:ae:48:b5:8c:bd:ad:60:bc:b1:47:92:05:87:44:91:60:a1:
         2d:8b:ec:16:b3:a0:1e:11:76:65:5d:ac:73:72:1f:3a:60:75:
         be:95:53:be:09:81:95:30:17:5d:93:50:67:44:b7:d1:f3:3b:
         69:36:fc:c0:bd:a2:f7:91:17:0b:f0:b5:a8:ab:cf:c0:02:48:
         a7:cc:d0:0d:b4:9c:48:79:21:ff:27:fe:21:96:f6:f1:55:5c:
         fd:2d:2b:6d:47:cd:3f:f5:c9:b5:62:35:b4:c2:4c:43:b7:f3:
         bd:da:36:40:bc:48:4b:3f:bc:01:26:c5:88:4c:f4:08:61:42:
         ea:a6:be:2b:34:ec:7b:95:07:62:83:50:d5:da:41:99:43:ae:
         4f:28:7d:c8:d8:c3:16:2b:05:2a:02:5e:02:9c:0e:22:14:b3:
         5e:1a:a1:f5:21:b5:bb:4f:c5:e6:2d:6c:96:ac:89:25:4b:2f:
         a5:a7:44:e9:ed:c9:24:5d:6d:39:5e:d6:a2:68:d4:ab:4f:3b:
         c9:60:86:89:c8:4b:f7:12:c5:8d:d4:cf:87:e9:d9:63:10:ea:
         62:2f:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:25:12 2025 by rpki-client