Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4c4Z8pgwzeAHPZcJ563nd7Ni1RDDGvEoUVj8cH7YpWbc/0/323830343a356133303a3a2f33322d3334203d3e20323638373534.roa
File:                     323830343a356133303a3a2f33322d3334203d3e20323638373534.roa (raw, json)
Hash identifier:          441jPSuD5I+d33TlxtBxSMNMWvhrPPsKHepAwgA/5Fg=
Subject key identifier:   B5:9D:61:22:9E:34:06:FF:F3:69:00:30:ED:34:79:AB:62:34:78:E1
Certificate issuer:       /CN=B28266083D3AED48A79D95E36C41207F68F3145C
Certificate serial:       66B7768E4CA80C2B7D5647C2CEBBF22DE748414F
Authority key identifier: B2:82:66:08:3D:3A:ED:48:A7:9D:95:E3:6C:41:20:7F:68:F3:14:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28266083D3AED48A79D95E36C41207F68F3145C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4c4Z8pgwzeAHPZcJ563nd7Ni1RDDGvEoUVj8cH7YpWbc/0/323830343a356133303a3a2f33322d3334203d3e20323638373534.roa
Signing time:             Wed 09 Jul 2025 14:14:31 +0000
ROA not before:           Wed 09 Jul 2025 14:09:31 +0000
ROA not after:            Wed 08 Jul 2026 14:14:31 +0000
asID:                     268754
IP address blocks:        2804:5a30::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4c4Z8pgwzeAHPZcJ563nd7Ni1RDDGvEoUVj8cH7YpWbc/0/B28266083D3AED48A79D95E36C41207F68F3145C.crl
                          rsync://rpki-repo.registro.br/repo/4c4Z8pgwzeAHPZcJ563nd7Ni1RDDGvEoUVj8cH7YpWbc/0/B28266083D3AED48A79D95E36C41207F68F3145C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28266083D3AED48A79D95E36C41207F68F3145C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b7:76:8e:4c:a8:0c:2b:7d:56:47:c2:ce:bb:f2:2d:e7:48:41:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28266083D3AED48A79D95E36C41207F68F3145C
        Validity
            Not Before: Jul  9 14:09:31 2025 GMT
            Not After : Jul  8 14:14:31 2026 GMT
        Subject: CN=B59D61229E3406FFF3690030ED3479AB623478E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:88:f5:df:f7:63:52:a1:e7:5a:67:63:07:
                    14:fe:c2:58:6c:79:60:4a:1b:7a:1d:c1:34:4a:84:
                    32:96:5a:98:5f:ae:99:e8:02:64:a4:04:5d:37:63:
                    71:66:07:58:ec:46:78:32:05:cb:68:2c:a5:0c:48:
                    e6:e1:a8:8c:e7:9b:23:e1:7d:27:b9:c8:87:b9:06:
                    97:1e:e7:09:f3:3e:3a:36:6c:32:45:19:22:0d:77:
                    cc:97:db:8b:45:d8:7b:61:69:64:74:20:09:f5:6f:
                    5a:77:f8:9d:06:bd:33:eb:b7:6e:b1:78:d6:d5:4f:
                    63:d9:09:50:83:30:e0:ce:3e:01:70:1c:c2:63:cf:
                    60:d6:90:3b:34:fd:0e:97:26:06:e9:73:aa:3e:4c:
                    4d:6d:72:40:af:4f:36:a6:57:ae:56:02:9d:3a:7d:
                    3e:0d:5e:31:2a:ad:82:07:22:2d:56:28:81:21:c1:
                    f4:7a:c8:9c:32:89:de:26:1d:34:6c:7f:7e:40:a2:
                    28:67:e5:35:30:2a:b8:ad:03:6f:25:40:ea:57:50:
                    b9:7d:3c:10:8d:4b:1e:39:6a:ef:85:82:91:5b:2d:
                    fc:08:b2:01:28:75:3d:8d:a4:10:b7:f8:83:af:34:
                    e3:9a:49:65:50:f4:c9:b7:a7:3d:1c:53:cd:4a:0b:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9D:61:22:9E:34:06:FF:F3:69:00:30:ED:34:79:AB:62:34:78:E1
            X509v3 Authority Key Identifier:
                keyid:B2:82:66:08:3D:3A:ED:48:A7:9D:95:E3:6C:41:20:7F:68:F3:14:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4c4Z8pgwzeAHPZcJ563nd7Ni1RDDGvEoUVj8cH7YpWbc/0/B28266083D3AED48A79D95E36C41207F68F3145C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28266083D3AED48A79D95E36C41207F68F3145C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4c4Z8pgwzeAHPZcJ563nd7Ni1RDDGvEoUVj8cH7YpWbc/0/323830343a356133303a3a2f33322d3334203d3e20323638373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:81:6d:f0:b2:6b:fd:f5:5d:fc:70:15:ea:c3:95:45:1f:7b:
         40:83:73:d3:53:95:cb:3b:2b:d9:ea:52:e4:40:2a:35:48:d1:
         a7:92:93:79:59:99:f7:50:83:0e:aa:81:12:c7:32:a5:ac:10:
         48:60:ab:6c:f5:8e:ec:20:55:8b:23:ae:39:03:f2:1f:97:f2:
         18:a6:3b:1f:be:ce:ef:41:18:2b:34:5c:fb:bb:51:32:c7:64:
         bf:a0:aa:bd:33:13:f7:bb:23:ec:42:69:b9:bf:80:f3:f0:49:
         73:9b:8c:54:22:49:db:33:9a:7c:7b:9c:a0:4d:22:60:75:28:
         5f:ad:63:56:ac:36:6f:e3:c3:38:52:d3:da:03:9e:34:a6:9f:
         f1:32:9c:6a:c0:54:0e:fb:1c:26:b4:25:ca:ec:bd:a7:86:18:
         3d:f0:45:6f:a7:0b:9a:e6:c4:8d:7e:1c:83:88:a6:8a:4d:3f:
         3f:51:8a:46:3e:d5:19:5c:77:94:c1:92:b1:ea:b2:4d:73:a6:
         bc:61:11:1a:f1:e8:eb:bd:6c:d2:0b:0c:44:8d:18:b8:42:38:
         25:29:83:91:7b:b7:e5:1d:0f:94:8a:e6:4f:0d:c5:21:d0:4c:
         8a:1e:a0:d6:13:7d:49:73:bb:43:17:3b:28:4b:a8:e9:b0:52:
         60:98:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:51:49 2025 by rpki-client