Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d313238203d3e20323636393334.roa
File:                     323830343a343538633a3a2f33322d313238203d3e20323636393334.roa (raw, json)
Hash identifier:          5Eizt+aCc1u8N3uFBQioFAO92WAJ8uTXYXn2zbHmo2g=
Subject key identifier:   83:70:8D:6E:03:4F:21:DE:34:22:B2:E9:D7:34:63:B3:11:E8:CB:B3
Certificate issuer:       /CN=87DC0BC66FCDE290C7B38E784CD460C99B44A60A
Certificate serial:       2D18541749FA400F7F066B94DDBF9266D4794133
Authority key identifier: 87:DC:0B:C6:6F:CD:E2:90:C7:B3:8E:78:4C:D4:60:C9:9B:44:A6:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DC0BC66FCDE290C7B38E784CD460C99B44A60A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d313238203d3e20323636393334.roa
Signing time:             Sat 26 Jul 2025 01:44:32 +0000
ROA not before:           Sat 26 Jul 2025 01:39:32 +0000
ROA not after:            Sat 25 Jul 2026 01:44:32 +0000
asID:                     266934
IP address blocks:        2804:458c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/87DC0BC66FCDE290C7B38E784CD460C99B44A60A.crl
                          rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/87DC0BC66FCDE290C7B38E784CD460C99B44A60A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DC0BC66FCDE290C7B38E784CD460C99B44A60A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 18:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:18:54:17:49:fa:40:0f:7f:06:6b:94:dd:bf:92:66:d4:79:41:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87DC0BC66FCDE290C7B38E784CD460C99B44A60A
        Validity
            Not Before: Jul 26 01:39:32 2025 GMT
            Not After : Jul 25 01:44:32 2026 GMT
        Subject: CN=83708D6E034F21DE3422B2E9D73463B311E8CBB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:42:dc:0b:8a:ec:3b:ed:bb:20:b7:27:ab:
                    31:56:d0:75:0d:76:e0:ab:29:c1:1f:86:79:c6:7f:
                    73:c2:3d:ca:c5:b8:ff:41:27:4a:e2:0a:e3:99:99:
                    86:ef:7a:1d:9e:8b:4b:2f:90:17:06:85:25:2d:b1:
                    24:9d:52:b0:bf:08:99:ca:e6:ae:71:62:a2:e1:98:
                    0a:cc:10:16:24:ce:08:64:7f:7a:f3:a9:4f:44:86:
                    0e:cf:be:a2:d1:a2:d4:de:ec:1d:87:11:e0:04:81:
                    25:5c:5e:93:70:60:c6:ad:d2:6e:4a:ab:06:a0:4c:
                    a9:ef:9d:f6:5b:b4:b5:4c:1e:8b:6e:82:b6:5d:fc:
                    ea:1f:ce:9b:bc:a9:99:6f:28:80:79:9e:54:7c:a9:
                    8a:0a:9b:56:4b:f7:e4:11:d9:86:2c:5d:67:95:cc:
                    0d:5f:fe:25:b0:90:b9:59:5e:1c:80:1b:01:81:bf:
                    5b:36:b9:24:f1:c8:b8:db:85:19:be:d6:6f:d7:22:
                    3d:3d:64:12:5c:a1:d0:fb:a4:1c:ad:12:a7:a6:af:
                    a2:5d:00:0e:3d:e7:51:d9:eb:78:e6:8f:c0:30:87:
                    4b:bb:09:fc:81:be:12:47:fb:21:62:c7:48:6f:65:
                    83:b2:d7:f8:4d:81:c5:99:ae:1c:d2:f4:91:a7:8c:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:70:8D:6E:03:4F:21:DE:34:22:B2:E9:D7:34:63:B3:11:E8:CB:B3
            X509v3 Authority Key Identifier:
                keyid:87:DC:0B:C6:6F:CD:E2:90:C7:B3:8E:78:4C:D4:60:C9:9B:44:A6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/87DC0BC66FCDE290C7B38E784CD460C99B44A60A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DC0BC66FCDE290C7B38E784CD460C99B44A60A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d313238203d3e20323636393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:458c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:33:ec:c5:b6:bf:e4:30:e9:6b:83:ab:6c:4c:e3:d6:2f:14:
         ec:39:b8:7a:12:eb:a4:2a:c0:db:37:37:72:9c:e4:6a:a5:3a:
         35:d6:7b:b4:cb:0e:01:b8:47:14:bb:37:48:b0:c6:a6:2a:77:
         76:9b:12:dd:1b:0b:2c:ef:f4:b7:82:e5:f6:3f:e3:db:36:1d:
         a5:24:4d:bb:5c:4e:d5:51:2a:94:26:ff:75:f2:e3:c6:30:3c:
         b6:66:da:ed:57:44:66:bb:8f:a7:7a:b0:a0:e2:c4:87:50:c0:
         19:bb:c1:f6:be:51:4e:fe:64:fe:68:aa:86:80:51:f6:03:0f:
         63:30:12:af:80:63:ed:b5:6f:64:cd:b8:b6:8b:89:1a:47:cf:
         86:50:8e:2c:4f:e5:0d:98:7f:6d:1c:c3:5a:46:1c:25:b9:40:
         f8:8d:c9:cf:87:cf:46:db:fa:42:cc:d7:e6:05:3c:70:34:e5:
         e4:41:90:ce:3b:bf:6e:76:9e:db:5f:73:05:b5:84:cb:1c:13:
         8b:ed:a0:79:d5:ce:fb:99:21:f1:58:58:69:53:b8:a0:ce:d1:
         89:f1:20:14:ba:99:02:90:6c:89:f2:2b:09:85:57:25:be:97:
         0e:aa:a4:b3:c2:ac:7f:d2:c3:74:a4:d0:fb:cf:ab:c6:c5:9b:
         09:4c:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:07:14 2025 by rpki-client