Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3a2f33322d3332203d3e20323633343237.roa
File:                     323830343a313139633a3a2f33322d3332203d3e20323633343237.roa (raw, json)
Hash identifier:          8ei3lWLJwl1fPtliH4j9aVZlhGjmFglAHITDklC8kBQ=
Subject key identifier:   F3:92:B8:10:4F:77:A7:60:4D:84:0A:3A:85:FF:7F:99:A5:20:01:2F
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       0FE14CB049EF6656A2EB5AAF9071DABCD415CC25
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3a2f33322d3332203d3e20323633343237.roa
Signing time:             Tue 22 Jul 2025 20:54:39 +0000
ROA not before:           Tue 22 Jul 2025 20:49:39 +0000
ROA not after:            Tue 21 Jul 2026 20:54:39 +0000
asID:                     263427
IP address blocks:        2804:119c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e1:4c:b0:49:ef:66:56:a2:eb:5a:af:90:71:da:bc:d4:15:cc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jul 22 20:49:39 2025 GMT
            Not After : Jul 21 20:54:39 2026 GMT
        Subject: CN=F392B8104F77A7604D840A3A85FF7F99A520012F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:00:c9:95:8e:62:34:a2:09:70:4e:e0:81:
                    3f:49:d1:c2:c0:7d:f7:c2:4a:08:fb:74:a5:6d:52:
                    f0:85:fa:dc:d3:b0:a9:fd:2b:28:a8:6b:fd:85:79:
                    7d:4e:b7:2f:ed:7f:3d:c8:15:99:92:62:ec:60:72:
                    20:58:70:de:7d:13:d1:fa:63:8f:3a:57:e7:d7:99:
                    16:75:1f:3a:09:69:6e:23:d3:07:33:10:3d:89:9f:
                    15:fe:cc:a4:16:01:f5:75:d9:c6:e7:37:71:06:6c:
                    83:e1:53:0f:01:b1:76:f4:5e:9d:e2:42:0a:a5:6e:
                    c8:42:a5:38:8a:b4:fe:cd:62:7f:b0:4e:f4:de:21:
                    dd:de:56:e1:5d:05:3a:be:91:21:fd:8e:ed:35:99:
                    0e:d1:88:2e:00:31:c3:05:b6:0f:38:13:d2:b6:fa:
                    02:77:d2:91:b8:fc:fa:20:fb:17:1b:2d:74:18:14:
                    f2:c7:c1:54:95:b5:3a:c4:a4:cf:6d:3e:53:ce:51:
                    62:c0:fd:c4:09:f2:65:26:41:fa:27:03:62:24:3f:
                    fe:7b:aa:05:da:b2:08:4c:5f:ba:e7:c9:02:6d:8b:
                    d1:66:80:32:c9:d2:43:d0:55:fe:ea:e6:7d:b5:33:
                    30:72:84:5f:45:fb:2a:94:cd:28:8e:7a:57:c7:fb:
                    56:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:92:B8:10:4F:77:A7:60:4D:84:0A:3A:85:FF:7F:99:A5:20:01:2F
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3a2f33322d3332203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:119c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:61:31:df:90:9c:12:79:5a:2f:2c:14:4a:25:89:cc:74:b2:
         3f:3d:b7:30:42:14:06:93:45:d4:70:8b:be:a9:d8:8e:ab:59:
         df:66:d2:1d:66:1f:57:db:31:06:a2:40:14:fb:69:26:36:1e:
         28:52:b6:21:3f:21:32:d5:0c:97:22:00:de:0e:9e:60:29:62:
         7c:5d:1a:97:40:65:bd:a8:c5:c1:89:84:56:5f:b6:83:63:f7:
         3f:63:99:f9:70:b2:04:36:63:68:27:bf:70:ab:18:d8:95:26:
         f6:42:ee:aa:4f:21:d7:a4:b3:23:84:27:41:85:1a:0c:17:8b:
         c6:64:57:7e:6c:41:a8:89:b6:0c:f9:57:dd:aa:1c:9a:c2:fa:
         97:95:d4:b9:2d:20:22:bb:d7:28:f3:57:68:a2:04:42:da:7a:
         39:4f:c1:47:12:73:58:63:84:84:fa:0f:2d:61:72:a8:b4:0e:
         f5:36:eb:ef:cb:7f:c4:de:db:de:3d:dd:61:4d:c5:2d:d7:e3:
         37:0e:b9:0f:37:20:c8:a4:b9:a2:bc:47:b6:8e:2b:ad:c4:f9:
         15:22:b2:af:e5:0b:56:c1:02:bc:c2:46:e5:26:83:5c:34:11:
         5d:62:cb:30:53:6e:8c:18:59:55:ba:34:3b:8f:29:cf:cc:34:
         a2:a4:40:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:43:00 2025 by rpki-client