Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a666665303a3a2f34332d3433203d3e20323633343237.roa
File:                     323830343a313139633a666665303a3a2f34332d3433203d3e20323633343237.roa (raw, json)
Hash identifier:          i98EHMisji73flL9hu5I6kmtIVuPH2lgQee0BEoCoLE=
Subject key identifier:   E4:67:E1:E5:DA:5B:A7:BE:C1:BD:5B:4E:A8:FA:8D:88:5B:72:44:9A
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       73F3BB2FE87F65B8274721727AFB4D2A04C554D0
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a666665303a3a2f34332d3433203d3e20323633343237.roa
Signing time:             Tue 22 Jul 2025 20:54:38 +0000
ROA not before:           Tue 22 Jul 2025 20:49:38 +0000
ROA not after:            Tue 21 Jul 2026 20:54:38 +0000
asID:                     263427
IP address blocks:        2804:119c:ffe0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f3:bb:2f:e8:7f:65:b8:27:47:21:72:7a:fb:4d:2a:04:c5:54:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jul 22 20:49:38 2025 GMT
            Not After : Jul 21 20:54:38 2026 GMT
        Subject: CN=E467E1E5DA5BA7BEC1BD5B4EA8FA8D885B72449A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:b8:1f:71:81:82:b6:ab:7e:9f:37:e9:60:
                    8e:3b:b0:13:0d:9d:05:b2:e6:ab:a0:c7:d8:0d:31:
                    9d:eb:98:f6:05:ad:9f:42:3e:44:9e:1c:e3:59:57:
                    01:8c:9d:60:ba:90:f5:ca:5b:fc:da:a2:b7:f0:c5:
                    af:17:93:2a:bc:3a:4b:55:5d:20:f6:0f:63:5d:23:
                    74:9e:67:76:c5:ff:cd:28:b8:8f:b0:62:1c:8c:b6:
                    fc:ce:56:9a:42:e6:1a:ad:09:fc:5d:b7:a7:53:ed:
                    65:8d:f3:c3:e3:cc:f6:cc:fb:89:ad:75:94:6d:df:
                    87:c2:63:7c:d4:4a:4c:ad:9d:5f:8a:fc:a5:64:59:
                    f7:be:71:ec:72:9d:1e:a7:3d:a6:90:ae:fa:12:3f:
                    ae:11:78:78:55:b0:ef:9a:36:03:8f:43:9f:29:a8:
                    d1:cc:f3:d6:54:68:50:2d:1c:fa:6d:20:ee:4d:bd:
                    d2:b5:75:ef:66:64:f2:b6:de:dd:e0:a8:87:3b:99:
                    8a:77:b1:be:d8:e4:d5:b7:6b:66:49:20:ba:e0:67:
                    dd:29:0c:55:33:f9:99:d9:4b:7b:35:80:8f:04:91:
                    63:b6:f5:45:b7:fe:96:54:3d:df:70:d0:b1:06:78:
                    9c:37:11:fa:0b:c5:cb:6c:23:63:cc:b9:68:c3:ee:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:67:E1:E5:DA:5B:A7:BE:C1:BD:5B:4E:A8:FA:8D:88:5B:72:44:9A
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a666665303a3a2f34332d3433203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:119c:ffe0::/43

    Signature Algorithm: sha256WithRSAEncryption
         cc:db:bf:65:f4:26:ba:cf:be:8e:32:90:0d:b5:52:fd:84:9a:
         90:df:8f:d8:37:f2:8b:9f:91:41:1c:fa:f6:b5:33:7a:b1:fe:
         c6:9c:c5:63:45:6d:94:6e:b7:ba:d7:b9:6e:28:e5:b0:07:3f:
         96:3e:e6:31:84:29:ff:82:92:31:65:83:b7:6d:76:6c:79:fe:
         dd:55:50:7f:59:a6:10:bd:da:97:c2:bf:f8:65:0b:8b:ae:d7:
         97:94:6e:3b:af:a5:46:b0:57:be:aa:e3:af:33:64:5c:1c:7e:
         01:d1:2a:20:cf:c6:e0:44:55:19:69:e5:a4:ad:8e:64:54:09:
         bf:81:2c:b7:61:6b:d1:e8:27:16:22:67:9f:6b:10:e7:80:78:
         65:42:b6:d6:56:a7:a1:1f:78:4e:3c:ab:88:3d:10:cf:bf:10:
         04:8d:99:09:93:9b:60:64:59:39:f8:bb:61:70:6f:1c:77:6c:
         c6:18:bd:91:0c:34:09:46:3f:8e:7f:40:99:88:9e:58:e5:55:
         ac:f2:70:35:07:34:37:9e:bd:d1:6d:e2:b0:23:38:91:24:73:
         cd:ab:70:20:31:ef:89:f3:77:9d:82:df:66:04:41:25:fa:e3:
         ec:2c:02:46:12:1b:2f:c6:c2:33:ff:16:da:f0:38:0e:9a:9c:
         25:25:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:44:20 2025 by rpki-client