Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a363030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a363030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          ZYociKd8msZJ8lYtI0+8kLz2wBONYJxT2nAFl+FgFmY=
Subject key identifier:   3B:62:84:1B:7D:60:FE:33:48:A8:D5:DF:7D:6A:48:ED:E8:1D:EE:27
Certificate issuer:       /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial:       1B9F620E1EB7C5AC230E39BD4347DB23E03D7239
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a363030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Thu 17 Jul 2025 18:36:11 +0000
ROA not before:           Thu 17 Jul 2025 18:31:11 +0000
ROA not after:            Thu 16 Jul 2026 18:36:11 +0000
asID:                     263059
IP address blocks:        2804:934:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 23:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9f:62:0e:1e:b7:c5:ac:23:0e:39:bd:43:47:db:23:e0:3d:72:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
        Validity
            Not Before: Jul 17 18:31:11 2025 GMT
            Not After : Jul 16 18:36:11 2026 GMT
        Subject: CN=3B62841B7D60FE3348A8D5DF7D6A48EDE81DEE27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:0d:79:30:6c:50:7f:c1:ac:c4:c3:07:92:
                    23:6a:4e:5d:be:61:c6:1f:d4:8a:f1:40:8b:48:de:
                    d5:3b:09:95:2e:75:66:ed:2f:fd:ad:e2:c7:1c:e0:
                    1a:53:b5:be:83:f9:af:30:4c:41:a0:ee:63:e0:fb:
                    a9:6a:b3:a7:a7:20:a0:3b:fe:68:ce:38:2f:57:e9:
                    ff:d3:1d:ce:ed:eb:25:95:da:94:74:b0:a1:e4:59:
                    c0:2f:d6:5e:bf:c0:b0:aa:30:03:e0:74:8f:47:b7:
                    91:c5:ea:12:a1:74:89:aa:c2:ed:c9:e5:49:0b:a0:
                    ec:fa:83:fa:d1:7d:ee:bf:c2:ed:9a:94:1d:9c:9e:
                    da:3d:07:f0:24:cd:83:cd:8b:d5:f9:c0:06:bf:21:
                    31:cb:9a:8d:a5:62:65:97:70:96:7d:73:4d:1a:80:
                    02:91:4d:3f:88:ee:e2:2e:8d:c9:11:67:e8:e8:ea:
                    d0:41:4b:1a:a7:d1:99:dd:64:3c:a7:82:a7:52:31:
                    d7:7e:41:01:bf:90:d3:64:28:3c:a6:2f:c7:18:15:
                    ee:35:1f:2c:83:28:ee:61:8e:e3:e9:43:da:b2:31:
                    21:40:e8:e2:41:75:3e:44:83:ae:13:b9:0f:88:60:
                    3b:c7:60:a1:99:6c:b7:4a:b1:2c:24:ad:c6:2b:73:
                    6a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:62:84:1B:7D:60:FE:33:48:A8:D5:DF:7D:6A:48:ED:E8:1D:EE:27
            X509v3 Authority Key Identifier:
                keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a363030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:bb:35:09:ed:a3:94:c4:89:5d:fd:b0:a2:23:60:bb:f0:a0:
         88:a0:9b:18:9b:09:c0:e7:e3:84:b9:c1:8e:c7:a3:14:6a:83:
         08:12:4c:f1:f3:39:4a:40:8c:a1:23:a7:7d:82:96:11:b3:bf:
         38:b8:15:ed:dc:05:ec:3a:1b:4a:ae:c4:b3:b8:a3:6a:4d:c3:
         ae:b9:8f:bf:59:27:b8:79:26:49:81:07:8e:71:4c:d2:4b:2e:
         4f:9e:9f:a9:64:ea:18:be:db:0e:4b:73:78:2e:e7:e2:c7:f9:
         f2:70:09:8e:1c:49:33:95:c5:d5:df:f1:d4:b7:e1:a3:63:f4:
         bc:15:51:11:29:72:39:1c:59:36:2d:f6:d5:96:6c:93:d9:91:
         50:13:50:8b:02:4f:b5:0a:5b:b8:ff:40:1b:65:30:ff:0c:20:
         1a:63:26:c3:6b:d7:8a:8a:c0:e5:92:6e:78:fa:db:67:42:c6:
         15:da:be:75:bc:43:d8:a2:f0:b7:2d:e8:44:6a:26:55:ab:da:
         1b:17:a1:fa:69:e5:a7:3d:8a:25:46:ec:6a:9e:61:97:3e:f5:
         e6:e8:dc:68:dc:51:19:74:49:33:fd:3b:30:67:44:60:c0:3c:
         7f:d4:6e:3e:89:db:c7:76:e3:9b:28:1b:56:05:0f:8f:a5:a7:
         34:8d:8b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:12:20 2025 by rpki-client