Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33322d3332203d3e20323633303539.roa
File:                     323830343a3933343a3a2f33322d3332203d3e20323633303539.roa (raw, json)
Hash identifier:          h4Q5RNwzeGEOCcf2ulj+E5YJ89xgTzKLw3TuQieBe+Q=
Subject key identifier:   CB:8B:32:29:4C:19:CF:FE:92:92:1B:F2:EA:9E:19:B7:9B:77:BC:F6
Certificate issuer:       /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial:       6E5B16DFED1FEF4CEC642A72728C61752121A2D9
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33322d3332203d3e20323633303539.roa
Signing time:             Thu 17 Jul 2025 18:35:48 +0000
ROA not before:           Thu 17 Jul 2025 18:30:48 +0000
ROA not after:            Thu 16 Jul 2026 18:35:48 +0000
asID:                     263059
IP address blocks:        2804:934::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 23:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5b:16:df:ed:1f:ef:4c:ec:64:2a:72:72:8c:61:75:21:21:a2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
        Validity
            Not Before: Jul 17 18:30:48 2025 GMT
            Not After : Jul 16 18:35:48 2026 GMT
        Subject: CN=CB8B32294C19CFFE92921BF2EA9E19B79B77BCF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:80:a3:10:af:ba:a3:19:66:49:72:a2:6b:
                    52:75:a3:4e:39:1a:00:8b:b2:76:c1:2f:17:36:16:
                    a5:61:a3:f4:15:50:aa:9b:42:a1:ab:5e:06:a1:b8:
                    77:88:a3:69:7f:a4:5d:c3:8c:2c:47:48:14:8d:f3:
                    2a:50:c5:c3:b2:af:1c:85:25:82:de:18:b8:52:80:
                    b1:16:c9:35:cb:ed:b4:76:0d:d0:a9:12:b2:52:d1:
                    b4:8d:88:a8:ba:66:81:3e:d5:21:32:29:9f:48:b7:
                    ce:04:29:45:4f:2f:b0:3e:b9:8a:c4:93:4b:61:f1:
                    46:bf:e4:46:8a:9f:ed:67:c8:8f:5c:16:e6:9d:b1:
                    90:d4:5a:c1:82:d2:2f:79:b9:25:73:cb:a7:cc:e3:
                    e1:a8:8d:1a:11:b2:a0:49:c5:ed:c0:e0:45:44:e5:
                    d1:c0:68:20:59:df:9a:5d:cd:d8:a8:0b:51:81:11:
                    6d:8a:e2:52:75:dd:5e:9d:94:8a:13:bf:c1:9d:d5:
                    2e:ce:af:78:43:ff:5b:12:df:7a:e2:ee:d6:6c:d4:
                    8d:d4:9c:1a:36:30:7b:cb:63:e4:df:7f:00:ff:ae:
                    a4:a5:a8:2f:28:37:12:95:83:b7:fb:de:e4:f5:92:
                    27:cf:7c:81:99:62:37:27:ea:49:d7:f5:94:b6:bd:
                    5d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8B:32:29:4C:19:CF:FE:92:92:1B:F2:EA:9E:19:B7:9B:77:BC:F6
            X509v3 Authority Key Identifier:
                keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33322d3332203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:fa:a4:6c:73:77:bc:81:e5:7e:b3:94:bd:c3:09:73:4d:46:
         d7:ed:b0:34:d8:7c:00:bf:d0:a5:a2:29:cf:88:a5:1b:3d:8d:
         d3:a7:e3:41:85:bf:83:07:e9:a7:4a:b5:77:cb:cd:c7:ec:7d:
         0d:8f:74:83:f8:09:8e:4a:b9:50:5d:25:b8:c6:2b:a2:40:b6:
         e2:b2:0e:43:24:f2:6a:2a:8e:7a:27:42:b9:88:ca:6c:57:69:
         e2:94:da:9c:89:0e:92:8d:92:fb:35:52:d3:79:2e:73:41:0b:
         d4:88:91:e2:a6:d1:a8:f4:31:ed:f5:7d:ed:66:9b:a1:ee:40:
         9f:19:8c:9b:56:19:a8:3f:27:6b:9a:04:9f:e8:5d:32:0c:f8:
         79:21:28:6f:b7:68:32:90:04:a4:ea:cc:f9:26:ed:a0:c0:45:
         aa:cd:4c:8f:5e:1f:40:5a:6c:11:bd:86:cd:39:76:11:01:1b:
         6f:4d:0c:f5:c4:95:df:e2:63:e6:dd:b6:fd:18:2f:74:11:98:
         b6:49:c0:4b:62:16:48:86:85:f4:51:92:12:a8:78:0d:26:6f:
         dc:88:25:c9:38:59:a2:35:df:05:e4:dd:26:2c:91:19:78:05:
         c2:28:1b:6a:83:41:35:ae:46:75:5f:12:b4:fb:52:87:ac:1a:
         07:5a:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:58:55 2025 by rpki-client