Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          jSbgLyiW/VeiKdQi1kINGt0CV67DnBXkbJKkvL8hql8=
Subject key identifier:   DC:FB:7D:08:6C:62:08:23:30:47:D9:1E:00:DB:E6:68:1D:7B:F6:E0
Certificate issuer:       /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial:       15025F425D902B87EC0D12994E009648B60DC3A1
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Thu 17 Jul 2025 18:35:51 +0000
ROA not before:           Thu 17 Jul 2025 18:30:51 +0000
ROA not after:            Thu 16 Jul 2026 18:35:51 +0000
asID:                     263059
IP address blocks:        2804:934::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 23:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:02:5f:42:5d:90:2b:87:ec:0d:12:99:4e:00:96:48:b6:0d:c3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
        Validity
            Not Before: Jul 17 18:30:51 2025 GMT
            Not After : Jul 16 18:35:51 2026 GMT
        Subject: CN=DCFB7D086C6208233047D91E00DBE6681D7BF6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:10:6f:ae:1f:18:57:d6:a5:0f:61:6d:84:25:
                    35:1d:c4:78:7b:0c:7a:92:18:72:78:a7:f6:7d:80:
                    e2:2c:21:c9:1d:ce:d1:af:e0:3e:b5:e9:3d:62:78:
                    93:ac:ff:7e:bc:72:8b:dc:92:d5:b8:3d:e5:f8:7a:
                    98:23:a7:fd:04:9f:55:00:ee:8a:d3:ef:94:78:fd:
                    28:14:b9:a9:e1:f8:5f:b1:99:60:f3:0a:d9:b9:fb:
                    02:10:ec:1f:cf:10:9b:d5:2b:29:cf:c0:aa:11:4b:
                    90:c0:0b:2e:8c:24:55:09:8b:db:4c:c3:53:b4:55:
                    84:5e:8e:13:c8:77:c6:4d:a8:ab:a7:b9:29:b5:50:
                    cd:fb:8d:79:d7:b8:8c:59:2b:ee:67:af:0b:bd:c2:
                    73:99:e3:ac:7c:7c:ea:33:5b:e9:b1:a7:43:98:18:
                    55:93:0c:ae:16:c1:28:ae:59:c3:1f:c7:2d:8f:fb:
                    7d:00:eb:c9:ee:e6:b6:76:65:88:7a:3d:00:28:91:
                    ce:6e:5f:2d:25:cd:6e:f5:40:f7:b0:7b:6c:f5:86:
                    7d:cb:d4:85:5e:9e:33:77:06:d9:f4:cb:5d:4e:2e:
                    16:2c:7c:7d:44:de:a8:dd:6a:7c:74:91:ab:b8:4b:
                    97:57:1c:e3:f1:57:8d:8c:24:75:24:78:47:a6:e4:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FB:7D:08:6C:62:08:23:30:47:D9:1E:00:DB:E6:68:1D:7B:F6:E0
            X509v3 Authority Key Identifier:
                keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:0f:69:30:ef:39:60:19:e0:b5:72:fe:53:b4:92:91:83:6a:
         e8:8d:b2:57:d2:6f:cf:83:29:f0:c3:dd:4e:31:b3:97:20:ac:
         3a:45:01:24:a5:df:f0:6d:76:70:26:05:42:bf:ce:ec:97:8c:
         22:d0:33:97:24:f4:f8:2c:3c:42:2f:4a:9a:6a:f0:48:f6:36:
         4c:58:20:04:f7:72:02:35:7b:8e:e0:53:11:d9:b9:06:0d:23:
         de:54:f6:2a:93:84:40:4c:a4:c5:a4:b6:3a:89:8d:79:15:b2:
         a2:55:47:ad:3b:9c:3c:28:33:a4:91:69:ae:a5:2d:70:7a:44:
         a9:f4:9e:9a:02:6b:6a:af:35:8d:fe:03:f9:d1:9a:71:ca:45:
         d0:2e:3c:34:60:54:ee:3d:ac:53:06:03:6e:af:5d:82:ee:60:
         b2:69:c5:77:8d:82:4b:93:d0:a3:4c:7b:79:58:c0:44:27:7f:
         6c:5a:ac:9a:d7:42:a4:1e:3e:5e:71:82:95:53:43:ad:b7:49:
         6a:8a:63:db:9e:7a:79:98:7a:2c:6d:d6:90:e7:6c:7a:05:2f:
         fb:de:70:a8:86:18:aa:67:6a:41:2f:1d:8e:87:ec:c3:26:c5:
         10:75:34:91:e0:b8:d2:2f:1d:6d:ca:c8:7c:fd:df:31:ac:c6:
         43:98:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:47:02 2025 by rpki-client