Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a653030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a653030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          PZRZEhSgHGFRC7T792+9BRx02AC5JVSDChLxDN11JY8=
Subject key identifier:   A2:49:4E:D4:3A:75:B2:16:0E:95:F9:69:5A:18:4C:6B:98:C1:A3:95
Certificate issuer:       /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial:       1B5763EDECDDE218DBB1D221396DA76AA2DC3228
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a653030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Thu 17 Jul 2025 18:36:34 +0000
ROA not before:           Thu 17 Jul 2025 18:31:34 +0000
ROA not after:            Thu 16 Jul 2026 18:36:34 +0000
asID:                     263059
IP address blocks:        2804:934:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 23:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:57:63:ed:ec:dd:e2:18:db:b1:d2:21:39:6d:a7:6a:a2:dc:32:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
        Validity
            Not Before: Jul 17 18:31:34 2025 GMT
            Not After : Jul 16 18:36:34 2026 GMT
        Subject: CN=A2494ED43A75B2160E95F9695A184C6B98C1A395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:32:dc:b4:f3:e5:23:39:6a:0e:10:83:a4:79:
                    e7:ea:1c:36:4f:94:da:d6:5f:c0:bb:1d:15:a9:51:
                    c1:b5:9d:b5:ab:a8:b7:d9:28:6e:58:cc:35:9f:56:
                    99:f2:a4:5e:36:2f:76:82:a0:08:00:84:ce:8f:8a:
                    04:4d:46:d3:eb:ba:13:ac:1b:b0:c6:41:de:19:87:
                    d1:b7:16:52:0d:7e:2f:78:b6:6f:d2:05:7b:65:ee:
                    1b:7b:78:e4:32:8e:c0:ea:9f:09:70:4d:08:db:94:
                    c4:36:10:fb:f3:a0:7c:08:08:3d:e2:05:4e:d3:11:
                    1c:f1:1b:ad:8c:5b:11:fb:d7:86:d1:48:1c:92:d2:
                    a0:e3:c0:11:01:0b:13:bf:4f:ed:ac:d1:75:8f:e4:
                    03:2e:d5:04:b0:a7:bf:2c:dd:17:e4:2c:41:a2:98:
                    dd:8b:d3:98:9e:3f:ed:30:f4:86:4f:eb:69:e4:08:
                    05:fa:ee:71:74:61:4d:5a:f7:75:2b:4a:de:ef:ab:
                    77:7e:be:1b:8a:2b:72:a0:ac:9c:bc:59:ea:aa:10:
                    5d:a8:7d:5d:67:f3:ba:37:be:ff:82:5b:6b:9c:ba:
                    16:00:7b:f8:ca:a1:49:6a:95:2b:74:d1:90:1f:61:
                    76:52:0f:9a:f9:89:8f:f8:df:e4:5d:b0:54:42:41:
                    34:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:49:4E:D4:3A:75:B2:16:0E:95:F9:69:5A:18:4C:6B:98:C1:A3:95
            X509v3 Authority Key Identifier:
                keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a653030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:67:50:45:43:44:57:44:91:fa:e3:f6:52:10:68:cb:a4:82:
         08:7e:85:96:bb:65:ae:a0:ae:7b:b0:23:12:46:62:38:c2:c6:
         aa:fe:2f:9c:45:3d:05:8f:4a:a6:73:36:2d:95:b2:fa:f7:99:
         a6:68:03:e3:81:bc:ff:1c:99:8d:a1:05:6d:83:21:fd:19:e4:
         3f:e2:e0:12:2e:1a:52:24:4a:12:8c:c1:07:86:35:b6:86:77:
         23:d9:c3:1a:93:5c:3e:90:db:9e:0a:d7:7d:2a:34:3a:ef:dc:
         b5:0a:22:d0:63:dc:af:db:af:3c:75:e8:de:5c:f2:58:25:7a:
         3c:9a:42:0f:a8:ce:1f:13:9d:43:ec:b8:70:41:90:9f:b7:d2:
         18:3d:05:4c:89:ee:8d:e6:98:06:b4:2e:21:0d:2e:04:18:23:
         71:cd:6a:5b:e1:c2:ac:5f:5e:2d:6c:77:32:1c:c3:0e:75:b1:
         ce:fa:73:e8:c9:32:81:9b:37:3b:c6:86:73:82:c4:81:a0:08:
         1f:66:c3:f0:9b:5e:bf:ac:d3:b0:86:b0:f5:92:64:1d:af:bf:
         23:a0:eb:9e:0e:36:c0:37:6e:36:df:6d:bf:3e:4f:ff:ad:cc:
         a3:0d:82:be:7f:8b:68:d7:3b:e0:34:dd:6e:7b:00:50:28:7f:
         ef:b5:be:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:14:34 2025 by rpki-client