Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a663030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a663030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          Z4+XAoRw1/xJv+K7gsUEfSAjwFLWCBnxvfrLqNyd0gA=
Subject key identifier:   10:34:68:DA:75:3D:9C:90:F3:F0:E2:62:65:B7:0F:6B:F6:8C:76:A4
Certificate issuer:       /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial:       6C2645E988BCC9DF176BCF2713E7343994BC8311
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a663030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Thu 17 Jul 2025 18:36:37 +0000
ROA not before:           Thu 17 Jul 2025 18:31:37 +0000
ROA not after:            Thu 16 Jul 2026 18:36:37 +0000
asID:                     263059
IP address blocks:        2804:934:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 23:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:26:45:e9:88:bc:c9:df:17:6b:cf:27:13:e7:34:39:94:bc:83:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
        Validity
            Not Before: Jul 17 18:31:37 2025 GMT
            Not After : Jul 16 18:36:37 2026 GMT
        Subject: CN=103468DA753D9C90F3F0E26265B70F6BF68C76A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:79:11:6c:91:e5:a2:2a:fc:43:07:d5:9b:03:
                    20:ee:1a:17:1f:78:4c:91:0a:9d:1c:34:cb:1f:5b:
                    18:a6:92:86:de:2f:f0:f3:58:d3:74:14:49:69:9d:
                    82:33:17:8e:b1:04:df:4e:1a:c4:02:40:26:3f:7b:
                    2d:b2:ea:2f:78:a1:c4:b7:6d:2d:cc:1d:04:f8:b9:
                    41:97:dc:d8:a6:b4:57:bf:15:9f:45:3c:c8:2f:49:
                    f0:a4:b1:f6:7d:da:00:a9:4b:44:9a:97:0d:96:3a:
                    4c:3b:94:10:71:7c:ce:26:33:d1:21:5e:18:5b:50:
                    f5:8f:20:76:4b:51:da:3e:70:4a:7a:7f:f4:5e:27:
                    3d:5c:78:d3:5e:f2:ea:ba:70:fe:79:72:bd:dd:84:
                    95:58:67:e2:36:12:e7:ed:03:02:05:e1:5a:0e:b2:
                    3b:c3:2e:dc:11:01:c9:29:64:e3:64:b9:7b:2b:5a:
                    b0:f7:d1:04:b5:93:5b:4b:f1:1c:c5:f3:d8:fb:53:
                    f8:99:22:24:44:0e:c0:5b:af:a5:df:2f:d0:3a:68:
                    45:f8:e1:09:00:cd:df:9b:c4:41:4c:fe:d4:41:ed:
                    ba:bf:e4:fe:d1:bd:ab:e8:3b:2c:48:35:08:1d:a8:
                    6b:62:e2:8a:27:f0:fb:e6:bc:af:d6:b0:e6:62:de:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:34:68:DA:75:3D:9C:90:F3:F0:E2:62:65:B7:0F:6B:F6:8C:76:A4
            X509v3 Authority Key Identifier:
                keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a663030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:bc:33:4c:1d:ff:a8:99:a2:d2:30:f5:06:2c:6b:fe:df:8b:
         8b:5c:bd:09:ad:d7:9c:f2:22:a1:41:f4:d2:b7:77:87:f2:a1:
         a3:da:44:51:62:4c:b8:ee:e8:ea:33:dd:0e:92:d7:62:ae:65:
         dd:c4:92:cc:7d:04:8f:80:9a:fc:3d:80:e7:57:8d:01:aa:33:
         55:32:3f:f8:0d:6e:68:54:2c:fd:5d:35:c8:16:70:7b:5e:87:
         2b:3b:2b:ac:8c:4f:6d:46:c9:bb:2e:99:4b:cb:62:89:98:98:
         8c:27:5c:e1:70:98:d4:8d:e0:d2:84:b6:7d:5d:7d:3c:17:47:
         22:83:46:f3:4f:73:d8:22:a6:39:e1:41:36:2b:ba:c8:08:50:
         67:ab:77:05:1a:0d:18:1b:55:6f:90:4e:11:f9:95:45:3b:f5:
         ec:ec:e1:fe:f7:80:f6:be:92:9e:10:3d:5e:13:cc:f7:32:4a:
         be:77:5c:65:d3:e5:b5:ee:a5:7f:47:fd:73:83:0c:ad:a3:cf:
         c1:dc:ae:95:ee:2f:df:e4:ba:f1:57:d3:f0:f3:2b:bd:ca:5e:
         34:fc:41:06:c8:75:fe:70:aa:77:a4:a1:74:ff:81:6c:63:9a:
         a2:19:7b:f8:f2:a3:e4:ed:e4:c8:58:59:49:7c:8b:f4:1d:3a:
         f2:4f:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:11:43 2025 by rpki-client