Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/323830343a343938343a3a2f33322d313238203d3e20323637313838.roa
File:                     323830343a343938343a3a2f33322d313238203d3e20323637313838.roa (raw, json)
Hash identifier:          /jDEPT1CSkaYIsyKf5vIpqQAuJCZ1wNaMUP1+qANyqE=
Subject key identifier:   D1:39:39:3A:8E:93:EA:EB:48:9A:BB:8C:FA:B6:61:9A:C1:0B:FF:A5
Certificate issuer:       /CN=2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA
Certificate serial:       7802884A4B91B89B3575E5A9ABFF95F3BEB8DE57
Authority key identifier: 2F:09:1B:DE:CA:E3:1B:7B:9E:26:B8:A1:82:F3:70:81:E1:F1:F4:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/323830343a343938343a3a2f33322d313238203d3e20323637313838.roa
Signing time:             Tue 22 Jul 2025 20:46:33 +0000
ROA not before:           Tue 22 Jul 2025 20:41:33 +0000
ROA not after:            Tue 21 Jul 2026 20:46:33 +0000
asID:                     267188
IP address blocks:        2804:4984::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.crl
                          rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 04:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:02:88:4a:4b:91:b8:9b:35:75:e5:a9:ab:ff:95:f3:be:b8:de:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA
        Validity
            Not Before: Jul 22 20:41:33 2025 GMT
            Not After : Jul 21 20:46:33 2026 GMT
        Subject: CN=D139393A8E93EAEB489ABB8CFAB6619AC10BFFA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:41:25:77:36:e7:c8:e6:fb:9f:c7:34:98:
                    66:68:4d:04:c8:42:2a:3f:d9:48:40:c5:39:34:a1:
                    95:3b:d2:9b:d0:5d:fa:4f:94:c1:d4:71:7e:71:96:
                    ba:ee:30:08:e9:10:bb:40:2d:5d:19:a3:13:7a:e7:
                    45:00:73:40:d3:fc:d6:40:ce:db:27:57:9b:ea:f3:
                    af:b8:9b:33:d8:d2:87:d2:10:67:d6:cf:f6:75:41:
                    73:fe:a9:86:8d:2e:d3:85:34:32:a4:8b:77:ad:e2:
                    ad:5a:f1:88:fd:27:02:23:93:9c:7e:3f:7b:c2:68:
                    54:b8:c4:e3:9b:3c:f9:1b:72:72:7a:87:5d:3b:c4:
                    9a:ef:be:9c:6b:61:7b:16:19:35:29:a8:2e:68:f3:
                    20:6a:5e:60:91:a1:e4:ae:e7:f0:c9:4a:18:92:6a:
                    2e:31:ba:f3:eb:b4:f2:b7:6f:2b:ce:a4:d5:95:a1:
                    4d:9f:87:7c:82:7e:36:37:7f:e8:05:e5:60:ab:b0:
                    03:48:89:41:67:5b:7d:f3:75:72:33:bf:be:00:80:
                    e0:cd:84:26:b2:4c:57:da:ba:95:e7:e7:a3:70:e5:
                    00:02:a8:12:06:56:0e:a1:80:07:05:14:2d:da:bc:
                    5e:0d:31:bd:d0:6d:36:bc:fe:fe:95:bb:1f:ca:59:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:39:39:3A:8E:93:EA:EB:48:9A:BB:8C:FA:B6:61:9A:C1:0B:FF:A5
            X509v3 Authority Key Identifier:
                keyid:2F:09:1B:DE:CA:E3:1B:7B:9E:26:B8:A1:82:F3:70:81:E1:F1:F4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/323830343a343938343a3a2f33322d313238203d3e20323637313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4984::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:50:b2:0d:99:5b:61:0b:3f:06:4e:06:9e:62:c4:96:9a:a7:
         6c:da:55:6a:dc:96:a2:70:0d:90:70:bc:54:d1:bc:bd:24:f7:
         59:37:2f:d9:76:56:58:79:0c:49:09:db:de:9c:62:9a:86:66:
         82:5a:a5:74:0b:1e:58:25:f4:76:49:d9:fd:2d:d7:02:14:51:
         bc:f2:fc:e9:c6:68:47:c7:f1:a0:0a:89:7c:51:37:34:bb:b4:
         ac:2b:f3:f8:82:f9:1a:f3:8a:81:eb:d4:9b:2e:87:b6:f3:61:
         8e:99:e8:77:6f:e5:4c:86:63:94:66:cc:bd:c6:44:3d:1d:05:
         eb:91:d1:93:24:74:ce:f1:57:59:4a:42:55:53:7c:00:22:64:
         80:42:4f:73:f2:0a:c1:51:ec:45:0a:76:5d:83:d7:25:a7:66:
         97:c2:58:7e:70:ba:e1:c7:e4:18:81:2e:86:a5:61:b6:66:f1:
         5f:f2:5a:49:9d:25:09:d7:a3:c6:40:9d:ec:a2:1b:e6:e1:73:
         a2:92:cc:bc:fd:e3:4e:4c:2e:22:4c:bc:50:53:f8:9a:8b:05:
         df:71:25:0c:98:f6:23:9d:91:9c:77:76:af:fc:50:e2:4a:b4:
         a7:b9:58:6e:d1:53:88:0a:5b:a2:79:97:43:7f:21:4e:71:11:
         87:57:e7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:10:32 2025 by rpki-client