Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/323830343a316332633a313030303a3a2f33362d3336203d3e20323632383639.roa
File:                     323830343a316332633a313030303a3a2f33362d3336203d3e20323632383639.roa (raw, json)
Hash identifier:          7Hlhlg729x9/zHifS8j6zn/RklVH6x286EbXZW4Oe3E=
Subject key identifier:   F8:62:7C:C5:FA:8D:81:DE:49:A9:1C:98:5E:8C:14:90:BF:93:04:5B
Certificate issuer:       /CN=B15DE8A39643F9E3852DE2E7153C75CAAA401A15
Certificate serial:       6F470898C3C2B86308FDD1E3DA456CC77E4062
Authority key identifier: B1:5D:E8:A3:96:43:F9:E3:85:2D:E2:E7:15:3C:75:CA:AA:40:1A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/323830343a316332633a313030303a3a2f33362d3336203d3e20323632383639.roa
Signing time:             Thu 24 Jul 2025 14:08:10 +0000
ROA not before:           Thu 24 Jul 2025 14:03:10 +0000
ROA not after:            Thu 23 Jul 2026 14:08:10 +0000
asID:                     262869
IP address blocks:        2804:1c2c:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.crl
                          rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:47:08:98:c3:c2:b8:63:08:fd:d1:e3:da:45:6c:c7:7e:40:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B15DE8A39643F9E3852DE2E7153C75CAAA401A15
        Validity
            Not Before: Jul 24 14:03:10 2025 GMT
            Not After : Jul 23 14:08:10 2026 GMT
        Subject: CN=F8627CC5FA8D81DE49A91C985E8C1490BF93045B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:72:79:4f:65:ca:3f:38:e1:14:1d:62:ef:55:
                    4a:d5:96:7f:cf:d1:54:0f:dc:88:28:61:6d:c5:77:
                    69:69:36:b3:95:2b:b7:c9:e5:11:ca:7e:c3:0c:c6:
                    eb:42:85:f5:1d:6c:30:32:64:10:50:bc:99:25:42:
                    d7:36:48:85:91:21:3b:35:01:a5:46:42:1c:e4:e3:
                    75:4e:e6:0a:cd:d8:13:02:1f:3e:4d:3e:85:a3:1e:
                    39:c9:9e:29:7a:38:96:1c:2a:28:0b:fb:de:c6:44:
                    10:2f:64:49:ee:46:c4:ed:16:bd:62:01:c3:fa:66:
                    33:21:5d:1b:33:46:c3:09:ac:04:e8:3c:40:b2:ca:
                    19:46:54:69:c9:4c:e1:02:7f:b4:72:eb:a3:9f:7d:
                    27:90:5a:79:e0:64:6e:fc:2a:fe:8b:02:53:36:3d:
                    d4:d5:aa:0f:f7:d9:48:fb:99:bb:48:27:8c:e9:f8:
                    36:8c:ac:51:8a:cc:86:f0:0c:0f:ee:03:26:b7:5b:
                    21:a5:41:fc:74:8b:f3:f3:4e:f5:29:78:8e:32:c4:
                    71:64:aa:2a:4a:69:0f:c6:b4:c6:58:bb:bd:91:f6:
                    01:72:50:79:ad:f3:1f:48:9b:59:bd:52:df:3f:89:
                    6d:60:62:76:69:39:f9:d2:71:d3:6d:b9:4a:87:7e:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:62:7C:C5:FA:8D:81:DE:49:A9:1C:98:5E:8C:14:90:BF:93:04:5B
            X509v3 Authority Key Identifier:
                keyid:B1:5D:E8:A3:96:43:F9:E3:85:2D:E2:E7:15:3C:75:CA:AA:40:1A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/323830343a316332633a313030303a3a2f33362d3336203d3e20323632383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c2c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         37:36:2f:88:17:be:4e:f5:f9:37:cf:b4:5c:47:63:d3:78:61:
         34:0e:0e:8a:99:90:3e:28:04:73:a6:c0:10:8f:6a:69:48:94:
         e3:0a:1c:7e:0a:b9:99:23:1c:34:de:53:49:3e:e8:d2:5a:61:
         84:de:4a:21:d5:1d:fa:9e:03:a7:d6:a9:b0:97:a7:f6:ae:12:
         53:89:4d:f5:77:8d:a1:81:52:3a:46:23:e3:64:02:f3:39:e8:
         94:7d:a5:d7:b0:0d:1f:53:cd:b0:06:58:ed:2d:c4:08:d2:de:
         be:0a:83:fa:a3:dd:35:db:3a:56:f9:14:43:0d:83:39:c8:9d:
         a0:b3:36:09:f9:62:a9:73:05:86:d6:59:17:2b:f6:9f:9a:4d:
         10:40:43:97:8e:f6:c1:6d:66:e1:18:44:7a:38:02:34:0e:2a:
         38:ec:fc:12:70:c4:5b:3c:04:21:ed:95:82:54:2c:4e:c7:86:
         6e:ab:b1:aa:72:7f:a4:1d:2b:56:73:61:e0:5e:19:2b:3b:95:
         87:52:7f:be:d2:b8:6e:d3:5f:36:cc:f3:49:94:bd:94:03:70:
         ee:f8:da:cb:f5:7c:21:c9:5c:8c:df:aa:e7:77:7e:03:33:ad:
         b6:87:86:d6:68:41:62:78:37:c8:a4:8c:86:63:0e:3b:94:e0:
         02:86:7d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:46:44 2025 by rpki-client