Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/323830343a316231343a3a2f33322d3438203d3e203631373037.roa
File:                     323830343a316231343a3a2f33322d3438203d3e203631373037.roa (raw, json)
Hash identifier:          LABgvs3To76p6t0Os0aBz5fBQZ70vLFOC+8NomirfIM=
Subject key identifier:   90:1C:18:C8:1C:1E:F2:2D:2D:78:C0:D0:1C:5B:AC:35:A9:71:7A:43
Certificate issuer:       /CN=7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759
Certificate serial:       77CB32F4F5EB07F62FCC284865DB38D01F6BB7BB
Authority key identifier: 77:42:14:3B:D1:4B:1F:B2:C8:2A:2C:E2:FD:5A:FA:E2:8B:CC:87:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/323830343a316231343a3a2f33322d3438203d3e203631373037.roa
Signing time:             Fri 18 Jul 2025 16:40:33 +0000
ROA not before:           Fri 18 Jul 2025 16:35:33 +0000
ROA not after:            Fri 17 Jul 2026 16:40:33 +0000
asID:                     61707
IP address blocks:        2804:1b14::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.crl
                          rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 12:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cb:32:f4:f5:eb:07:f6:2f:cc:28:48:65:db:38:d0:1f:6b:b7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759
        Validity
            Not Before: Jul 18 16:35:33 2025 GMT
            Not After : Jul 17 16:40:33 2026 GMT
        Subject: CN=901C18C81C1EF22D2D78C0D01C5BAC35A9717A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:82:98:70:57:75:76:17:c9:76:17:aa:e0:
                    9f:2c:52:f7:46:99:61:13:e1:14:89:37:d6:44:a3:
                    3a:7c:61:db:6e:87:43:8d:9d:d6:1c:a5:1a:84:07:
                    91:99:b4:56:b6:5f:c1:c0:55:a6:67:b0:9b:b1:d9:
                    f6:57:46:bb:a2:4f:7e:3d:01:f9:cc:2d:d6:4a:a5:
                    59:cc:dd:b3:98:80:c0:08:fc:66:e6:5d:40:b4:0e:
                    77:ec:77:06:42:60:52:58:9e:7b:5d:03:14:56:30:
                    18:5d:7f:a4:b1:76:35:65:b8:12:a7:f6:31:d4:54:
                    41:4b:0a:5a:39:95:67:1c:3e:cf:89:4a:18:c7:d1:
                    ef:78:ad:2b:63:e2:4f:89:bd:e8:d2:c5:00:91:98:
                    19:22:5e:61:e4:3d:6a:82:f4:21:ed:c8:06:52:8a:
                    2f:61:68:a6:df:4e:f9:5c:e5:2f:bc:c2:4f:a9:15:
                    35:61:58:ef:b4:7a:b6:e1:cf:e3:c7:31:57:ee:6f:
                    f4:a8:da:94:cc:ab:39:ed:b5:8f:f6:ad:cb:e4:69:
                    2e:76:f4:7f:a3:80:b4:9a:60:b5:5b:03:80:df:50:
                    10:39:fd:18:5d:93:9b:90:9c:82:a4:c8:df:5d:41:
                    17:dc:cc:a1:ff:fe:8f:5f:28:15:16:3b:06:a0:e8:
                    8d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1C:18:C8:1C:1E:F2:2D:2D:78:C0:D0:1C:5B:AC:35:A9:71:7A:43
            X509v3 Authority Key Identifier:
                keyid:77:42:14:3B:D1:4B:1F:B2:C8:2A:2C:E2:FD:5A:FA:E2:8B:CC:87:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/323830343a316231343a3a2f33322d3438203d3e203631373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b14::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:84:43:c7:5e:c9:94:e4:1e:2d:2c:27:d6:20:d2:68:91:27:
         9d:7b:67:c4:a4:6f:eb:9d:58:cc:9b:c3:7d:94:a3:c8:8f:b4:
         a0:68:92:26:fb:e7:cb:d8:e3:c1:9b:9f:08:bd:fd:3d:ec:82:
         ac:f0:00:fd:07:82:37:34:dd:26:25:60:b5:ae:13:3c:13:89:
         32:e8:b6:7f:17:87:e7:0b:be:32:0c:fb:32:31:71:14:f0:b2:
         05:52:21:a6:86:a7:96:54:2c:62:10:37:fb:01:7a:b8:d0:1b:
         4b:80:ce:74:3d:8d:bf:f3:ce:72:01:54:71:8e:b1:ea:cb:71:
         63:00:1a:d4:c2:58:3f:d3:5d:ea:a4:a5:4d:61:f1:3c:f1:4f:
         e2:a7:81:cd:3e:aa:b3:1b:b2:d2:3a:e3:5a:3d:09:73:38:84:
         7b:20:8b:04:19:7a:e8:87:1f:3d:a2:4c:fe:82:e1:d5:f2:23:
         53:f9:df:3e:08:bf:67:2c:e6:b9:d6:8a:55:5a:08:39:b4:ba:
         bf:49:4a:4c:32:bb:1b:0e:ae:b8:35:13:74:3d:7e:ce:de:f4:
         bd:fb:81:29:f3:8f:97:91:83:3d:a1:d2:f2:83:97:4e:21:16:
         ee:04:a4:ce:ea:f9:91:58:f6:35:71:4d:e7:20:d9:a7:8f:78:
         05:48:ec:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:42:18 2025 by rpki-client