Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a383030303a3a2f33362d3336203d3e203631363839.roa
File:                     323830343a316430343a383030303a3a2f33362d3336203d3e203631363839.roa (raw, json)
Hash identifier:          82mAvuloh9qSPMBujifoGa2S0i3aymF171XrLA5dUEQ=
Subject key identifier:   00:F4:D2:31:6B:18:AF:89:E5:AA:33:7C:8E:82:FA:7C:DA:E4:58:92
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       5E96A53D435D7C11A18BA98A5DD686CDAB010ECF
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a383030303a3a2f33362d3336203d3e203631363839.roa
Signing time:             Fri 25 Jul 2025 20:48:52 +0000
ROA not before:           Fri 25 Jul 2025 20:43:52 +0000
ROA not after:            Fri 24 Jul 2026 20:48:52 +0000
asID:                     61689
IP address blocks:        2804:1d04:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 22:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:96:a5:3d:43:5d:7c:11:a1:8b:a9:8a:5d:d6:86:cd:ab:01:0e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Jul 25 20:43:52 2025 GMT
            Not After : Jul 24 20:48:52 2026 GMT
        Subject: CN=00F4D2316B18AF89E5AA337C8E82FA7CDAE45892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:7e:57:7b:c8:7b:36:bc:1e:6d:34:3e:dc:
                    a4:2e:ac:db:34:88:ec:4d:19:ca:45:6f:15:3a:e2:
                    63:ac:9c:61:9e:f7:33:fc:0b:69:fe:ff:48:e4:52:
                    6e:8b:47:38:b8:c0:e2:4c:a5:a7:57:ad:ab:da:69:
                    34:e9:01:ad:9c:b9:d8:11:c9:a4:13:5a:9f:75:61:
                    0e:55:7c:27:5c:7c:9a:10:e4:1f:dc:0e:1a:93:2b:
                    1e:d8:ff:ca:26:00:61:b3:90:f3:c0:e2:13:b8:d8:
                    53:59:42:86:2d:76:1e:58:59:85:b5:23:36:b5:1d:
                    c0:c4:35:a2:4b:62:4f:3d:0e:b5:96:ad:62:75:68:
                    45:31:ca:b8:9f:83:53:8c:a3:36:7c:a3:40:e2:71:
                    23:ef:2a:c1:25:26:7c:39:6a:5e:ea:5f:b3:62:eb:
                    42:f9:38:dc:18:56:b4:43:40:17:31:9e:d5:b8:87:
                    bb:d6:75:2f:91:e0:b4:a1:3d:4e:9e:69:1c:3a:62:
                    bc:f5:67:b1:75:03:ed:d5:b6:eb:3c:03:3c:d9:f5:
                    1e:d5:c4:06:58:a7:f0:a3:45:aa:1f:0b:82:a1:13:
                    69:be:53:42:9b:49:d0:78:84:e1:e9:e8:0e:63:96:
                    14:b4:97:d9:90:d7:f4:48:3a:69:68:1f:0b:aa:51:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F4:D2:31:6B:18:AF:89:E5:AA:33:7C:8E:82:FA:7C:DA:E4:58:92
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a383030303a3a2f33362d3336203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d04:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2d:3f:4a:bd:e8:97:01:dc:ca:09:3f:63:e5:a4:fe:3d:65:6a:
         70:f8:6d:3b:39:c5:28:81:b3:91:95:5c:2a:0c:e6:58:49:3b:
         f4:9d:a5:c7:74:7e:01:b9:6c:92:1a:87:16:a7:5a:f4:b7:17:
         af:54:9a:67:ad:e7:fd:ef:43:a4:21:d0:d5:02:37:f5:bb:19:
         f8:7f:92:48:d0:2a:e1:ef:0f:f5:bc:bf:82:0b:4e:5a:fd:dc:
         4a:ce:15:e0:7d:db:2c:b3:c6:a7:8a:14:d5:20:d7:3d:cb:19:
         6a:d2:12:9f:21:ba:d4:40:31:0d:ad:34:64:ce:42:4d:62:cc:
         05:e2:2e:9c:f1:47:69:06:03:a6:0f:5a:58:08:2d:d5:a1:8e:
         62:df:9e:f5:07:49:3c:43:cf:90:17:41:fb:03:66:ef:bf:fd:
         64:d5:63:6d:98:bf:57:03:b2:4b:f0:9c:0a:a7:e2:04:e9:05:
         6e:ef:4f:48:b4:44:54:48:27:71:73:1b:a5:4a:e2:68:26:5c:
         82:b8:31:56:a2:a9:07:47:70:50:ee:44:d9:32:db:34:b2:8b:
         1f:04:ee:f7:03:3f:35:bc:92:6a:d9:c3:5d:fa:a2:f1:00:28:
         e4:a5:3c:ed:23:b6:bd:e2:20:9e:cd:6d:8a:03:3f:a1:e3:09:
         18:61:3e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:54:16 2025 by rpki-client