Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33322d313238203d3e203631373736.roa
File:                     323830343a313932633a3a2f33322d313238203d3e203631373736.roa (raw, json)
Hash identifier:          QPWRcKQym1PftNG247X1XgQcXW/1lEFotQUKZC0irFM=
Subject key identifier:   08:81:B4:FD:C8:EA:0E:3A:30:14:89:E2:BD:F2:41:27:F8:34:7F:3E
Certificate issuer:       /CN=84ACF88ACA346C7A6B6E07F73752AA4425C83727
Certificate serial:       5D625020195E76DCAEC597B275F550903508143C
Authority key identifier: 84:AC:F8:8A:CA:34:6C:7A:6B:6E:07:F7:37:52:AA:44:25:C8:37:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84ACF88ACA346C7A6B6E07F73752AA4425C83727.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33322d313238203d3e203631373736.roa
Signing time:             Fri 18 Jul 2025 18:05:58 +0000
ROA not before:           Fri 18 Jul 2025 18:00:58 +0000
ROA not after:            Fri 17 Jul 2026 18:05:58 +0000
asID:                     61776
IP address blocks:        2804:192c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/84ACF88ACA346C7A6B6E07F73752AA4425C83727.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/84ACF88ACA346C7A6B6E07F73752AA4425C83727.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84ACF88ACA346C7A6B6E07F73752AA4425C83727.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 09:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:62:50:20:19:5e:76:dc:ae:c5:97:b2:75:f5:50:90:35:08:14:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ACF88ACA346C7A6B6E07F73752AA4425C83727
        Validity
            Not Before: Jul 18 18:00:58 2025 GMT
            Not After : Jul 17 18:05:58 2026 GMT
        Subject: CN=0881B4FDC8EA0E3A301489E2BDF24127F8347F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:7f:a6:a6:7a:16:90:4c:35:05:c6:ac:14:
                    98:b5:ff:6b:3a:7f:cb:f4:99:39:71:37:15:c5:6b:
                    44:97:39:5c:c8:95:30:2e:9c:f9:e2:3f:58:aa:dd:
                    f5:21:5b:ed:c2:50:f9:c7:d7:57:04:a4:30:13:37:
                    e5:ea:cd:4b:98:b8:97:2e:2c:65:b4:97:3c:93:c4:
                    ef:d7:73:19:a5:7c:7e:46:35:73:fc:06:43:f0:a9:
                    0c:b3:a1:2c:5e:8b:cd:c2:b9:ef:b6:ae:df:13:23:
                    32:15:34:bd:51:76:86:62:62:9f:39:17:0a:d8:0c:
                    be:cf:27:56:05:33:bc:6e:66:b7:c3:a0:74:e7:b2:
                    63:3b:74:82:95:06:5e:25:f9:7f:a7:69:02:a2:57:
                    fd:4a:49:82:96:1b:f0:a2:0c:2c:9c:b0:b3:2e:d1:
                    f3:ba:30:f6:19:b3:92:b6:97:4c:24:47:65:7b:68:
                    6d:89:cb:69:70:cc:b2:96:43:ea:fd:12:f7:67:fe:
                    0d:b9:a7:67:dc:0a:89:49:a3:d8:38:59:16:af:93:
                    5d:9a:f3:22:05:8c:dd:9d:2b:0f:eb:50:4f:d3:fc:
                    60:51:58:94:79:0f:2b:4b:7f:56:b5:7e:d2:62:ef:
                    a7:f6:8b:23:33:18:3c:9f:31:f2:d4:92:35:f6:e9:
                    d2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:81:B4:FD:C8:EA:0E:3A:30:14:89:E2:BD:F2:41:27:F8:34:7F:3E
            X509v3 Authority Key Identifier:
                keyid:84:AC:F8:8A:CA:34:6C:7A:6B:6E:07:F7:37:52:AA:44:25:C8:37:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/84ACF88ACA346C7A6B6E07F73752AA4425C83727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84ACF88ACA346C7A6B6E07F73752AA4425C83727.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33322d313238203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:f4:27:01:ff:89:4e:ab:8b:a5:aa:5e:97:03:2a:13:60:2f:
         14:ef:ac:89:bb:bf:d5:0d:84:a4:43:66:91:5e:3c:45:5f:cb:
         4f:37:df:70:d3:b7:a1:f3:83:88:52:9c:d6:8e:e8:f5:c1:52:
         04:01:82:35:15:46:e4:59:09:d4:b2:7c:2f:8a:15:c4:f8:29:
         e9:cd:d1:fd:d4:ae:ec:fb:5b:c0:0a:7b:31:47:7c:c4:03:0f:
         eb:02:be:1c:f1:99:2c:bc:a7:66:a3:d3:0a:dd:e5:e8:18:0c:
         79:54:f8:fa:7e:1f:61:1a:fa:57:f2:ec:05:81:07:bd:8b:85:
         17:2c:c7:66:87:e1:ad:0f:75:39:ec:07:c3:a4:99:3d:4c:3a:
         c3:92:72:03:3f:27:cc:5c:7b:d7:36:22:69:38:6b:51:47:58:
         93:73:37:04:ea:ed:6b:04:5d:60:87:d2:24:43:89:57:53:e7:
         18:b2:c1:cf:14:ae:44:a5:cd:8e:58:13:ba:0b:32:0f:f2:4b:
         49:5a:32:f2:0f:6d:76:1f:7a:4a:8c:60:34:f1:05:77:3f:a8:
         17:e1:76:bb:8b:18:8b:88:90:2f:b9:9a:2e:c9:96:5e:d7:48:
         8a:39:da:0f:5a:a0:73:7a:5b:99:99:2b:33:df:fe:c0:32:5b:
         78:dc:72:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:00:40 2025 by rpki-client