Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a3365383a3a2f33322d3438203d3e203238363633.roa
File:                     323830343a3365383a3a2f33322d3438203d3e203238363633.roa (raw, json)
Hash identifier:          NlE3ax6zq3yob4T7nBCRYsrcQGfMjecTHh2CWtNBrpA=
Subject key identifier:   97:2D:24:2C:7A:D3:69:96:C5:94:A4:16:FD:9E:FA:5A:AC:27:EB:28
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       4E41C631DECC9A118DB06CE5992CDF392B8530FD
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a3365383a3a2f33322d3438203d3e203238363633.roa
Signing time:             Wed 02 Jul 2025 13:43:23 +0000
ROA not before:           Wed 02 Jul 2025 13:38:23 +0000
ROA not after:            Wed 01 Jul 2026 13:43:23 +0000
asID:                     28663
IP address blocks:        2804:3e8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 13:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:41:c6:31:de:cc:9a:11:8d:b0:6c:e5:99:2c:df:39:2b:85:30:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Jul  2 13:38:23 2025 GMT
            Not After : Jul  1 13:43:23 2026 GMT
        Subject: CN=972D242C7AD36996C594A416FD9EFA5AAC27EB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:ff:33:42:b2:4c:54:e3:c4:52:a3:a3:fc:
                    3f:5b:08:be:35:3f:62:25:7e:f9:ec:20:1a:ab:1e:
                    a3:4d:e4:2d:5c:57:64:bd:64:3b:d2:29:1d:5f:0c:
                    8c:48:9a:be:97:29:16:41:71:2c:37:73:9d:a6:24:
                    73:02:f1:7d:aa:ff:92:5d:88:a1:80:1a:8c:f8:b0:
                    95:be:2b:2d:8a:89:c8:d8:93:0a:ff:3c:f2:b2:20:
                    93:c5:c6:6d:e0:0f:a2:05:bf:cf:3f:77:c9:ae:36:
                    c5:48:97:f8:e9:45:91:a9:92:7c:31:ad:1a:be:f7:
                    a8:9c:ad:a9:3d:51:1d:98:4e:f5:53:d6:86:a1:3b:
                    f6:81:a4:33:5d:c7:3b:52:56:87:a8:2d:6b:91:78:
                    af:e9:9d:e3:81:b0:88:f9:55:18:d7:4d:09:37:cc:
                    88:ee:41:c0:3d:90:3b:8f:cd:42:ee:a2:8f:5e:55:
                    82:fa:97:f4:63:84:7e:19:23:94:3a:11:f5:42:35:
                    8d:5e:49:d9:d7:c8:0c:6b:1f:44:27:bd:95:86:df:
                    01:48:70:ff:d3:b1:ca:0f:f4:58:cc:f6:79:3a:90:
                    61:a8:a2:4c:15:04:84:a8:6a:35:e3:cb:c3:55:cf:
                    01:8e:ec:8c:57:63:ce:d4:af:06:d8:e2:ce:18:d8:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2D:24:2C:7A:D3:69:96:C5:94:A4:16:FD:9E:FA:5A:AC:27:EB:28
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a3365383a3a2f33322d3438203d3e203238363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:c6:b2:65:d8:9c:f9:16:c1:9b:04:32:f7:29:5c:06:03:80:
         64:56:15:8c:1a:61:87:a1:b9:47:99:ad:8d:b4:d8:85:5b:dc:
         ff:ca:9b:d1:26:a8:2f:09:fd:94:66:ad:df:cc:29:0c:ba:04:
         c6:31:26:47:0f:5b:a2:35:cc:2e:a5:77:f7:bc:ee:36:35:27:
         c5:e3:04:22:e5:db:39:fd:81:09:14:c1:8b:83:6e:b5:c4:c4:
         cd:29:fe:23:a2:5c:20:06:b2:f4:fc:97:a2:b8:95:a8:0d:5b:
         45:88:60:4f:1c:65:d8:65:52:01:c4:a2:d6:33:ba:ab:29:c8:
         77:f5:02:0f:57:f1:f5:d0:f2:94:d0:e1:75:16:1c:09:d9:87:
         0b:50:77:03:30:9d:e2:60:3f:4d:1a:2e:5b:7b:04:a7:b8:1a:
         20:7a:89:bb:f2:5b:a1:2a:cb:2e:0e:f3:e2:bf:05:4c:b2:8b:
         cd:c8:03:1e:7b:ff:ab:12:36:39:1e:3f:6e:ce:02:4b:c3:76:
         b9:b9:7f:48:75:4c:48:f2:fa:51:68:ca:f4:83:71:93:34:11:
         f9:ca:bc:ef:23:01:5a:0a:fb:41:aa:30:44:75:a0:5f:10:36:
         1e:ef:8e:0a:7f:ba:ac:40:2a:9f:bf:b1:1a:a0:2e:d5:3c:1c:
         a5:89:a1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:56:31 2025 by rpki-client