Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a323030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a323030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          C/8ZF2h4nWwRIsxYjXoYxs7nzti5gf3Wo4mBDYlt6h0=
Subject key identifier:   27:D2:CB:E4:AB:A9:71:FE:1F:14:4E:EB:CA:51:D2:09:82:01:F5:DF
Certificate issuer:       /CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
Certificate serial:       7C8C2CFD772FCC35950FB280DBDBD201410B8956
Authority key identifier: F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a323030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 18 Jul 2025 20:53:45 +0000
ROA not before:           Fri 18 Jul 2025 20:48:45 +0000
ROA not after:            Fri 17 Jul 2026 20:53:45 +0000
asID:                     268296
IP address blocks:        2804:4efc:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 11:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8c:2c:fd:77:2f:cc:35:95:0f:b2:80:db:db:d2:01:41:0b:89:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
        Validity
            Not Before: Jul 18 20:48:45 2025 GMT
            Not After : Jul 17 20:53:45 2026 GMT
        Subject: CN=27D2CBE4ABA971FE1F144EEBCA51D2098201F5DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bf:96:3f:88:f8:03:69:1f:96:a7:20:93:0e:
                    01:59:56:1d:9d:19:51:b3:80:2c:61:89:74:2a:fb:
                    39:0b:57:10:95:e8:71:79:6e:5c:6f:e3:0f:c7:78:
                    e2:d6:5a:f3:47:e6:25:ea:1d:41:a1:0b:27:77:5b:
                    40:59:f3:53:19:f3:42:3f:bf:eb:49:22:b7:b9:a2:
                    b4:46:80:02:68:dc:81:67:bf:72:25:08:78:b1:20:
                    1d:c9:a0:b5:85:9c:36:b1:b2:14:d6:bb:ab:02:3e:
                    63:40:31:18:ca:9a:eb:4f:ba:f9:ef:34:c8:f2:10:
                    66:43:2d:32:ad:3a:06:72:08:8a:d0:31:30:39:de:
                    5d:6d:5c:8c:59:07:05:bb:e1:7b:2f:54:6a:57:82:
                    43:b5:d8:fe:44:c8:a6:db:82:21:eb:fe:b5:79:a5:
                    34:a3:0e:7c:65:a1:72:dc:cb:2d:e1:2f:aa:15:54:
                    08:19:0b:03:b9:1f:a8:80:63:54:17:c1:41:3f:15:
                    d1:20:28:a3:03:53:67:b1:e2:94:00:32:da:9e:8e:
                    aa:9a:4a:86:0a:5f:47:32:73:19:c7:ff:47:c2:a3:
                    37:e5:fd:b1:a9:32:aa:5c:04:c8:81:9d:1b:78:b2:
                    7f:93:67:51:ad:51:45:13:9c:02:02:fd:fc:cc:37:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D2:CB:E4:AB:A9:71:FE:1F:14:4E:EB:CA:51:D2:09:82:01:F5:DF
            X509v3 Authority Key Identifier:
                keyid:F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a323030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:1e:3b:13:23:5a:78:f1:3c:78:66:04:88:04:ac:98:69:f3:
         f7:c2:22:8e:e6:be:7d:8e:90:e3:74:a7:80:df:cb:da:83:d4:
         c9:fe:c7:49:49:0d:28:b7:0a:4f:33:82:4f:46:af:aa:57:cd:
         2c:62:28:eb:0d:d1:96:84:e4:de:9d:19:75:38:3d:02:96:32:
         69:e1:04:97:b7:93:64:dd:b9:03:04:55:f7:a3:86:1c:e2:ef:
         a0:05:78:f9:29:8e:28:38:b5:0b:2f:80:0a:3e:b9:30:20:e5:
         ad:04:20:0c:2a:45:31:69:bd:f0:1d:d5:51:1c:28:33:2a:98:
         67:72:69:7e:9c:fb:57:51:05:75:32:7c:19:10:7f:50:3a:bc:
         41:5f:0d:16:af:a8:78:42:50:9b:7d:20:49:b6:47:9b:96:5f:
         1e:ad:62:22:15:95:af:c4:92:0f:84:45:83:20:b1:aa:00:a4:
         a5:8e:12:fb:ab:ba:46:51:bc:1b:c5:13:5b:5b:b0:dc:0e:d3:
         87:0a:85:d2:ef:84:70:3a:b2:af:67:25:df:e9:ab:d3:13:1e:
         f0:03:39:ce:f0:ac:82:d7:63:13:33:67:5d:cf:9f:94:2e:8f:
         07:8d:04:88:e6:d6:ab:51:1c:39:6d:b8:0c:f0:c6:47:02:41:
         9c:c0:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:48:35 2025 by rpki-client