Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33332d3333203d3e20323638323936.roa
File:                     323830343a346566633a3a2f33332d3333203d3e20323638323936.roa (raw, json)
Hash identifier:          9NdWmTnwlNCTPTC4JZUcAcKexKTGDVkfs4vL+GwgJ1k=
Subject key identifier:   FE:A0:26:40:25:84:4F:4D:FE:56:BB:91:4B:00:4E:C4:2C:95:B2:35
Certificate issuer:       /CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
Certificate serial:       3B54FDFAB6F2EC1084226E80B95153148B78F971
Authority key identifier: F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33332d3333203d3e20323638323936.roa
Signing time:             Fri 18 Jul 2025 20:53:44 +0000
ROA not before:           Fri 18 Jul 2025 20:48:44 +0000
ROA not after:            Fri 17 Jul 2026 20:53:44 +0000
asID:                     268296
IP address blocks:        2804:4efc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 11:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:54:fd:fa:b6:f2:ec:10:84:22:6e:80:b9:51:53:14:8b:78:f9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
        Validity
            Not Before: Jul 18 20:48:44 2025 GMT
            Not After : Jul 17 20:53:44 2026 GMT
        Subject: CN=FEA0264025844F4DFE56BB914B004EC42C95B235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:bc:55:c7:9a:27:aa:b5:7c:0b:28:43:b4:
                    fe:f6:18:6f:bb:ab:6e:53:7d:8a:74:3c:ab:49:d7:
                    1b:2b:70:f0:c2:6a:32:79:8f:7f:d3:7f:d7:f6:e6:
                    42:c6:af:9a:23:be:33:35:a8:ef:5b:36:cb:b8:e3:
                    a2:e7:a7:bc:b1:66:e7:2c:af:6c:69:64:f1:a6:cf:
                    d5:8c:cf:c9:f6:00:7d:83:7c:b4:e5:9b:49:fc:01:
                    34:a8:b1:07:e4:6c:36:f5:84:19:19:31:4b:d7:1f:
                    f9:77:e4:27:a4:af:11:72:b5:03:79:6c:78:ec:c1:
                    c4:f9:e8:07:18:d2:68:32:e6:a7:ab:9d:37:56:a4:
                    62:22:f7:38:6d:c3:f6:01:7d:ee:0b:fc:12:77:14:
                    8d:6b:2b:b4:8c:74:e7:4d:33:00:b9:e3:d1:b0:57:
                    21:a4:b6:88:01:02:c3:17:7c:82:5a:72:0a:06:15:
                    f8:18:c0:ea:2a:7b:fc:13:c8:5c:2e:3b:fb:c9:13:
                    7a:7a:87:47:29:1e:f3:05:c0:19:83:69:6f:ea:bc:
                    73:40:c1:5c:01:3c:48:21:ef:0d:34:ce:a6:d4:32:
                    7b:7f:e0:4a:37:cf:ba:d3:50:97:1e:78:32:e5:90:
                    00:a6:09:cb:c3:9d:bc:a1:b2:5d:dc:0e:ac:ba:fe:
                    43:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A0:26:40:25:84:4F:4D:FE:56:BB:91:4B:00:4E:C4:2C:95:B2:35
            X509v3 Authority Key Identifier:
                keyid:F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33332d3333203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc::/33

    Signature Algorithm: sha256WithRSAEncryption
         8d:9f:3b:eb:77:a8:f7:64:37:ea:06:b8:24:0a:25:59:85:08:
         49:27:55:a7:c7:5b:3c:11:4b:06:1c:da:1b:ec:b4:c6:bf:90:
         49:da:e5:d0:7b:dd:03:ce:74:fc:69:11:8e:06:4d:dc:bc:26:
         91:ef:cc:5a:16:b7:55:93:1c:6b:10:b0:8b:63:52:b5:93:e9:
         3a:cc:50:35:f3:fb:6c:16:cb:30:95:6d:c0:52:e9:ff:7d:1a:
         30:32:bf:15:85:55:a9:58:55:36:48:8a:72:73:22:a9:5d:8b:
         92:f5:ed:da:02:e6:40:de:c8:bb:85:2f:dd:b0:da:9d:44:2d:
         b3:c8:00:5f:bf:e0:e2:c1:56:0f:4e:8a:a1:fc:4b:a7:b5:8f:
         f8:48:ee:f7:1d:51:b7:f2:5a:26:72:14:51:66:74:64:1c:40:
         d3:ac:89:97:e3:e9:7b:fb:1f:3c:59:72:f4:c4:ac:b2:d0:da:
         d6:c5:3a:c5:75:63:c6:f9:dc:bd:7d:be:af:cc:2b:65:1d:8e:
         b6:e4:fa:24:01:31:8b:78:2c:70:73:d2:e4:52:5b:18:fa:46:
         b8:88:42:92:7c:a9:d7:e7:2a:5a:2d:62:6f:c9:6b:ed:bd:03:
         cc:d1:05:1e:80:a5:29:76:81:e2:26:06:cb:ca:00:06:bd:7f:
         74:71:8e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:44:25 2025 by rpki-client