Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          9k2qqxuy4I9ljZCwrrVZiGDehx8H5qafRPigDxWwAMo=
Subject key identifier:   F1:91:D6:45:12:C1:52:BC:4E:D8:E2:A1:46:38:2B:4A:AA:DD:36:4B
Certificate issuer:       /CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
Certificate serial:       763E9791D1C0C1D96E23EE51F5BE95028526C353
Authority key identifier: F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 18 Jul 2025 20:53:44 +0000
ROA not before:           Fri 18 Jul 2025 20:48:44 +0000
ROA not after:            Fri 17 Jul 2026 20:53:44 +0000
asID:                     268296
IP address blocks:        2804:4efc:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 11:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3e:97:91:d1:c0:c1:d9:6e:23:ee:51:f5:be:95:02:85:26:c3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
        Validity
            Not Before: Jul 18 20:48:44 2025 GMT
            Not After : Jul 17 20:53:44 2026 GMT
        Subject: CN=F191D64512C152BC4ED8E2A146382B4AAADD364B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:bd:bb:84:7d:8f:12:84:3d:95:88:63:63:
                    fc:58:6f:5c:dd:af:8d:0e:4f:9e:5e:58:dd:b8:be:
                    74:6c:af:d4:69:64:12:23:54:82:0c:82:7d:13:77:
                    94:2d:35:7e:ce:2d:20:05:63:52:46:a7:ca:a2:90:
                    9d:d6:a6:87:02:41:6d:d3:e2:47:62:13:20:1c:e5:
                    b9:62:27:d5:03:c7:8d:c4:d4:73:3d:eb:69:19:ee:
                    fe:d9:8c:9d:c3:0f:2f:03:76:f1:dc:43:78:d0:17:
                    5c:38:d0:e7:a3:0f:65:20:82:12:83:c4:44:c5:7b:
                    81:a8:a2:9d:44:fd:b8:b3:17:9d:8d:97:a0:ca:c0:
                    ee:72:6f:d6:73:15:85:65:83:8a:28:e9:82:d4:cb:
                    34:45:aa:31:ad:d0:a2:42:78:b7:1b:29:12:39:01:
                    0b:50:01:87:d9:25:dc:3a:0b:e0:c8:30:a6:3f:8e:
                    fe:79:e1:2d:47:7b:97:8b:89:fb:6d:73:4b:6b:0f:
                    22:05:35:b4:cc:ed:79:e9:a3:e3:1c:d4:54:04:72:
                    f8:e9:d1:53:fd:8e:5b:2e:18:98:84:8a:66:eb:bf:
                    44:d6:ec:9c:a7:e5:92:5f:ed:82:6e:f0:25:84:ee:
                    c1:ec:d0:77:02:c4:08:7f:f6:86:3f:a3:be:39:e4:
                    49:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:91:D6:45:12:C1:52:BC:4E:D8:E2:A1:46:38:2B:4A:AA:DD:36:4B
            X509v3 Authority Key Identifier:
                keyid:F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         52:68:2d:51:46:e6:d3:e7:57:96:d1:f7:2b:eb:26:9d:57:ce:
         05:da:17:7c:10:cc:80:92:cc:f9:44:7b:60:bc:df:e4:ee:71:
         eb:93:8d:8d:47:09:b6:00:9a:f8:93:a2:bb:04:74:16:f0:eb:
         37:95:6c:9e:fd:30:55:4a:f2:dc:b0:1c:dd:50:13:9a:2f:c0:
         9c:b5:48:ff:f9:d8:5c:dc:e3:05:35:d1:cf:91:4f:fa:db:dd:
         17:79:4e:e9:f1:48:5a:e3:16:aa:67:a6:5a:ac:da:c4:c6:84:
         80:b6:a0:ad:8b:b3:4c:3d:2c:94:83:78:d7:2c:3e:e0:50:00:
         23:b2:04:a2:7f:63:46:ea:1f:20:09:a5:0d:ea:34:0f:f4:bc:
         de:0e:8d:ac:cd:11:5f:19:73:6f:c5:d7:a8:04:76:8c:3a:b5:
         42:bd:ff:4e:7a:e5:22:1d:ec:ea:22:55:7c:b3:d2:9d:f3:e0:
         bc:76:97:a3:3b:85:41:f5:e2:52:5d:a8:e1:4b:1d:c3:56:51:
         1a:04:24:f3:56:92:70:60:d4:8c:e8:70:d2:4b:b3:ca:02:a5:
         91:f9:81:ad:f2:4c:72:3e:2a:ea:d6:42:5f:e7:5d:d0:43:6b:
         d7:a0:73:da:b8:e0:71:e8:a3:72:39:12:58:61:f2:3b:ed:32:
         50:0f:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:46:25 2025 by rpki-client