Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          9oqaP57pVhE5BKa6cXvTShy8DDR+PAxIB36z51b+fKg=
Subject key identifier:   A6:BE:BA:56:5D:A9:70:55:FB:B9:72:9D:DB:9A:E2:9C:E4:FB:70:FD
Certificate issuer:       /CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
Certificate serial:       2FC8E22F2A85F3EC33B40A07551E2997B8F498BC
Authority key identifier: F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 18 Jul 2025 20:53:46 +0000
ROA not before:           Fri 18 Jul 2025 20:48:46 +0000
ROA not after:            Fri 17 Jul 2026 20:53:46 +0000
asID:                     268296
IP address blocks:        2804:4efc:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c8:e2:2f:2a:85:f3:ec:33:b4:0a:07:55:1e:29:97:b8:f4:98:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
        Validity
            Not Before: Jul 18 20:48:46 2025 GMT
            Not After : Jul 17 20:53:46 2026 GMT
        Subject: CN=A6BEBA565DA97055FBB9729DDB9AE29CE4FB70FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1c:39:c2:c0:d6:b7:a5:b4:50:23:65:ef:7d:
                    70:e5:e0:7a:fd:3b:b4:df:ee:9d:48:6c:58:fc:87:
                    d7:13:53:01:dd:b8:21:74:74:c4:50:a5:3e:97:00:
                    7b:b6:f8:a7:74:4e:7f:e2:b8:03:14:98:e4:6a:e5:
                    fb:8a:6a:8d:6b:e9:71:8a:b3:88:a7:cb:a9:50:a8:
                    aa:70:61:e6:1f:65:32:61:c4:71:24:71:f7:9d:da:
                    53:0c:96:1e:81:55:4d:3d:62:58:82:a5:aa:48:30:
                    ce:35:aa:a1:a8:f4:35:a6:99:8c:4d:22:04:91:82:
                    a8:fa:aa:09:01:be:01:88:ac:ad:ac:e8:73:c4:65:
                    59:2e:d6:e2:01:d6:5f:6b:31:fa:f1:83:c6:ac:6f:
                    2e:0c:9b:6a:26:13:0c:00:f0:72:71:25:02:ba:99:
                    4e:37:ae:e1:81:15:5e:26:11:81:7d:e7:54:98:3d:
                    bf:a0:fb:84:1d:dc:7d:d1:dc:b0:db:c6:25:5a:8a:
                    80:28:fb:6d:26:ed:a4:0a:4f:85:83:46:f7:c8:d9:
                    74:c2:12:aa:8b:ab:93:8f:e2:d0:96:21:08:09:7c:
                    f0:d5:62:ac:83:6d:35:95:f0:11:63:29:fc:36:c0:
                    10:66:fa:f3:91:15:4b:b6:5b:b0:4a:19:5a:2a:5e:
                    a9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BE:BA:56:5D:A9:70:55:FB:B9:72:9D:DB:9A:E2:9C:E4:FB:70:FD
            X509v3 Authority Key Identifier:
                keyid:F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c3:93:1a:2d:dc:99:c3:64:6c:c2:9d:95:4a:fc:d2:2b:ac:49:
         5a:b1:20:62:da:b0:e2:5d:bf:e6:1e:62:7e:20:ec:43:d1:95:
         dc:e5:7b:44:1a:1b:d8:b7:63:39:9a:b0:e3:b6:05:f1:93:a2:
         f5:c4:8c:64:d4:16:71:80:5f:e9:60:3c:1d:db:02:4a:5f:b0:
         91:08:df:51:fb:ab:f4:ac:3f:fe:7a:9f:5f:16:40:03:72:74:
         f7:a0:b6:5d:18:c5:d5:f7:23:19:0f:9c:f3:2d:4b:58:e7:68:
         a3:c5:a3:a5:41:c3:95:d4:b5:ed:9f:8b:a7:49:47:41:7a:bf:
         c6:b7:c2:09:b4:77:76:6b:67:57:12:52:27:33:d9:51:19:95:
         74:86:aa:4c:e2:dc:db:c6:c4:53:88:0d:bc:54:8e:4b:22:df:
         59:a5:af:a1:07:d7:27:69:f8:6e:f6:c4:19:36:d7:31:1f:90:
         aa:23:19:35:cb:92:64:00:10:35:7c:9b:af:92:4f:c4:2b:da:
         d8:6f:8b:59:91:01:f2:5f:2e:95:75:11:b8:a7:9c:f6:10:9e:
         a7:76:b4:f4:49:80:2c:fc:2d:ff:a3:f5:5d:15:5f:b4:fa:c8:
         1e:f0:b5:e7:49:f0:3e:05:3e:2f:e2:66:67:06:58:1f:da:17:
         07:34:be:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:45:14 2025 by rpki-client