Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d313238203d3e20323636303231.roa
File:                     323830343a333934303a3a2f33322d313238203d3e20323636303231.roa (raw, json)
Hash identifier:          V0OXYKPf6335Uur99UCJAzIV6XdkhuuASSKsIiSpxwc=
Subject key identifier:   C2:E1:28:00:71:BF:79:39:F6:AE:6A:ED:FB:6E:D2:F0:5F:C9:6D:96
Certificate issuer:       /CN=2FD431E4607C7159B13CB28EDF58E31ABA74325A
Certificate serial:       4EFE07A51AB0091C87EE8094E24C33AFE2A62FB0
Authority key identifier: 2F:D4:31:E4:60:7C:71:59:B1:3C:B2:8E:DF:58:E3:1A:BA:74:32:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FD431E4607C7159B13CB28EDF58E31ABA74325A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d313238203d3e20323636303231.roa
Signing time:             Sat 19 Jul 2025 21:07:29 +0000
ROA not before:           Sat 19 Jul 2025 21:02:29 +0000
ROA not after:            Sat 18 Jul 2026 21:07:29 +0000
asID:                     266021
IP address blocks:        2804:3940::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.crl
                          rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FD431E4607C7159B13CB28EDF58E31ABA74325A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 04:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fe:07:a5:1a:b0:09:1c:87:ee:80:94:e2:4c:33:af:e2:a6:2f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FD431E4607C7159B13CB28EDF58E31ABA74325A
        Validity
            Not Before: Jul 19 21:02:29 2025 GMT
            Not After : Jul 18 21:07:29 2026 GMT
        Subject: CN=C2E1280071BF7939F6AE6AEDFB6ED2F05FC96D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a8:4e:29:43:d3:cc:7e:2c:7c:63:a3:fa:3a:
                    7e:f2:12:1a:1d:cf:e7:1a:2d:76:bf:77:02:e8:8d:
                    5d:0a:41:83:80:f9:87:45:0b:39:5e:55:75:a8:c3:
                    7a:31:b9:45:e3:9f:57:e6:0a:64:34:2b:3d:35:d9:
                    5b:3c:b2:16:97:60:2c:cb:5e:54:38:2f:6c:6e:64:
                    9b:69:3d:06:b0:c9:9b:e6:73:5e:fe:25:a9:f3:ea:
                    a4:04:de:13:8d:43:02:75:9d:9b:62:f2:58:68:34:
                    c0:72:1c:d8:0c:b4:ec:a0:49:d2:4a:34:5c:41:2e:
                    a9:45:77:e6:94:7d:55:d1:22:9a:b4:4c:64:75:4f:
                    7b:15:3d:f3:e0:1f:bc:0e:88:fd:bb:9e:b2:1c:7e:
                    99:cf:84:73:bb:fb:60:14:8c:17:14:a3:b5:d7:7d:
                    1c:13:74:19:35:ee:de:2b:18:07:a6:e5:19:15:94:
                    2c:db:b0:06:03:c5:bd:13:d7:86:4f:c2:4e:02:e6:
                    8e:02:0f:c9:af:d0:d1:e0:43:aa:d4:ff:e0:01:99:
                    76:61:a7:b4:4d:da:32:e4:85:b2:c4:e3:15:a5:00:
                    f6:a7:43:78:7a:58:e6:9b:44:bb:05:c1:43:cd:b1:
                    a8:76:3c:fa:4e:16:3e:0e:3d:72:fb:41:4d:bb:6b:
                    2e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E1:28:00:71:BF:79:39:F6:AE:6A:ED:FB:6E:D2:F0:5F:C9:6D:96
            X509v3 Authority Key Identifier:
                keyid:2F:D4:31:E4:60:7C:71:59:B1:3C:B2:8E:DF:58:E3:1A:BA:74:32:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FD431E4607C7159B13CB28EDF58E31ABA74325A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d313238203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3940::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:77:9a:98:d4:2e:7a:15:2b:df:f9:be:2f:6a:36:a5:7d:00:
         dc:c3:08:bb:35:2c:a7:d2:51:c7:07:a0:e5:08:5d:98:68:be:
         43:90:d8:89:be:ce:61:fe:9f:ef:b1:a7:9a:38:5c:94:3b:61:
         3d:54:77:82:d0:1e:ab:04:82:f7:cb:c1:aa:ad:84:7c:1d:66:
         35:c2:87:53:9c:f0:f3:cd:54:66:26:af:c2:d9:df:8c:b9:e9:
         34:9f:1b:0f:ee:52:55:bf:e2:e4:cc:56:3c:0c:73:83:4c:29:
         17:f9:c4:48:b9:87:66:7b:93:b9:1d:a7:b5:78:09:5f:84:6b:
         24:69:18:8f:f5:9b:30:0f:37:6d:6b:e0:aa:ac:b0:ce:88:6e:
         34:94:37:00:bd:fb:6d:00:b9:8b:31:45:e6:5b:31:e7:f5:50:
         ea:5a:f6:15:70:0c:17:ce:7f:51:67:85:80:67:94:d6:25:bf:
         70:be:ca:52:d8:92:af:15:0c:5f:56:23:61:1f:36:b8:1f:92:
         89:67:16:69:bd:c4:7f:40:37:f5:cf:a5:d0:1f:36:f2:15:50:
         0a:a3:49:3b:e9:87:89:46:71:3c:63:16:86:72:5c:11:6d:03:
         9f:16:19:44:d0:35:a0:6a:e5:4f:de:b6:b2:bd:87:e2:f3:69:
         20:3e:1e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:50:11 2025 by rpki-client