Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/323830343a343031303a3130303a3a2f34382d3438203d3e20323635393331.roa
File:                     323830343a343031303a3130303a3a2f34382d3438203d3e20323635393331.roa (raw, json)
Hash identifier:          KUlmUfuaHGFUK45C9YlCdquA/kBp+XBkelmFUlSd3OY=
Subject key identifier:   9E:C5:F1:93:5F:9A:5F:B1:E6:F8:0E:EC:C1:8D:22:99:AC:B4:5A:7E
Certificate issuer:       /CN=9286252C75F02440D7307A4D8DAD99CDC7A76982
Certificate serial:       206AF8230B1D43FCEDD3F1970D0533E1E919D5CC
Authority key identifier: 92:86:25:2C:75:F0:24:40:D7:30:7A:4D:8D:AD:99:CD:C7:A7:69:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/323830343a343031303a3130303a3a2f34382d3438203d3e20323635393331.roa
Signing time:             Thu 24 Jul 2025 16:09:07 +0000
ROA not before:           Thu 24 Jul 2025 16:04:07 +0000
ROA not after:            Thu 23 Jul 2026 16:09:07 +0000
asID:                     265931
IP address blocks:        2804:4010:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.crl
                          rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6a:f8:23:0b:1d:43:fc:ed:d3:f1:97:0d:05:33:e1:e9:19:d5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9286252C75F02440D7307A4D8DAD99CDC7A76982
        Validity
            Not Before: Jul 24 16:04:07 2025 GMT
            Not After : Jul 23 16:09:07 2026 GMT
        Subject: CN=9EC5F1935F9A5FB1E6F80EECC18D2299ACB45A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cc:36:bb:0b:83:32:8c:fd:58:7f:55:f8:91:
                    03:42:2a:68:39:15:84:80:94:50:d9:65:d7:e0:3a:
                    5c:3a:51:99:5f:1b:f6:72:03:ae:58:96:31:19:2b:
                    2b:ee:7d:e5:a4:d0:38:19:b1:b9:cf:ee:7d:48:6a:
                    7a:d3:44:20:c3:1b:52:22:03:ef:db:02:ea:04:66:
                    ce:ad:28:ab:df:f6:6f:4c:34:7b:91:04:c3:87:53:
                    54:fe:3e:25:d7:7c:a1:cf:2e:85:e4:db:c9:1d:3c:
                    d6:ea:09:bf:e9:ad:24:7e:5b:73:51:1a:b4:8a:f0:
                    31:06:41:07:64:d9:2a:6b:f6:87:7f:25:6c:88:29:
                    65:41:9e:02:9b:20:83:f5:d0:27:b5:56:87:1e:40:
                    da:6e:be:10:4c:64:8a:05:6a:e5:ea:a3:64:c6:30:
                    e5:cf:f3:4d:8b:07:46:bb:cf:ec:da:06:d9:7e:48:
                    2b:22:41:a6:3c:28:b9:d0:9b:1b:15:dc:8e:57:68:
                    f6:51:dc:ca:3c:f0:8b:50:3d:2a:8f:34:87:90:8e:
                    63:77:26:af:f7:58:cb:5e:ca:88:d8:9f:30:d4:c7:
                    03:72:d9:dc:fd:2d:ad:ec:ad:1e:b3:5a:c8:89:7d:
                    80:07:df:0b:7a:c4:d8:be:c3:10:85:fa:01:d3:2d:
                    94:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:F1:93:5F:9A:5F:B1:E6:F8:0E:EC:C1:8D:22:99:AC:B4:5A:7E
            X509v3 Authority Key Identifier:
                keyid:92:86:25:2C:75:F0:24:40:D7:30:7A:4D:8D:AD:99:CD:C7:A7:69:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/323830343a343031303a3130303a3a2f34382d3438203d3e20323635393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4010:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:bd:9b:c6:a9:2c:9b:ff:e9:81:c7:19:d3:2b:8c:e6:c4:e2:
         bb:40:62:00:7a:de:06:ee:65:1b:61:bb:83:8d:2d:14:64:26:
         7f:f0:d5:de:f8:e3:74:6a:16:2f:84:39:4e:d6:11:a1:b7:e9:
         af:aa:bf:4b:1b:6b:71:7e:22:1e:d6:b1:1f:77:73:88:51:b2:
         0c:56:34:df:d4:d7:ca:bd:b2:22:78:d1:1e:64:1c:67:a9:f6:
         1a:9c:d0:ad:4c:4a:28:f5:de:82:58:0a:6f:98:54:8c:f1:86:
         df:15:a6:8c:e5:98:94:c3:9c:77:cb:db:28:b5:35:cd:11:a2:
         cf:09:b4:01:e9:33:e2:22:da:05:c4:73:99:3d:70:a2:72:0c:
         21:d5:1d:92:62:52:3e:6b:b6:64:92:ad:e1:4d:47:35:48:7e:
         b1:77:77:51:c4:27:84:40:1a:fa:5d:f3:f8:58:61:be:8b:f5:
         65:de:04:a9:5a:e5:a5:90:02:45:cf:31:8d:90:ea:f3:38:ac:
         2a:f8:69:be:4a:b0:80:d3:ee:3b:cc:b3:a6:bd:4a:30:69:8f:
         74:2a:15:19:c9:7e:44:ee:dd:a8:ab:ff:f5:84:c9:2e:98:eb:
         24:86:65:75:dd:98:b6:32:43:58:d5:ef:07:2d:7a:c0:7a:d2:
         1c:e1:42:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:51:17 2025 by rpki-client