Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/323830343a373635343a3a2f33322d3332203d3e20323731313034.roa
File:                     323830343a373635343a3a2f33322d3332203d3e20323731313034.roa (raw, json)
Hash identifier:          EP7xcQrFnLPCk6PIQiPndDxiEde8w396//7n6srL/fw=
Subject key identifier:   5D:07:BE:F5:FA:6E:5E:05:0E:07:52:A4:BF:8E:71:0C:B3:08:FF:EF
Certificate issuer:       /CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
Certificate serial:       08C19F0C22BFA2C07B5D9449D1C979C054517F89
Authority key identifier: 25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/323830343a373635343a3a2f33322d3332203d3e20323731313034.roa
Signing time:             Wed 16 Jul 2025 14:39:58 +0000
ROA not before:           Wed 16 Jul 2025 14:34:58 +0000
ROA not after:            Wed 15 Jul 2026 14:39:58 +0000
asID:                     271104
IP address blocks:        2804:7654::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl
                          rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 22:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c1:9f:0c:22:bf:a2:c0:7b:5d:94:49:d1:c9:79:c0:54:51:7f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
        Validity
            Not Before: Jul 16 14:34:58 2025 GMT
            Not After : Jul 15 14:39:58 2026 GMT
        Subject: CN=5D07BEF5FA6E5E050E0752A4BF8E710CB308FFEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0f:e6:cc:8e:74:56:cd:3f:04:bf:0c:fa:70:
                    f6:55:fd:2d:99:d9:63:25:ce:8a:88:c3:cc:61:b8:
                    81:08:29:82:4c:53:3b:46:b6:50:7e:20:9f:1f:0c:
                    d6:2e:87:e1:37:12:2d:f3:9c:04:38:aa:1d:9c:76:
                    10:c7:a1:c0:59:1d:10:9b:cd:cc:ad:43:c7:6a:a0:
                    a6:72:eb:17:8c:a8:77:cc:79:0d:04:1c:82:88:32:
                    e8:34:cd:44:43:05:ed:57:e6:df:0b:26:4d:bd:1a:
                    2f:51:cc:4f:46:fb:36:bc:6c:31:4d:d1:68:c4:a3:
                    86:a4:38:d8:5c:19:fe:98:11:cf:a3:40:26:37:22:
                    8c:3f:f4:db:0e:f1:32:a4:1c:aa:7e:63:be:b4:fb:
                    f3:8d:12:d8:f0:23:66:b8:36:ec:69:fd:2c:26:ea:
                    71:5b:02:e6:f1:02:42:fc:53:9a:bd:bd:22:1c:36:
                    d3:fc:00:c6:66:30:fe:1b:45:77:fb:7f:f3:a8:e7:
                    80:b7:03:61:21:88:d4:02:22:84:bc:f7:ad:3c:f8:
                    cc:68:55:f3:66:ce:a6:d8:f4:11:e3:f3:30:22:40:
                    c6:24:2d:ca:7e:b2:d2:e9:57:76:a3:01:55:ed:1e:
                    a3:94:d6:7e:d3:1c:3d:f5:c7:47:5c:46:a9:4b:03:
                    99:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:07:BE:F5:FA:6E:5E:05:0E:07:52:A4:BF:8E:71:0C:B3:08:FF:EF
            X509v3 Authority Key Identifier:
                keyid:25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/323830343a373635343a3a2f33322d3332203d3e20323731313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7654::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:0b:5f:df:81:08:fa:dc:b2:01:0a:1f:07:dd:40:20:80:8d:
         9f:1b:8d:43:c7:97:4a:2c:84:a6:88:1d:7d:fd:cd:79:a5:33:
         82:79:42:2c:80:d8:9b:4d:b9:13:e1:04:24:a1:79:1b:ad:4a:
         7f:c9:17:ce:89:a0:e7:53:e4:05:90:eb:eb:96:56:d7:29:55:
         b4:ab:14:d9:65:d5:73:21:ca:ee:63:78:40:da:e5:5e:4b:74:
         cd:a9:14:09:bb:89:31:13:38:bc:01:70:23:8d:04:93:b7:69:
         ea:45:c0:2e:03:4e:18:d1:34:1a:c6:1c:6b:1b:95:8b:ea:d5:
         72:10:3e:07:98:83:11:41:3d:ed:00:f6:1d:af:2b:a2:fd:55:
         b1:62:c0:1c:80:bc:8b:f2:33:f3:34:16:55:c3:43:2e:4d:c4:
         14:44:c9:ba:fd:46:f8:bf:93:22:7d:c2:49:23:2a:77:7c:25:
         d1:cd:39:e0:5c:33:00:50:54:af:2e:b7:e7:c9:83:48:aa:a2:
         62:9f:d4:d6:72:82:27:f2:49:95:8d:cc:c1:a0:8b:3d:50:c9:
         a2:e8:82:45:98:11:79:21:60:08:b0:40:9d:1c:3e:f6:d6:f2:
         45:dc:1d:44:16:3a:e1:69:3a:0f:0f:ec:34:db:80:e7:9b:b7:
         37:cd:43:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:51:19 2025 by rpki-client