Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a3a2f33322d3334203d3e20323635333438.roa
File:                     323830343a326537633a3a2f33322d3334203d3e20323635333438.roa (raw, json)
Hash identifier:          OjhB5NxhKccjHkii+gFHqizsX+xCS5HVUTUQ/NIzERs=
Subject key identifier:   12:B8:36:B7:D2:38:6A:05:A1:E0:49:70:5E:8A:5B:4E:78:5A:90:C4
Certificate issuer:       /CN=E967E72D29BE192905C03601053878C71BB621A0
Certificate serial:       7E24B097DA52F46A6E8112F088E0023BFCDD9483
Authority key identifier: E9:67:E7:2D:29:BE:19:29:05:C0:36:01:05:38:78:C7:1B:B6:21:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E967E72D29BE192905C03601053878C71BB621A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a3a2f33322d3334203d3e20323635333438.roa
Signing time:             Tue 22 Jul 2025 16:09:34 +0000
ROA not before:           Tue 22 Jul 2025 16:04:34 +0000
ROA not after:            Tue 21 Jul 2026 16:09:34 +0000
asID:                     265348
IP address blocks:        2804:2e7c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/E967E72D29BE192905C03601053878C71BB621A0.crl
                          rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/E967E72D29BE192905C03601053878C71BB621A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E967E72D29BE192905C03601053878C71BB621A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 12:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:24:b0:97:da:52:f4:6a:6e:81:12:f0:88:e0:02:3b:fc:dd:94:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E967E72D29BE192905C03601053878C71BB621A0
        Validity
            Not Before: Jul 22 16:04:34 2025 GMT
            Not After : Jul 21 16:09:34 2026 GMT
        Subject: CN=12B836B7D2386A05A1E049705E8A5B4E785A90C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:7c:a6:72:13:b3:9d:b8:26:4f:b1:d2:01:
                    3b:3b:da:44:ef:88:c3:f9:e3:26:5e:e9:97:6b:67:
                    33:fd:c7:61:0c:d2:a8:4b:a6:98:5a:0c:10:dd:c7:
                    c8:48:80:ec:fc:77:11:97:b0:15:63:af:97:20:59:
                    4b:e4:4f:07:81:ea:31:c0:ed:0f:bb:0c:0d:d0:b8:
                    67:b9:eb:19:ad:13:db:66:03:8d:2f:ce:ee:14:1a:
                    12:d9:5c:61:f1:72:7a:08:23:2d:d6:a0:ed:28:c6:
                    27:ac:0b:64:a1:3c:00:85:8c:95:4a:94:af:ae:81:
                    23:90:c7:0f:59:35:98:a5:4b:04:04:0a:81:e7:2e:
                    94:48:95:52:81:ee:d3:34:4c:2e:3e:1d:8c:7a:28:
                    f6:1f:88:cc:97:4a:de:39:ac:b7:ad:1a:6e:b0:35:
                    b4:95:7b:cb:10:a7:36:86:73:b7:41:8e:83:a2:bb:
                    5a:33:94:fd:d9:aa:86:00:b8:46:67:be:7e:79:7d:
                    20:57:b3:75:85:95:4e:10:ad:60:2f:e6:a7:6b:66:
                    e2:89:1a:23:26:70:da:1d:79:76:e3:6f:62:4b:2e:
                    42:19:4c:54:80:d6:15:06:a4:46:b8:69:6e:dc:a2:
                    81:31:ee:2f:06:3c:9f:ed:3a:79:34:35:57:e4:b6:
                    3a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B8:36:B7:D2:38:6A:05:A1:E0:49:70:5E:8A:5B:4E:78:5A:90:C4
            X509v3 Authority Key Identifier:
                keyid:E9:67:E7:2D:29:BE:19:29:05:C0:36:01:05:38:78:C7:1B:B6:21:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/E967E72D29BE192905C03601053878C71BB621A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E967E72D29BE192905C03601053878C71BB621A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a3a2f33322d3334203d3e20323635333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:26:70:cf:7a:8e:81:c2:08:7e:8a:b8:44:07:f7:4d:2f:46:
         45:85:44:3f:80:93:81:69:68:85:6d:a4:2d:70:33:0e:2d:05:
         a4:18:d3:5c:6c:74:00:22:d3:12:df:fb:3d:ed:59:1f:79:72:
         0d:db:2c:d6:73:21:4c:2e:aa:a8:64:25:97:86:23:51:66:ec:
         ca:0a:76:9d:64:70:0f:8a:79:77:f4:04:3e:a2:15:51:50:d7:
         2c:2e:20:6e:42:0d:8d:7d:d1:fd:eb:de:96:4a:27:79:dc:70:
         8e:9c:4d:04:f0:0b:8f:74:42:dd:91:33:5b:93:54:6d:72:76:
         0b:fe:8c:5c:71:fb:83:2e:fa:7f:32:93:a2:14:b9:64:af:9d:
         00:3e:ad:6e:82:69:4d:90:a6:43:3b:7f:15:de:27:83:bc:f0:
         52:87:71:8c:17:77:b1:a0:39:32:13:f7:0d:c0:73:44:61:03:
         60:2f:29:a0:83:77:cc:7f:ae:3b:f7:93:64:8f:8a:dc:94:a4:
         9a:c9:16:b7:70:21:88:fb:6c:f0:11:2e:ad:7b:8c:92:42:d7:
         02:04:d5:75:27:4c:25:f2:84:e2:cb:4b:5f:3a:e3:c5:5d:55:
         65:aa:14:0c:d8:5e:f0:84:5f:6c:ff:c9:49:57:22:1f:ed:8e:
         40:81:3a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:01:02 2025 by rpki-client