Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a633a3a2f34382d3438203d3e20323635333438.roa
File:                     323830343a326537633a633a3a2f34382d3438203d3e20323635333438.roa (raw, json)
Hash identifier:          tb5Xy/lIwBDHyMI4HXXiIC/XlOpwZ25AB12gyrKRQy4=
Subject key identifier:   1F:B7:FD:B6:F6:36:8B:3B:8B:33:E0:B9:FF:25:9F:A5:2F:7D:2F:18
Certificate issuer:       /CN=E967E72D29BE192905C03601053878C71BB621A0
Certificate serial:       149A86D4EC04238FBDFC563348DF42D7852FAE59
Authority key identifier: E9:67:E7:2D:29:BE:19:29:05:C0:36:01:05:38:78:C7:1B:B6:21:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E967E72D29BE192905C03601053878C71BB621A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a633a3a2f34382d3438203d3e20323635333438.roa
Signing time:             Tue 22 Jul 2025 16:10:05 +0000
ROA not before:           Tue 22 Jul 2025 16:05:05 +0000
ROA not after:            Tue 21 Jul 2026 16:10:05 +0000
asID:                     265348
IP address blocks:        2804:2e7c:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/E967E72D29BE192905C03601053878C71BB621A0.crl
                          rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/E967E72D29BE192905C03601053878C71BB621A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E967E72D29BE192905C03601053878C71BB621A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 12:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9a:86:d4:ec:04:23:8f:bd:fc:56:33:48:df:42:d7:85:2f:ae:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E967E72D29BE192905C03601053878C71BB621A0
        Validity
            Not Before: Jul 22 16:05:05 2025 GMT
            Not After : Jul 21 16:10:05 2026 GMT
        Subject: CN=1FB7FDB6F6368B3B8B33E0B9FF259FA52F7D2F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:89:63:3c:2f:04:5a:91:b1:fb:fb:89:4e:02:
                    1d:c0:fd:8f:fc:23:a9:e0:b6:4a:32:54:13:f2:77:
                    9a:6b:1f:ec:42:91:a5:ea:6f:f0:17:d9:19:c8:69:
                    ae:38:de:9f:e0:4e:cc:2f:29:5c:8f:fe:90:2f:72:
                    3f:52:0e:3b:97:85:30:22:0e:53:c7:12:06:2e:4e:
                    aa:54:ac:23:bc:39:d3:54:31:ce:8b:4f:24:45:a1:
                    bc:2b:16:da:0b:ab:67:12:55:ce:e2:35:0c:fe:f0:
                    7a:00:46:d4:f4:f7:6a:d2:bc:02:6e:bf:bd:8f:07:
                    5d:3c:0c:e2:e0:85:91:55:64:b1:33:10:53:50:de:
                    5a:32:31:17:59:09:7c:a2:34:d4:2e:b9:3c:6b:81:
                    52:ff:f9:76:e8:f3:13:a5:ea:1e:b1:19:70:c6:4b:
                    6d:6d:78:d2:0b:9f:c7:07:c0:f9:4c:98:e0:01:06:
                    b0:7e:ea:86:3c:55:f0:b1:58:6c:df:b6:ac:4e:64:
                    77:c3:32:35:47:94:c8:71:39:27:f2:3c:27:08:dd:
                    f7:7c:84:ba:8b:a7:96:db:33:36:16:6d:5a:19:d0:
                    75:a5:01:5e:08:3c:ff:ba:78:3e:3b:d5:76:41:1e:
                    57:81:89:82:4d:f4:22:24:bc:e3:d1:26:b0:cb:1a:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B7:FD:B6:F6:36:8B:3B:8B:33:E0:B9:FF:25:9F:A5:2F:7D:2F:18
            X509v3 Authority Key Identifier:
                keyid:E9:67:E7:2D:29:BE:19:29:05:C0:36:01:05:38:78:C7:1B:B6:21:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/E967E72D29BE192905C03601053878C71BB621A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E967E72D29BE192905C03601053878C71BB621A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a633a3a2f34382d3438203d3e20323635333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e7c:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:4b:8d:f4:f7:5e:7e:b1:65:40:8d:d3:20:21:9a:c1:e7:c4:
         52:00:b6:15:ed:f9:b1:b7:87:e2:96:92:02:37:8c:03:ae:e7:
         a6:eb:38:05:9c:66:46:02:c8:48:92:e7:29:61:ac:cd:a9:c7:
         bb:fb:81:82:27:dd:83:44:81:73:28:8f:0f:d1:32:68:60:a3:
         05:59:63:e2:4b:b9:1a:2d:66:a8:49:c7:dd:22:d0:7c:61:16:
         2f:05:dd:59:4d:36:45:e3:b7:c1:06:85:e2:60:da:5f:31:33:
         35:6c:ac:65:84:e7:d4:67:51:f3:d8:14:f2:da:66:8a:2c:05:
         41:0f:54:e3:dc:7e:4c:dc:f4:fa:c5:32:99:06:00:e4:a2:67:
         ec:f2:27:6a:b0:f6:4f:d7:90:6c:1f:62:15:df:60:3d:3d:37:
         04:ca:37:2c:7e:86:51:a7:48:77:32:66:f0:88:68:4b:5b:20:
         ca:37:24:9e:fc:08:db:00:bb:6d:35:5b:69:a6:60:a2:63:af:
         80:d1:29:88:ef:49:ae:a8:38:39:34:14:84:18:5b:ef:7c:3d:
         ab:df:17:9e:e5:86:2d:7d:d0:a5:56:5a:c7:c0:6c:71:ca:44:
         a6:5b:95:e0:ad:a3:9e:b5:64:37:39:04:13:8c:6e:bb:f4:8c:
         6a:53:28:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:34 2025 by rpki-client