Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNn4pqWxmT17yMqPHFtJ8BrRuEE1VybuPyxB8cir9a1f/0/323830343a313833303a3a2f33322d3334203d3e203631393232.roa
File:                     323830343a313833303a3a2f33322d3334203d3e203631393232.roa (raw, json)
Hash identifier:          l04GVRpSsmrI+vrmMJbpw/JIn3up6+kHOahREMfKQzg=
Subject key identifier:   85:29:F3:E1:DE:3F:7D:21:D7:4E:5C:A4:CC:E0:EF:66:0F:87:0A:07
Certificate issuer:       /CN=751B2E86DFEE001CFA6872E185B113374FEF9041
Certificate serial:       6ADD53903A81639DB0A48D748F9A2BCD0BDEB543
Authority key identifier: 75:1B:2E:86:DF:EE:00:1C:FA:68:72:E1:85:B1:13:37:4F:EF:90:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/751B2E86DFEE001CFA6872E185B113374FEF9041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNn4pqWxmT17yMqPHFtJ8BrRuEE1VybuPyxB8cir9a1f/0/323830343a313833303a3a2f33322d3334203d3e203631393232.roa
Signing time:             Wed 23 Jul 2025 13:08:07 +0000
ROA not before:           Wed 23 Jul 2025 13:03:07 +0000
ROA not after:            Wed 22 Jul 2026 13:08:07 +0000
asID:                     61922
IP address blocks:        2804:1830::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GNn4pqWxmT17yMqPHFtJ8BrRuEE1VybuPyxB8cir9a1f/0/751B2E86DFEE001CFA6872E185B113374FEF9041.crl
                          rsync://rpki-repo.registro.br/repo/GNn4pqWxmT17yMqPHFtJ8BrRuEE1VybuPyxB8cir9a1f/0/751B2E86DFEE001CFA6872E185B113374FEF9041.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/751B2E86DFEE001CFA6872E185B113374FEF9041.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 12:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:dd:53:90:3a:81:63:9d:b0:a4:8d:74:8f:9a:2b:cd:0b:de:b5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=751B2E86DFEE001CFA6872E185B113374FEF9041
        Validity
            Not Before: Jul 23 13:03:07 2025 GMT
            Not After : Jul 22 13:08:07 2026 GMT
        Subject: CN=8529F3E1DE3F7D21D74E5CA4CCE0EF660F870A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:78:11:9f:53:29:8c:12:a0:2a:51:92:1f:bb:
                    53:7f:5c:75:66:63:96:43:26:2c:9f:f2:22:a9:44:
                    12:22:72:4a:b1:ef:37:88:84:0f:5e:29:13:ab:f6:
                    39:60:68:60:08:2b:98:60:9b:4f:d7:d8:63:9c:5c:
                    f9:5f:c3:d4:08:0e:b7:17:e7:02:35:8c:02:59:f6:
                    b0:3e:55:78:50:f9:b7:f8:80:bb:30:88:8f:c9:86:
                    4c:7a:c2:04:3f:d0:c5:24:86:63:ea:ba:44:1f:e4:
                    4e:c9:87:69:13:4a:19:38:9b:4d:6b:ad:d3:21:53:
                    c2:70:cb:39:43:50:b8:7b:f6:30:d1:1e:18:57:8d:
                    c0:47:77:d1:a6:5f:36:24:00:1d:79:37:23:75:20:
                    94:3b:3a:6f:ec:e4:6c:74:57:fb:75:d6:d7:3e:95:
                    c3:dc:63:05:e5:ab:11:79:47:10:19:69:70:05:21:
                    78:cf:b1:41:8f:2c:7c:2d:36:fa:76:b0:58:76:18:
                    63:9d:c4:c5:6b:0b:c4:1f:b0:81:30:96:72:2a:5b:
                    77:4f:46:06:00:4b:f3:df:3b:7d:36:63:c8:1a:ec:
                    14:a3:00:97:c2:25:c6:0c:bc:27:70:c9:3b:6d:df:
                    ca:14:93:30:89:6b:84:0e:7b:0e:aa:98:2a:d0:fe:
                    1a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:29:F3:E1:DE:3F:7D:21:D7:4E:5C:A4:CC:E0:EF:66:0F:87:0A:07
            X509v3 Authority Key Identifier:
                keyid:75:1B:2E:86:DF:EE:00:1C:FA:68:72:E1:85:B1:13:37:4F:EF:90:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNn4pqWxmT17yMqPHFtJ8BrRuEE1VybuPyxB8cir9a1f/0/751B2E86DFEE001CFA6872E185B113374FEF9041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/751B2E86DFEE001CFA6872E185B113374FEF9041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNn4pqWxmT17yMqPHFtJ8BrRuEE1VybuPyxB8cir9a1f/0/323830343a313833303a3a2f33322d3334203d3e203631393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1830::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:ec:f7:40:5b:09:ab:75:46:12:4a:99:76:09:3e:05:7a:33:
         b2:bb:66:97:0a:c4:32:e2:9d:ae:0c:a0:9b:dd:f4:99:35:49:
         9a:0a:92:08:cd:af:e5:44:39:c5:b8:4e:58:59:86:e9:7d:4e:
         f2:7b:06:65:59:dd:d9:88:ef:f8:6c:54:b1:ac:9e:b3:5d:f3:
         d2:ad:29:59:6b:56:df:e7:9a:b4:7e:bf:de:dd:09:0d:4d:6d:
         51:9b:4a:ac:98:2b:00:b0:f3:a2:af:af:71:a3:56:36:e7:00:
         e4:86:91:d1:77:ee:06:99:65:00:66:52:ce:a6:55:32:d4:65:
         a2:b1:6b:f5:c7:4d:33:48:b7:40:b1:4a:22:dc:4d:1d:ed:cf:
         e6:5b:cb:3e:97:75:08:51:6b:77:ef:0a:bb:21:3d:a0:ca:6e:
         9d:7e:06:48:a0:d3:83:96:d6:91:5b:07:91:c9:d4:a1:e7:eb:
         98:8c:05:a2:3f:8e:de:5e:0b:77:3e:4b:f1:c6:b8:a5:f0:01:
         da:46:0c:60:1f:d4:c5:c5:6d:3b:63:ff:3c:b8:d1:64:d3:90:
         95:bb:3f:df:43:e3:dd:55:2f:85:20:51:6b:51:d3:76:25:25:
         b9:7e:59:af:56:93:dc:6c:06:0b:b8:b2:2e:da:23:0b:7d:da:
         24:1f:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:58:36 2025 by rpki-client