Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3a2f33322d3438203d3e20323637343538.roa
File:                     323830343a343164303a3a2f33322d3438203d3e20323637343538.roa (raw, json)
Hash identifier:          YKu5P0M06aV/VOrKrp2OW2JRawu4FuPiAzRiqq0BeEQ=
Subject key identifier:   B0:4E:D9:4A:CE:77:92:25:16:F6:74:F3:F1:F7:C3:98:23:3F:DB:EA
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       44B0EA4817F97597BF56DC373FFD4DD97867EC7C
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3a2f33322d3438203d3e20323637343538.roa
Signing time:             Wed 09 Jul 2025 22:40:32 +0000
ROA not before:           Wed 09 Jul 2025 22:35:32 +0000
ROA not after:            Wed 08 Jul 2026 22:40:32 +0000
asID:                     267458
IP address blocks:        2804:41d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
                          rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 15:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b0:ea:48:17:f9:75:97:bf:56:dc:37:3f:fd:4d:d9:78:67:ec:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Jul  9 22:35:32 2025 GMT
            Not After : Jul  8 22:40:32 2026 GMT
        Subject: CN=B04ED94ACE77922516F674F3F1F7C398233FDBEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:9f:4f:ea:a4:fe:e1:24:92:4f:3c:7e:5f:
                    00:f7:91:e0:d4:64:8c:4f:60:52:04:27:b8:70:1b:
                    33:d5:2a:56:ad:f9:f4:44:5f:66:43:82:c6:c7:2b:
                    0d:c8:29:9d:a9:d6:4a:d7:a3:98:35:08:84:b9:a1:
                    19:71:4f:36:08:e0:a3:76:4f:7c:d4:16:3e:f9:12:
                    0f:6e:34:42:db:83:71:c5:a4:7a:60:d0:3c:e9:f7:
                    69:f3:18:78:c2:0c:a4:be:3e:2b:89:44:71:29:67:
                    e2:43:03:7b:59:dd:54:f0:75:d1:2b:2c:d3:c6:c5:
                    f9:c1:8f:0f:34:0b:71:90:38:4c:c9:8f:2f:73:5a:
                    e1:cd:0c:e7:2c:27:cf:3e:6b:cd:c4:b4:63:47:c4:
                    f4:13:c3:80:ff:7a:c0:fc:fc:36:9f:70:d1:e2:66:
                    4d:a5:b4:61:58:92:24:b3:ae:2e:7b:a2:88:f6:8e:
                    22:07:fb:61:86:c2:f6:ad:be:85:03:04:e3:25:6c:
                    e3:6d:36:23:d7:cd:7f:88:96:30:3b:74:27:2c:6a:
                    74:24:9e:66:54:e5:6b:49:f4:26:5d:f6:44:88:f9:
                    89:73:bb:f7:92:48:e9:25:03:5b:d7:37:30:82:15:
                    89:8e:1c:cf:0a:c2:ca:ec:e0:9b:f6:0b:ff:48:ef:
                    07:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4E:D9:4A:CE:77:92:25:16:F6:74:F3:F1:F7:C3:98:23:3F:DB:EA
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3a2f33322d3438203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         e1:a0:23:1c:0a:eb:3e:b3:cb:14:e7:c1:4a:d9:26:46:5a:cf:
         06:2c:42:8a:7f:a5:e4:e6:c5:74:58:a0:7a:bb:f9:c1:77:3b:
         c7:9e:d0:7d:f9:ea:2b:fa:2d:28:24:7f:c3:bf:09:80:17:e5:
         f3:05:a0:ee:b0:71:4d:7b:21:61:fe:9e:09:8d:55:ed:59:d0:
         84:f2:17:ae:74:95:95:ca:06:15:0a:37:26:a7:8d:57:db:53:
         b5:9e:3f:b2:5a:64:1a:ab:f6:03:c6:31:e7:c0:e2:aa:b2:34:
         7d:86:99:89:31:61:d9:00:72:b6:46:3d:ae:29:0b:d3:3f:b7:
         01:bd:e9:e4:1a:9f:2c:9e:dc:2d:d1:8b:1c:69:7f:f4:d2:21:
         5a:0c:26:f6:15:3e:f8:da:f0:65:70:49:9d:ba:78:a0:6d:7d:
         46:9a:07:d6:ae:ae:df:b8:bf:bd:f5:6d:c4:f2:19:dd:ab:33:
         79:2a:db:9e:af:c0:c9:65:b8:48:9f:2c:d7:f7:c3:8d:1d:2f:
         ab:26:68:1a:3d:b5:53:99:53:b2:57:78:e6:12:9e:b9:97:37:
         ee:23:a0:af:c4:77:16:42:e3:8a:e9:f3:df:d0:a5:07:d4:98:
         ea:3c:b7:df:28:8a:81:7d:f6:1c:4f:d3:13:5d:95:6c:75:9b:
         ee:0d:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:03:20 2025 by rpki-client