Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a323030303a3a2f33352d3335203d3e20323636353635.roa
File:                     323830343a336466343a323030303a3a2f33352d3335203d3e20323636353635.roa (raw, json)
Hash identifier:          Fnt/Gar/8U6mvPuG+OkKxOho4bk6hkVV98XePQsiqUk=
Subject key identifier:   D6:3E:9C:7F:FD:FD:EA:F6:37:B7:3D:0E:FD:D0:7D:5D:51:F7:A4:20
Certificate issuer:       /CN=8D2922D358225395ABA691BA6723BAA778294D49
Certificate serial:       4D1CFE9DB0642B0879C9D651E27877373A477E5D
Authority key identifier: 8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a323030303a3a2f33352d3335203d3e20323636353635.roa
Signing time:             Sat 19 Jul 2025 02:12:25 +0000
ROA not before:           Sat 19 Jul 2025 02:07:25 +0000
ROA not after:            Sat 18 Jul 2026 02:12:25 +0000
asID:                     266565
IP address blocks:        2804:3df4:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl
                          rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 02:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1c:fe:9d:b0:64:2b:08:79:c9:d6:51:e2:78:77:37:3a:47:7e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2922D358225395ABA691BA6723BAA778294D49
        Validity
            Not Before: Jul 19 02:07:25 2025 GMT
            Not After : Jul 18 02:12:25 2026 GMT
        Subject: CN=D63E9C7FFDFDEAF637B73D0EFDD07D5D51F7A420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:6e:22:e4:ec:be:c8:c5:82:74:10:15:0a:
                    f7:69:25:e7:f0:ff:7a:13:15:d6:37:d6:a9:13:7d:
                    fe:d8:16:b7:64:ff:48:62:04:7a:e0:51:e2:5a:fe:
                    80:60:d6:14:92:68:5b:22:61:1e:58:a5:9c:2a:03:
                    f1:90:da:5b:b3:04:a7:0a:ab:5d:a6:f5:c5:fe:bd:
                    92:fe:5e:2c:d3:9e:8f:c8:29:8a:18:50:a9:d2:2c:
                    52:a3:56:1c:fa:19:3d:77:b3:f9:48:87:ec:cf:25:
                    fd:62:6a:96:7c:c1:96:9d:54:f4:69:75:dd:f1:e5:
                    49:96:68:57:f7:5b:c5:74:9f:92:bd:fe:25:30:0f:
                    a7:b8:bb:f5:69:bc:7e:52:ff:ae:4c:ad:59:06:77:
                    e3:09:be:da:1a:32:c0:ae:f4:13:d7:ab:64:ba:02:
                    fd:cb:8b:e4:4f:82:d7:40:d0:4b:03:6e:ca:62:b6:
                    20:e8:34:8e:17:90:f8:14:d6:80:f2:1e:c2:c5:9a:
                    e7:89:9e:06:77:7d:7e:84:4c:53:1e:ab:38:00:53:
                    8a:9f:00:b4:0f:b5:19:de:a1:02:73:2f:ec:cf:db:
                    97:a6:28:91:5c:1e:a5:de:d8:a1:17:bc:ad:ef:d8:
                    0c:74:d5:81:6d:d1:c5:47:79:be:d3:4e:c1:01:bd:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3E:9C:7F:FD:FD:EA:F6:37:B7:3D:0E:FD:D0:7D:5D:51:F7:A4:20
            X509v3 Authority Key Identifier:
                keyid:8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a323030303a3a2f33352d3335203d3e20323636353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3df4:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         50:9a:4b:d2:99:55:59:8d:12:4f:54:3b:a3:02:24:ce:5d:09:
         4b:05:c4:37:38:89:48:6f:d3:fd:6a:0e:1f:e4:7f:9e:23:50:
         60:37:8a:e1:ab:17:f6:2c:1e:cf:87:ef:2c:56:4f:80:7e:bb:
         b6:72:a2:a9:e7:62:1b:cb:9c:a8:c3:2b:c7:1c:6f:65:68:29:
         4b:63:67:62:87:18:c1:5e:2d:d1:48:70:63:cd:25:7f:14:8b:
         db:f3:31:8a:96:82:d2:02:50:85:74:0e:95:87:d4:55:a8:c8:
         8a:8c:a5:62:5e:1d:9d:69:82:08:be:07:ce:92:38:2a:ff:e9:
         24:00:22:75:9e:57:d5:66:21:08:e2:51:1b:3e:56:a5:46:7f:
         bb:f3:a3:7d:af:b3:a3:ee:1e:24:0b:c4:67:ad:68:a0:ac:eb:
         4f:c2:9f:09:bb:ca:f1:e2:14:dc:d8:f3:b7:bd:0e:66:71:04:
         4e:ba:e8:67:91:ef:8f:50:85:18:4a:21:6c:3a:6f:74:66:f7:
         a7:2b:98:d8:4e:1e:b8:7a:b0:b9:7e:78:be:b2:57:37:72:4c:
         c5:4e:5f:16:37:b0:7d:18:69:00:ba:73:9d:07:d5:75:2f:24:
         59:1e:f4:c0:23:b7:8d:44:44:23:cc:50:bc:c0:24:d7:84:ef:
         75:5c:ef:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:53:30 2025 by rpki-client