Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a613030303a3a2f33352d3335203d3e20323636353635.roa
File:                     323830343a336466343a613030303a3a2f33352d3335203d3e20323636353635.roa (raw, json)
Hash identifier:          7p9YmYUV9Tye8cXSKBb3cCk22Q+F752vahB6K/i9ECo=
Subject key identifier:   E0:8D:8D:5C:5C:81:32:64:A7:7D:E5:D3:3F:76:F0:78:96:E4:D7:0B
Certificate issuer:       /CN=8D2922D358225395ABA691BA6723BAA778294D49
Certificate serial:       267951E7A98C08CDD558BE101447DC9964626C31
Authority key identifier: 8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a613030303a3a2f33352d3335203d3e20323636353635.roa
Signing time:             Sat 19 Jul 2025 02:12:38 +0000
ROA not before:           Sat 19 Jul 2025 02:07:38 +0000
ROA not after:            Sat 18 Jul 2026 02:12:38 +0000
asID:                     266565
IP address blocks:        2804:3df4:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl
                          rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 20:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:79:51:e7:a9:8c:08:cd:d5:58:be:10:14:47:dc:99:64:62:6c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2922D358225395ABA691BA6723BAA778294D49
        Validity
            Not Before: Jul 19 02:07:38 2025 GMT
            Not After : Jul 18 02:12:38 2026 GMT
        Subject: CN=E08D8D5C5C813264A77DE5D33F76F07896E4D70B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:de:79:4f:9e:96:41:5f:ff:ad:c7:54:32:
                    29:e5:b3:67:7f:bd:5d:5c:d0:8f:74:00:c4:68:2a:
                    5f:b6:c7:29:f5:7c:4f:6f:25:93:aa:84:25:40:8e:
                    e8:c7:6f:f9:ed:77:01:ee:68:34:72:cd:27:28:33:
                    fc:3a:24:23:8f:b0:6d:d8:b4:17:f0:45:ca:8a:76:
                    2c:78:1c:e3:97:ff:8c:0d:e5:a1:64:cf:69:4d:83:
                    a7:d4:d0:b2:bf:db:8b:52:e0:94:7d:74:91:2f:b4:
                    87:a8:eb:de:06:fe:b7:a7:52:49:55:4a:8b:2e:03:
                    e5:95:5c:01:39:2f:f9:66:70:2c:bf:63:6b:8a:4d:
                    d0:34:56:29:47:64:dc:4b:26:8f:5b:40:85:6c:ba:
                    31:9d:ad:1d:74:47:cc:be:cf:4d:62:24:a3:d8:bc:
                    89:51:7d:14:7f:dc:1f:05:c4:a7:81:9d:c6:8f:93:
                    cf:9c:5c:3a:47:9a:db:d3:dc:b4:a6:27:3f:fe:c8:
                    97:02:3e:7c:e5:f0:10:0f:ce:34:48:ae:80:07:09:
                    eb:37:11:e0:b6:85:95:cf:68:67:1a:c0:2d:38:87:
                    4b:7c:d8:ae:6f:d5:b2:a9:90:fa:85:74:1c:b0:04:
                    c3:de:92:04:62:ca:d3:5c:20:c5:b1:39:11:63:a8:
                    08:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8D:8D:5C:5C:81:32:64:A7:7D:E5:D3:3F:76:F0:78:96:E4:D7:0B
            X509v3 Authority Key Identifier:
                keyid:8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a613030303a3a2f33352d3335203d3e20323636353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3df4:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4a:c2:cc:65:97:56:44:72:96:ce:d4:56:1d:18:b2:2f:9f:91:
         c4:b5:a2:0e:df:94:eb:a7:41:11:58:fd:b9:17:3f:6d:41:00:
         65:07:fd:5f:8e:34:85:01:2a:50:2a:f4:ef:c3:75:e0:ef:d0:
         90:18:82:45:60:0c:91:3c:91:fc:47:cb:f5:2e:92:c8:33:e4:
         58:04:ff:98:27:83:61:a9:bd:44:3f:86:41:ad:27:2f:cf:df:
         93:9c:52:2e:20:e5:8a:9a:20:1c:10:ad:03:3d:08:39:c9:24:
         ca:c9:d3:5d:40:10:fb:68:d9:67:9c:5d:30:98:81:90:80:b4:
         28:f1:b9:b3:ea:f6:22:63:ef:78:82:51:c6:41:ae:c5:8a:c7:
         a9:1f:12:9f:76:d0:0d:94:5d:6d:bc:3a:59:1d:b9:8f:29:82:
         cb:6f:f7:49:76:49:55:31:88:5b:84:73:1b:fc:6f:0a:d5:14:
         17:17:fd:72:95:e5:05:21:4d:84:62:ef:33:35:4a:70:b0:88:
         77:f1:18:7d:ac:5c:e1:c9:19:6d:f8:65:a1:f2:cf:8f:84:94:
         60:90:a9:72:00:29:c7:28:bd:51:5e:dc:46:a9:ae:4b:a6:54:
         8b:04:b7:5d:a9:79:a9:5b:f1:58:ac:19:fe:bb:87:f4:57:6c:
         bb:92:68:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:57:26 2025 by rpki-client