Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/323830343a333064383a3a2f33322d3334203d3e20323634393736.roa
File:                     323830343a333064383a3a2f33322d3334203d3e20323634393736.roa (raw, json)
Hash identifier:          nv8LLMX+vyCbc20U77xhD0JHSAD3/Oumdjk0SatFuBU=
Subject key identifier:   DE:B1:67:EB:FA:72:E9:C8:C1:1F:75:90:06:2E:6C:B2:8A:F5:90:C4
Certificate issuer:       /CN=02741E68C58D644A904E506F841B4EE63616349B
Certificate serial:       213F03377B5B0751548BB9459E92D0B277071000
Authority key identifier: 02:74:1E:68:C5:8D:64:4A:90:4E:50:6F:84:1B:4E:E6:36:16:34:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02741E68C58D644A904E506F841B4EE63616349B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/323830343a333064383a3a2f33322d3334203d3e20323634393736.roa
Signing time:             Fri 04 Jul 2025 18:00:58 +0000
ROA not before:           Fri 04 Jul 2025 17:55:58 +0000
ROA not after:            Fri 03 Jul 2026 18:00:58 +0000
asID:                     264976
IP address blocks:        2804:30d8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.crl
                          rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02741E68C58D644A904E506F841B4EE63616349B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 06:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3f:03:37:7b:5b:07:51:54:8b:b9:45:9e:92:d0:b2:77:07:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02741E68C58D644A904E506F841B4EE63616349B
        Validity
            Not Before: Jul  4 17:55:58 2025 GMT
            Not After : Jul  3 18:00:58 2026 GMT
        Subject: CN=DEB167EBFA72E9C8C11F7590062E6CB28AF590C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:18:16:92:24:3c:0e:5d:d6:1e:65:68:f2:
                    9c:a6:77:ff:19:ea:ac:d9:2e:3c:8d:31:33:dc:66:
                    f2:6a:30:61:c6:53:6d:f3:dd:57:11:68:b3:5a:4f:
                    db:f9:02:00:f8:c0:7a:7c:28:d9:0c:89:47:d0:75:
                    b2:13:3a:81:1c:f3:56:e9:82:4d:9f:84:4b:32:1b:
                    f0:4e:e0:f4:85:1c:c3:b4:3d:b3:0e:88:b6:01:d0:
                    62:ed:bf:92:eb:82:00:7f:9d:c9:7d:3e:75:64:10:
                    a3:8f:32:ba:a1:88:df:5c:39:49:25:2e:49:0e:29:
                    0b:64:c0:b6:2f:4d:cc:41:e9:f0:64:d7:cb:da:a5:
                    35:d4:96:e6:24:38:83:42:dd:ab:66:a6:97:59:34:
                    2c:9c:58:f2:1a:09:ec:dc:07:97:c1:7f:d9:04:24:
                    ca:ec:94:c7:9d:7b:47:6b:c1:e0:80:82:f6:8e:fe:
                    d8:3d:b0:82:58:8c:25:20:c7:c7:32:3d:52:e6:46:
                    18:47:f7:58:08:0a:91:ee:78:bb:ce:9a:de:6f:8b:
                    dc:5b:7b:50:43:78:01:53:22:27:2c:8d:93:c5:b0:
                    d7:85:88:c2:6e:81:ba:56:46:83:59:ad:a9:31:a0:
                    44:44:56:6a:64:58:65:34:03:ef:0d:0b:5a:e2:d1:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B1:67:EB:FA:72:E9:C8:C1:1F:75:90:06:2E:6C:B2:8A:F5:90:C4
            X509v3 Authority Key Identifier:
                keyid:02:74:1E:68:C5:8D:64:4A:90:4E:50:6F:84:1B:4E:E6:36:16:34:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02741E68C58D644A904E506F841B4EE63616349B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/323830343a333064383a3a2f33322d3334203d3e20323634393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:5f:5a:0d:ea:99:0f:97:bb:b8:49:b1:ac:8f:ae:af:f8:37:
         5c:91:2f:94:87:f4:d3:84:51:6b:fb:9a:2d:11:aa:bd:17:87:
         0a:05:9b:53:26:90:12:a7:b4:aa:39:9e:c8:6d:a5:55:b5:37:
         77:e5:b7:26:b7:98:9a:7b:7b:d4:ee:07:e7:64:6e:02:17:99:
         1c:ff:f3:b3:42:9b:40:ee:6b:f0:ff:f3:2f:63:dc:ab:7d:31:
         60:a1:4c:a3:47:d9:b6:7f:9e:b3:4d:0f:96:65:c3:3f:c4:9f:
         48:5c:3a:b0:c6:b0:76:01:ed:cd:3c:4c:5d:cf:56:d7:e8:f8:
         47:d0:1d:1b:60:a7:3f:5a:4f:8d:a1:4e:ec:1e:70:38:a1:e6:
         d9:47:39:7e:0f:de:cc:49:ed:ac:f7:bb:22:c6:77:12:23:06:
         3e:39:68:5e:c7:3c:55:d5:a4:51:97:e7:b0:17:15:ae:e3:c9:
         fa:93:d7:48:b3:02:97:eb:84:6a:07:ac:7c:7d:48:e2:ce:a3:
         79:40:e0:b1:f8:7f:57:ea:71:f8:9d:31:35:92:60:ef:f2:40:
         7e:3c:8a:a5:2d:7b:dc:63:ac:a1:1e:82:31:d9:5b:0d:49:4e:
         e8:10:68:67:e7:6f:4a:bd:fd:ee:f2:04:44:11:c0:37:1e:f0:
         19:86:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:32:57 2025 by rpki-client