Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/323830343a316238303a3266663a3a2f34382d3438203d3e20323632393933.roa
File:                     323830343a316238303a3266663a3a2f34382d3438203d3e20323632393933.roa (raw, json)
Hash identifier:          0STruXq+XIfTiYPW08Xb6Jj7cL9IQowr5jSbbyzxCMs=
Subject key identifier:   8E:50:5C:CF:69:01:1C:72:17:A4:C6:E6:50:45:DB:88:AD:3E:13:15
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       730547D5758F3ED41D81CD2A6751F9E66B83A7F7
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/323830343a316238303a3266663a3a2f34382d3438203d3e20323632393933.roa
Signing time:             Wed 23 Jul 2025 12:08:05 +0000
ROA not before:           Wed 23 Jul 2025 12:03:05 +0000
ROA not after:            Wed 22 Jul 2026 12:08:05 +0000
asID:                     262993
IP address blocks:        2804:1b80:2ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:05:47:d5:75:8f:3e:d4:1d:81:cd:2a:67:51:f9:e6:6b:83:a7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Jul 23 12:03:05 2025 GMT
            Not After : Jul 22 12:08:05 2026 GMT
        Subject: CN=8E505CCF69011C7217A4C6E65045DB88AD3E1315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:eb:6b:b0:64:15:5c:8e:78:c7:35:9c:cb:
                    af:1b:61:fc:a5:97:ab:88:ed:0f:d2:b9:07:12:81:
                    9e:21:dd:92:c8:46:84:78:15:74:5b:44:fa:fd:61:
                    3a:80:9b:5e:46:25:f5:24:93:55:06:39:71:40:57:
                    db:e2:f1:90:ea:d8:d4:bf:20:93:38:41:3e:0c:fb:
                    99:cb:ab:0e:8a:63:11:f3:42:2a:d8:7d:48:c2:bb:
                    ee:db:0d:08:f6:f5:b6:f9:f5:d9:9a:36:3d:84:60:
                    ae:25:8e:e1:69:3d:b9:db:f5:da:86:61:10:bf:54:
                    98:aa:4b:44:78:3b:48:4f:61:4c:d1:6c:7b:23:6f:
                    57:b4:75:fa:ee:71:d2:24:75:5b:ee:d0:84:35:83:
                    c5:1e:d4:fc:d8:73:f2:51:11:34:69:cf:3f:af:77:
                    72:86:3e:51:65:b5:a1:ac:2d:e0:1c:03:45:2c:18:
                    21:b0:67:8d:65:97:7c:c3:fc:b0:7f:fd:f4:01:0c:
                    fe:4a:a5:32:fe:6e:01:70:7b:36:da:cc:37:cb:ce:
                    9d:97:7d:6f:26:6a:46:9d:91:b8:54:8f:86:d2:50:
                    36:cd:87:ac:b8:c2:c2:3b:41:9a:da:fe:aa:ed:79:
                    76:61:aa:ee:a8:90:39:38:12:27:c5:54:58:c8:3d:
                    f3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:50:5C:CF:69:01:1C:72:17:A4:C6:E6:50:45:DB:88:AD:3E:13:15
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/323830343a316238303a3266663a3a2f34382d3438203d3e20323632393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b80:2ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:1e:63:bf:aa:92:b5:62:ee:44:63:3d:e3:48:d9:d5:17:3f:
         62:b9:16:b2:65:e7:14:65:80:49:b3:f4:d5:3c:b1:82:a3:27:
         07:0c:6f:c6:29:05:22:c1:81:03:c9:e3:1c:ea:1f:59:a2:d1:
         89:b1:42:82:9a:03:9d:6c:37:57:13:d6:06:1a:71:ab:f2:df:
         41:a5:40:20:f2:2b:59:62:28:3a:8a:5d:9a:27:ba:af:e9:2d:
         7c:67:d0:7c:61:f8:78:9d:71:bc:3a:1f:94:f3:bc:8e:d6:bc:
         33:35:e5:ba:93:9f:84:d5:a6:90:0d:0a:fb:69:98:92:ba:e4:
         3b:fc:a7:ad:20:af:48:4d:22:10:b3:4a:b3:b7:50:d3:53:b7:
         59:dd:a7:0b:f1:b9:af:04:c9:c4:01:49:0e:0d:4e:2d:8a:0b:
         91:a5:4a:2a:3a:28:83:ff:42:fc:24:83:71:dc:c9:52:ee:34:
         b9:a3:e1:1f:02:d2:5d:b1:cf:3f:fe:67:da:c3:15:a5:44:f7:
         02:3e:bc:b2:f4:9f:2d:aa:37:b9:7a:f4:9e:19:ce:8d:a1:b1:
         91:f3:5d:c5:c3:92:6d:b2:06:58:4f:b5:9f:11:04:be:f0:5a:
         39:be:b9:06:02:d5:c8:60:6c:79:90:9c:f9:65:97:4b:03:1b:
         97:62:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:29:47 2025 by rpki-client