Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/323830343a386639303a3a2f33322d3332203d3e20323733343938.roa
File:                     323830343a386639303a3a2f33322d3332203d3e20323733343938.roa (raw, json)
Hash identifier:          vyEuVko/frnMCelb6uKYiRTw431v8ZOguv+v05iqEi8=
Subject key identifier:   2C:31:57:28:7D:3C:55:84:42:0D:94:30:1C:67:43:E6:A0:AB:A8:33
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       7419D07C1CBABC988E4428AC6DE29BB4EBB6F7BD
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/323830343a386639303a3a2f33322d3332203d3e20323733343938.roa
Signing time:             Wed 23 Jul 2025 13:08:08 +0000
ROA not before:           Wed 23 Jul 2025 13:03:08 +0000
ROA not after:            Wed 22 Jul 2026 13:08:08 +0000
asID:                     273498
IP address blocks:        2804:8f90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:19:d0:7c:1c:ba:bc:98:8e:44:28:ac:6d:e2:9b:b4:eb:b6:f7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Jul 23 13:03:08 2025 GMT
            Not After : Jul 22 13:08:08 2026 GMT
        Subject: CN=2C3157287D3C5584420D94301C6743E6A0ABA833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:77:88:9c:82:1b:b2:52:1b:8d:e8:0f:7a:
                    16:12:d2:f6:c9:18:91:c2:3b:68:03:40:13:7d:c3:
                    9c:21:d8:92:d2:ab:ef:9c:b0:24:b2:03:1e:25:0d:
                    a5:04:40:b1:27:93:f9:09:ce:68:93:20:37:8b:16:
                    be:1c:6a:ab:69:2c:12:b8:59:99:d3:f1:a1:6d:bd:
                    40:dd:11:6e:85:2c:19:cf:24:b9:7f:e4:33:9a:9a:
                    1a:c4:91:dc:f3:1b:38:c5:3d:80:fe:89:7f:f2:1b:
                    f9:98:0c:c9:45:b2:1e:96:a9:e2:57:bb:68:6e:36:
                    a9:e8:fa:6a:b5:20:2c:bc:fb:01:7d:6f:b7:c1:31:
                    87:7c:b7:50:4f:ce:67:6f:54:65:87:6a:80:bf:1f:
                    46:8f:12:54:48:05:25:1f:cc:58:7b:9d:bb:00:58:
                    a0:56:65:f5:74:f7:a2:f0:f1:0e:62:d8:64:dc:22:
                    55:1a:1b:a5:b5:50:42:88:5a:6d:3e:31:e0:00:3e:
                    5c:f0:88:49:71:ec:f6:80:ac:c8:a1:7b:6e:6a:ff:
                    41:ef:8d:d1:cd:ab:ac:e2:6a:b5:ee:2a:3a:e5:d4:
                    85:1a:8c:03:fa:5d:bd:35:2f:40:bb:98:f2:0f:c2:
                    dc:90:af:d1:43:57:50:72:3b:12:c0:b1:ef:8d:2b:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:31:57:28:7D:3C:55:84:42:0D:94:30:1C:67:43:E6:A0:AB:A8:33
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/323830343a386639303a3a2f33322d3332203d3e20323733343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:a3:b8:13:e2:14:16:76:30:bb:a8:0a:01:c5:f6:5f:41:b9:
         03:e1:5a:d1:72:11:13:6f:a1:8f:ac:3f:6a:53:25:b4:22:08:
         2c:70:f7:d2:0e:e8:f1:a5:5f:49:c4:91:3c:ca:73:2f:7e:62:
         13:86:43:b6:39:14:af:8e:1d:dd:be:fa:21:e3:0a:ac:84:7e:
         68:bf:7d:93:da:07:0a:29:22:f2:15:49:fa:38:62:69:e7:10:
         43:f2:5f:a5:06:26:98:21:c0:07:b7:5f:42:14:56:5a:fd:4b:
         79:82:a0:c9:01:d0:73:91:4d:06:23:0c:b5:d7:70:52:22:2a:
         5f:d0:ab:bc:0b:cc:77:f9:b9:f3:26:36:d8:84:f0:47:5d:4b:
         75:5f:cc:78:37:92:41:f3:97:f6:be:6c:66:87:0f:9b:48:a5:
         8d:01:ab:02:ec:3d:c4:f9:96:de:bd:d2:6c:1f:60:f2:49:2e:
         47:b4:a8:9a:41:f1:51:76:60:77:78:d4:36:50:9d:c3:84:1c:
         16:ef:c3:82:91:e4:f2:2e:44:04:4b:17:81:8e:34:09:32:6c:
         c1:77:f3:ab:b8:b8:0f:96:c5:29:13:9a:7f:ff:b8:4a:25:29:
         c9:f8:c8:68:4b:e9:f9:f4:4f:df:e3:14:8d:15:12:58:b9:89:
         d6:0c:1d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:42:53 2025 by rpki-client