Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          8tcPtbeFADqn7j5wPgEV/xkungZIxf0p1KKa9Fv9kro=
Subject key identifier:   35:A4:8E:18:18:C0:3E:59:74:73:53:72:DF:DA:F5:2C:E6:25:44:DC
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       18DB554041DAA24254E14876CC04753D1AA7FDE4
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Mon 14 Jul 2025 18:00:00 +0000
ROA not before:           Mon 14 Jul 2025 17:55:00 +0000
ROA not after:            Mon 13 Jul 2026 18:00:00 +0000
asID:                     267121
IP address blocks:        2804:4870:1b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:db:55:40:41:da:a2:42:54:e1:48:76:cc:04:75:3d:1a:a7:fd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Jul 14 17:55:00 2025 GMT
            Not After : Jul 13 18:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cc:7b:49:d3:98:aa:e1:be:e4:37:a3:5f:fc:
                    34:61:2f:bc:5f:84:2d:b8:58:45:3c:10:c3:3c:b3:
                    36:ac:22:8d:08:59:e0:83:5f:8e:50:93:be:4c:74:
                    68:8e:fd:b5:ad:a2:62:04:41:b1:08:2e:96:f5:33:
                    7e:af:98:3e:7f:01:ea:0d:d4:4a:dc:ac:5d:1c:e7:
                    54:21:e4:b8:2f:76:16:cc:61:d9:ac:0c:f5:65:7f:
                    5c:16:d3:72:2b:85:f0:f1:4b:f6:ce:35:5b:5f:50:
                    0d:9b:cf:05:db:de:fd:25:39:9f:4b:0b:8a:09:e8:
                    59:0e:1f:63:63:50:2e:65:67:d7:8d:7f:9e:88:cd:
                    97:53:ba:90:7a:8c:de:49:c2:66:b6:24:1a:7c:da:
                    22:a5:81:3f:74:d7:55:fa:a9:68:f2:20:5a:70:a8:
                    ee:44:eb:16:4f:66:69:b1:87:35:fd:95:15:f3:c6:
                    d0:8c:43:b8:a0:a0:bf:78:00:d6:d9:56:1c:82:ab:
                    43:41:c6:a5:c0:e5:02:ff:8c:88:40:e1:c8:e8:85:
                    33:11:5d:1f:d3:8d:7a:36:96:c2:37:38:ad:c5:b7:
                    c3:8b:ae:29:f3:1e:68:b0:10:53:2d:e6:e1:8a:72:
                    46:b2:4f:95:d9:1e:0c:0a:28:43:ec:b4:85:f9:a2:
                    01:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A4:8E:18:18:C0:3E:59:74:73:53:72:DF:DA:F5:2C:E6:25:44:DC
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:2f:57:1f:00:62:75:bd:a6:42:54:1a:3d:d6:4c:46:6c:58:
         47:cc:28:31:3f:b0:26:9c:f4:62:ee:e7:ca:e8:d4:38:83:f0:
         c6:e2:26:5f:6b:10:ae:9a:d7:5a:02:c4:1e:c7:10:6c:80:ea:
         ea:d7:37:0a:c3:01:4b:80:a9:c2:de:0c:c7:78:3c:00:57:05:
         32:97:3f:94:d5:92:31:83:03:c9:04:f0:30:fd:27:13:b3:b7:
         17:49:ac:8e:43:9c:7e:09:00:a3:21:56:78:de:94:a5:f9:58:
         c5:d7:c5:8b:e1:cf:cc:f6:db:f1:39:4d:d9:38:49:2b:44:03:
         3b:a5:f5:c2:ac:0f:70:4d:74:7a:aa:8f:cc:51:19:13:22:2b:
         15:35:39:30:d5:32:bb:20:25:0d:5b:31:2c:3a:b7:f8:8f:79:
         28:ca:6f:01:3c:c3:f8:90:8c:a8:74:60:9b:15:64:14:6a:8a:
         e4:dd:a7:31:95:d3:ae:31:e7:bb:63:e5:ac:c6:6a:fd:5b:1e:
         3b:16:18:61:b2:7d:b0:d1:d9:7a:e2:b7:41:71:4d:b7:49:36:
         f2:ed:33:12:2e:b1:a3:f3:4d:9e:62:f2:11:b9:79:ee:07:21:
         9e:f2:35:c8:86:45:75:2c:2d:05:1d:43:28:20:fb:d8:79:26:
         9a:c2:46:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:27:05 2025 by rpki-client