Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          YkiMOKlXUfp39jAbnOanM0KLPuwUcDBAVWsGF1xqc/E=
Subject key identifier:   72:6D:BC:6D:BB:C3:68:A7:8D:7E:8E:B5:4E:6F:66:26:13:77:35:85
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       49A5A5ED475C6017A4B86A06EB5B1FD35197E3EA
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Mon 14 Jul 2025 18:00:01 +0000
ROA not before:           Mon 14 Jul 2025 17:55:01 +0000
ROA not after:            Mon 13 Jul 2026 18:00:01 +0000
asID:                     267121
IP address blocks:        2804:4870:1c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a5:a5:ed:47:5c:60:17:a4:b8:6a:06:eb:5b:1f:d3:51:97:e3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Jul 14 17:55:01 2025 GMT
            Not After : Jul 13 18:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:c9:aa:d9:e5:06:1a:5f:74:ab:be:5c:01:
                    67:5a:ce:ee:94:e3:c1:fb:bd:fd:36:2d:e7:b8:8d:
                    f9:53:aa:3f:a4:09:3a:ec:af:63:b0:4a:c7:2a:1c:
                    ec:ca:f0:ca:ed:bb:c4:cf:ea:c4:fc:76:6f:0d:45:
                    fa:0d:e8:d8:6a:ba:b0:c0:d0:70:e0:c7:a9:6e:0e:
                    b5:8f:fb:d4:20:73:0b:e3:4b:0b:75:85:7f:4d:3a:
                    98:a3:87:ac:93:ee:26:e8:0a:71:b0:cf:12:87:48:
                    49:60:fb:2a:f1:66:e0:76:02:40:44:7b:ce:92:1c:
                    21:45:df:37:f3:a9:3e:77:d6:08:b0:99:39:40:b2:
                    b8:78:c1:64:93:ac:f8:d7:2e:06:66:3b:14:cf:09:
                    05:5d:b5:26:1f:56:98:1f:e0:d8:32:92:0d:28:40:
                    40:bb:b2:84:87:95:53:36:66:5f:8f:ba:fa:fb:0e:
                    cf:a9:cf:5d:b8:03:0d:54:7c:46:8a:72:fa:3b:7f:
                    42:17:58:94:38:69:b5:34:56:29:64:be:f8:91:e6:
                    e4:91:c4:50:e5:de:d0:f9:84:32:c0:71:63:78:b4:
                    ba:31:20:cc:43:72:99:13:07:db:92:4b:89:82:8f:
                    a2:ac:83:08:4f:c9:45:24:34:28:a4:9a:d5:d7:c0:
                    94:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6D:BC:6D:BB:C3:68:A7:8D:7E:8E:B5:4E:6F:66:26:13:77:35:85
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:d0:df:e0:2e:04:79:02:25:0a:d9:a0:00:40:60:1d:80:dc:
         1b:e1:dd:25:28:d4:97:43:8a:68:71:8e:fb:49:ff:83:21:b8:
         df:d1:99:ca:c9:b6:0c:ea:53:a5:e4:b1:28:46:47:a1:70:15:
         a1:2d:38:db:28:5d:a5:16:b4:29:7d:35:a9:96:eb:ce:d2:28:
         c5:79:54:8d:e7:1e:65:0f:8c:53:3b:fb:db:5b:4d:c2:9f:7c:
         3d:e3:7c:bd:3d:af:ca:b8:24:fb:d9:4b:91:b3:8a:4d:34:c0:
         94:ea:e6:0c:50:ab:71:4f:6f:1e:05:d7:8a:5e:f4:21:8b:89:
         0a:1a:83:be:e2:7d:cb:c5:78:be:aa:3a:92:00:ed:d6:00:73:
         17:06:ec:83:0f:80:a2:e3:99:68:0b:b5:87:60:b2:5f:f6:c9:
         6b:bc:8e:aa:d8:23:8b:77:f8:80:d9:5f:ec:6c:2e:35:30:dc:
         20:81:4a:9b:63:dc:44:6f:54:c8:25:be:fc:b9:a4:cc:98:c7:
         f6:8c:3c:41:89:3c:75:b5:bd:32:b8:24:22:fb:f5:e1:af:7b:
         7f:78:9f:59:17:1c:7d:20:68:75:39:4a:d1:53:d6:80:11:ba:
         8e:7a:2f:24:c3:66:bd:5b:c7:f2:9d:51:01:9d:6c:26:0e:ba:
         5f:dd:b1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:02:19 2025 by rpki-client