Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa
File:                     323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa (raw, json)
Hash identifier:          +MxwWMlz9S9ev8gjiYaaRI7n12W9bpBHWTXxklmRXcg=
Subject key identifier:   42:57:F5:D8:BB:AB:3A:E1:D4:50:BF:34:00:8F:0B:FC:D7:34:89:AE
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       7079E93EDC8400E4C356B4C476906FF169AF40D5
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa
Signing time:             Mon 14 Jul 2025 18:00:02 +0000
ROA not before:           Mon 14 Jul 2025 17:55:02 +0000
ROA not after:            Mon 13 Jul 2026 18:00:02 +0000
asID:                     267121
IP address blocks:        2804:4870:2f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:79:e9:3e:dc:84:00:e4:c3:56:b4:c4:76:90:6f:f1:69:af:40:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Jul 14 17:55:02 2025 GMT
            Not After : Jul 13 18:00:02 2026 GMT
        Subject: CN=3082010A0282010100B1DA0BB782BDFE263B0477E18E0285556FBEF67D0B0CF56D14AFFF089DDFA946E5FA330FCD9C2B955BC7E144E1CE823A8E36834A1DCCB9FBDCD90D39F43160881341BC045631CEB645F2D10DFA45EBFC7A107BFCEBDEE2A301D1CC891E39F2A94970E33CD450F67D25A82BD5C57A3ECFDAEC57785F351992FA67A4E4B38A388F0DDD9C9EEDB703E4142D4B45E0B99C83F4CAA8F201DA5E6DA31F41C5C0F0DAB66FA7DCA05121D36A8EEC46B921435F51D54892A46718D93AEC5880D55B6ADACE29F48562CF67F7223D3A45DF18B284E3257F183219B88A1E60FB690CCA2E5F01EE61CA594E24599852B82395767375AD66B235E5E3D345B55422F507B9D2EE670203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:0b:b7:82:bd:fe:26:3b:04:77:e1:8e:02:
                    85:55:6f:be:f6:7d:0b:0c:f5:6d:14:af:ff:08:9d:
                    df:a9:46:e5:fa:33:0f:cd:9c:2b:95:5b:c7:e1:44:
                    e1:ce:82:3a:8e:36:83:4a:1d:cc:b9:fb:dc:d9:0d:
                    39:f4:31:60:88:13:41:bc:04:56:31:ce:b6:45:f2:
                    d1:0d:fa:45:eb:fc:7a:10:7b:fc:eb:de:e2:a3:01:
                    d1:cc:89:1e:39:f2:a9:49:70:e3:3c:d4:50:f6:7d:
                    25:a8:2b:d5:c5:7a:3e:cf:da:ec:57:78:5f:35:19:
                    92:fa:67:a4:e4:b3:8a:38:8f:0d:dd:9c:9e:ed:b7:
                    03:e4:14:2d:4b:45:e0:b9:9c:83:f4:ca:a8:f2:01:
                    da:5e:6d:a3:1f:41:c5:c0:f0:da:b6:6f:a7:dc:a0:
                    51:21:d3:6a:8e:ec:46:b9:21:43:5f:51:d5:48:92:
                    a4:67:18:d9:3a:ec:58:80:d5:5b:6a:da:ce:29:f4:
                    85:62:cf:67:f7:22:3d:3a:45:df:18:b2:84:e3:25:
                    7f:18:32:19:b8:8a:1e:60:fb:69:0c:ca:2e:5f:01:
                    ee:61:ca:59:4e:24:59:98:52:b8:23:95:76:73:75:
                    ad:66:b2:35:e5:e3:d3:45:b5:54:22:f5:07:b9:d2:
                    ee:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:57:F5:D8:BB:AB:3A:E1:D4:50:BF:34:00:8F:0B:FC:D7:34:89:AE
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:2f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:b9:e8:03:97:fe:f2:cc:1a:bc:1e:92:a1:66:96:a3:89:1c:
         80:7e:c6:28:0d:bd:9c:4e:ba:b0:04:84:3b:1e:62:69:7c:10:
         e4:8f:f6:c5:4f:eb:75:57:dc:e4:47:a5:a6:0b:9d:b8:5f:3d:
         0e:5c:4e:75:c0:67:91:47:40:41:e2:b5:ae:e8:db:d5:32:3f:
         50:9b:2f:6c:7f:09:0b:a1:98:6f:62:f0:d5:3e:13:7d:aa:90:
         b9:94:ca:55:0f:87:b1:41:e6:2b:7b:77:ba:27:0a:6d:12:82:
         a1:0a:31:72:75:dd:e3:a9:9d:7d:c3:73:61:10:31:97:9b:18:
         1e:dc:d0:c9:83:73:2a:65:16:71:72:3d:21:99:d0:5b:b7:5a:
         6e:66:cc:0b:e4:f5:a0:61:c0:bb:68:e0:79:0d:8c:5f:98:7d:
         12:89:96:b5:f0:8b:dc:e9:dd:25:a8:96:34:a5:8f:7a:e9:53:
         85:e9:8d:5d:55:34:7a:0e:0c:ad:48:c2:d6:22:08:0a:eb:eb:
         d9:3f:b6:2f:03:49:d1:d1:ab:83:e3:b9:e9:ee:0f:2e:11:c3:
         9a:e0:53:25:8b:4b:57:dc:71:ae:5c:b8:70:f2:5d:b2:c6:5c:
         20:3b:5d:be:3d:91:9b:5e:39:82:56:99:82:69:76:0f:98:61:
         d3:8b:26:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:09:37 2025 by rpki-client