Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa
File:                     323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa (raw, json)
Hash identifier:          PsG/KbNUa3nKz87y+qnxaBmbAh/4v58jK3L06h+VOiI=
Subject key identifier:   B7:00:48:9F:A4:1C:2D:CA:FF:15:5F:A4:96:77:6A:3D:22:73:09:AB
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       6050A45CD884BAD8D5B86021C23CB75669210A09
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa
Signing time:             Mon 14 Jul 2025 18:00:02 +0000
ROA not before:           Mon 14 Jul 2025 17:55:02 +0000
ROA not after:            Mon 13 Jul 2026 18:00:02 +0000
asID:                     267121
IP address blocks:        2804:4870:3000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:50:a4:5c:d8:84:ba:d8:d5:b8:60:21:c2:3c:b7:56:69:21:0a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Jul 14 17:55:02 2025 GMT
            Not After : Jul 13 18:00:02 2026 GMT
        Subject: CN=3082010A0282010100CF0681FFF3F74FEB0E6E04C0F4FF13FE581D103D569F003CF34EDD68E5993359305850217DF37BA8536EB0B084D904C576CDEB1250C9BC5F4665C83016D0F00E484F252EA2F6D726034D712DE0D098ECDC84FC79962F1385F162CA7039EBF3DB61E7C0FE8050EDE4BEB685E1FD3AEEAC7BA43056D45982B7B2C7667BB331171EE9623BDDD64C8D73276C224F30EBB67FD7EE87F23C65CAA0FFF8261068EDA7812A3C9EA82DD52635512EF6088403E6B654F396B71D18F841589FB47933500B22C11DD17FD0EBF4C885260226C250AFEE892BEC666C6E2685524A2C028BF1672F57578151E1286E161902663A282B20FF6CB462EBEB1860DAB5E9D42DFC5EA9F50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:81:ff:f3:f7:4f:eb:0e:6e:04:c0:f4:ff:
                    13:fe:58:1d:10:3d:56:9f:00:3c:f3:4e:dd:68:e5:
                    99:33:59:30:58:50:21:7d:f3:7b:a8:53:6e:b0:b0:
                    84:d9:04:c5:76:cd:eb:12:50:c9:bc:5f:46:65:c8:
                    30:16:d0:f0:0e:48:4f:25:2e:a2:f6:d7:26:03:4d:
                    71:2d:e0:d0:98:ec:dc:84:fc:79:96:2f:13:85:f1:
                    62:ca:70:39:eb:f3:db:61:e7:c0:fe:80:50:ed:e4:
                    be:b6:85:e1:fd:3a:ee:ac:7b:a4:30:56:d4:59:82:
                    b7:b2:c7:66:7b:b3:31:17:1e:e9:62:3b:dd:d6:4c:
                    8d:73:27:6c:22:4f:30:eb:b6:7f:d7:ee:87:f2:3c:
                    65:ca:a0:ff:f8:26:10:68:ed:a7:81:2a:3c:9e:a8:
                    2d:d5:26:35:51:2e:f6:08:84:03:e6:b6:54:f3:96:
                    b7:1d:18:f8:41:58:9f:b4:79:33:50:0b:22:c1:1d:
                    d1:7f:d0:eb:f4:c8:85:26:02:26:c2:50:af:ee:89:
                    2b:ec:66:6c:6e:26:85:52:4a:2c:02:8b:f1:67:2f:
                    57:57:81:51:e1:28:6e:16:19:02:66:3a:28:2b:20:
                    ff:6c:b4:62:eb:eb:18:60:da:b5:e9:d4:2d:fc:5e:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:00:48:9F:A4:1C:2D:CA:FF:15:5F:A4:96:77:6A:3D:22:73:09:AB
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:7b:1b:c0:7f:2c:5a:52:0a:fa:43:5e:df:ef:a1:d5:26:cc:
         3a:ab:27:13:e9:50:40:d9:00:23:fb:8f:3c:be:ef:0e:be:f8:
         14:07:73:7e:c5:d3:37:d3:88:74:32:23:d5:93:09:06:ea:13:
         79:7d:b3:80:70:71:99:e4:21:b7:b0:a3:f0:f0:1f:a7:e0:f9:
         40:25:e6:65:ab:b0:cf:c0:7a:1d:9b:ff:99:cc:54:8f:ce:58:
         a8:e6:06:4c:8e:d0:1f:37:23:00:b7:8b:36:83:39:f8:9b:31:
         e0:d6:61:dc:8c:07:fa:2c:37:0e:c7:28:9a:af:65:dd:29:88:
         46:b1:a8:73:24:50:1c:43:94:7c:a3:10:9c:ed:a4:32:23:1b:
         9e:7c:65:7b:59:c8:c6:b0:d7:e9:fc:33:4b:c0:2f:09:da:e4:
         aa:ff:2e:03:f7:eb:1a:f0:83:ce:d9:a2:10:43:df:f8:05:bc:
         87:97:0b:c2:b8:2f:c5:ca:7b:60:f3:29:d3:b3:67:a8:7a:61:
         62:35:b7:7f:8b:33:00:e3:9d:d5:df:7b:73:d2:af:ca:e3:ce:
         6a:5c:ad:b3:4d:41:88:bc:94:56:0a:26:3e:cc:db:15:3b:e5:
         36:19:04:94:e2:47:7f:d7:86:cb:c4:e0:3b:5d:0d:07:21:51:
         d6:ae:12:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:36:25 2025 by rpki-client