Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3a2f33322d3332203d3e20323637313231.roa
File:                     323830343a343837303a3a2f33322d3332203d3e20323637313231.roa (raw, json)
Hash identifier:          wBg7OLAC+U5rb0dz2JZauuXhMzmWVbds76u/zhua/YE=
Subject key identifier:   6B:5C:A7:22:6C:11:5A:F4:46:F7:6D:DF:68:F8:12:B9:2A:4E:C1:4E
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       79CB42D50F7912400A90443E575BE476CE0DC40D
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3a2f33322d3332203d3e20323637313231.roa
Signing time:             Mon 14 Jul 2025 18:00:01 +0000
ROA not before:           Mon 14 Jul 2025 17:55:01 +0000
ROA not after:            Mon 13 Jul 2026 18:00:01 +0000
asID:                     267121
IP address blocks:        2804:4870::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cb:42:d5:0f:79:12:40:0a:90:44:3e:57:5b:e4:76:ce:0d:c4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Jul 14 17:55:01 2025 GMT
            Not After : Jul 13 18:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6f:75:ca:f8:54:dc:30:43:c4:f3:16:4e:13:
                    fe:16:f2:05:30:00:03:72:0c:65:e4:ee:10:ea:e6:
                    91:09:3d:be:4a:3d:50:57:40:c7:cc:b0:fd:28:b9:
                    23:b7:1a:86:9e:b2:cc:4d:ea:9f:5b:5b:4f:e1:f8:
                    a3:86:3f:5f:79:ba:be:30:1c:01:5e:23:9d:8e:e8:
                    41:55:ad:11:04:8b:26:08:52:a0:b8:d9:8e:e0:32:
                    7e:03:b6:a0:28:08:0f:e9:35:fd:69:39:f6:41:8f:
                    cb:23:56:f0:d3:09:60:e8:19:1e:0d:28:cc:67:d9:
                    37:da:5d:cf:c6:93:a8:fc:5d:ca:40:6a:c3:8b:aa:
                    be:ea:21:5b:de:bc:ee:ad:63:6f:83:a7:de:a9:8d:
                    2d:68:3c:1d:fe:b7:b9:f2:2f:b1:1f:63:f2:4b:c6:
                    00:b1:b5:46:ac:85:af:37:aa:4c:14:ab:56:00:a0:
                    bd:75:2d:bd:c0:7b:c5:b0:30:71:c1:6d:58:3c:3f:
                    e7:a3:1f:d3:3d:ee:0b:73:42:25:42:8a:fe:af:e0:
                    8a:68:4f:b8:76:cc:c7:6a:4f:5e:76:d7:3f:71:d5:
                    19:8c:7f:49:09:76:2f:88:a7:7c:1d:98:bf:3d:23:
                    cd:b6:32:67:e3:2b:d8:e4:8d:92:33:a7:74:61:d2:
                    56:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5C:A7:22:6C:11:5A:F4:46:F7:6D:DF:68:F8:12:B9:2A:4E:C1:4E
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3a2f33322d3332203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:9e:9e:f3:df:39:32:cd:fd:f7:bd:4e:8d:d8:ef:7c:2b:
         89:ff:84:73:be:ea:fa:1c:82:e9:31:3d:e2:27:6f:4e:f7:92:
         d8:04:6c:f8:bc:0f:09:79:e8:12:b0:f1:f5:71:ec:cb:49:cc:
         5e:25:ad:9b:b7:64:68:d3:8c:0e:55:eb:fe:e1:8d:b0:e2:b8:
         d8:83:47:3f:40:c4:92:ce:d0:c1:70:04:ea:9b:6a:f5:59:b0:
         fd:a2:ab:f7:1c:82:79:9e:ef:16:51:0b:3d:22:23:7b:1e:61:
         6c:e6:e2:fb:77:bd:3f:64:9b:8b:d1:07:8a:55:fb:2b:ca:b2:
         34:50:dd:b2:5a:ad:95:85:2f:86:f5:21:fa:42:00:70:d0:fc:
         1c:15:b0:89:11:2b:f2:43:a5:84:f7:66:20:fe:aa:54:dd:5e:
         86:b3:34:31:28:16:58:df:c0:c6:b1:4f:33:c6:0f:8d:93:92:
         88:67:6d:d6:0b:d3:08:cc:73:17:fa:e9:33:14:df:d8:19:69:
         82:8f:03:ab:97:90:a9:84:12:33:00:58:50:71:00:37:0b:03:
         b6:c4:8c:87:e3:85:b5:c5:d7:8d:e4:b6:af:29:8e:b8:f0:bf:
         78:e1:82:82:30:32:66:4c:2f:a1:9c:bf:1c:61:aa:2b:e8:39:
         04:07:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:33:09 2025 by rpki-client