Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/323830343a363932343a3a2f33322d3332203d3e20323730323531.roa
File:                     323830343a363932343a3a2f33322d3332203d3e20323730323531.roa (raw, json)
Hash identifier:          aWXG6+4HnC5WfUnit5iCM0oGRsIzclDIUYqAWOW6OeI=
Subject key identifier:   E0:A3:67:AA:1E:9C:6C:3E:01:4B:CA:E7:20:83:07:E8:2E:F5:C7:89
Certificate issuer:       /CN=07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB
Certificate serial:       3E0D7F92D8DD8A6AC074F01AAE798E90CBBAB165
Authority key identifier: 07:A5:1E:68:F4:8A:D6:E8:24:F4:58:3B:FE:BB:C5:5E:69:D4:DC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/323830343a363932343a3a2f33322d3332203d3e20323730323531.roa
Signing time:             Mon 18 Aug 2025 22:53:39 +0000
ROA not before:           Mon 18 Aug 2025 22:48:39 +0000
ROA not after:            Mon 17 Aug 2026 22:53:39 +0000
asID:                     270251
IP address blocks:        2804:6924::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.crl
                          rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 11:13:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0d:7f:92:d8:dd:8a:6a:c0:74:f0:1a:ae:79:8e:90:cb:ba:b1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB
        Validity
            Not Before: Aug 18 22:48:39 2025 GMT
            Not After : Aug 17 22:53:39 2026 GMT
        Subject: CN=E0A367AA1E9C6C3E014BCAE7208307E82EF5C789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:e0:77:1b:6b:ce:77:99:06:10:8c:23:23:
                    52:7a:b2:c2:89:2a:b6:49:b9:90:8e:75:36:0c:cc:
                    ac:4e:b7:d6:38:62:36:95:a2:da:20:4b:15:87:1b:
                    c9:9f:c0:42:94:92:0b:f3:3c:d7:b0:fe:15:75:43:
                    ba:1b:d9:ce:72:eb:eb:64:7c:69:d3:e3:06:ce:f4:
                    b9:36:c2:1b:2d:71:c2:cf:f4:da:f9:09:86:0b:ae:
                    88:4d:6e:03:b3:8d:62:73:63:d1:c7:f7:c1:e4:cd:
                    c4:79:28:c3:9e:fc:55:7b:72:26:70:a7:ae:2c:e2:
                    ad:09:54:cf:b2:91:5b:54:f9:29:b5:df:7b:ab:e7:
                    a3:ee:6d:59:78:5d:99:9b:8d:23:2d:11:34:61:4d:
                    a1:84:c1:d0:d6:d6:d7:e5:05:ff:cc:81:bb:4e:4f:
                    f9:cf:7b:bd:24:58:63:3d:78:b2:b8:97:7a:e1:a3:
                    c7:4c:75:4c:c9:9d:e3:62:07:fc:a8:ff:f3:61:fa:
                    87:05:71:c3:7c:24:69:7d:77:24:de:21:4a:52:13:
                    1f:d2:28:e3:68:6f:bd:29:58:15:d4:ec:58:e7:60:
                    05:6d:80:be:94:15:46:82:d4:1b:97:01:f9:0d:83:
                    60:0e:8b:ac:cc:b6:c9:42:25:80:38:1a:32:ac:0f:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A3:67:AA:1E:9C:6C:3E:01:4B:CA:E7:20:83:07:E8:2E:F5:C7:89
            X509v3 Authority Key Identifier:
                keyid:07:A5:1E:68:F4:8A:D6:E8:24:F4:58:3B:FE:BB:C5:5E:69:D4:DC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/323830343a363932343a3a2f33322d3332203d3e20323730323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6924::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:12:64:7b:8a:fb:c4:4d:83:82:e0:89:7a:fc:5b:03:3e:b6:
         e7:a9:c2:02:36:d3:5a:7b:3c:ae:3c:f5:37:30:81:a7:fe:31:
         de:81:25:bb:56:11:6b:7f:f1:a7:a1:6a:31:6b:d5:20:89:5c:
         3b:cd:df:b1:d8:7f:7e:88:d1:75:ca:db:00:53:9f:68:c6:dd:
         b5:68:df:cc:54:8d:6f:7e:89:c8:59:d0:07:0f:4e:59:a7:af:
         0c:7b:11:05:25:0b:0c:07:85:6a:b5:1b:46:3b:da:92:fc:66:
         f1:15:39:4b:1b:2f:fa:d2:41:c1:13:08:b5:b0:10:86:c7:11:
         19:b4:d8:72:54:1f:30:21:91:fe:ca:4f:0a:c5:79:ff:f3:e0:
         3a:2a:64:44:3a:ea:95:dc:d4:da:73:6d:c7:cb:3b:cf:c1:7a:
         d4:7f:be:0d:09:6c:a8:f6:eb:08:bb:46:64:ea:4d:54:c7:13:
         44:f8:16:c5:40:1b:5d:ea:d5:6c:45:cb:d4:da:0f:82:85:15:
         d0:46:81:8b:87:3b:3c:95:a3:25:7e:2a:f3:42:45:b0:d4:f8:
         c8:5e:96:d2:25:4d:f8:ec:4c:64:80:40:09:47:69:97:79:f3:
         8d:90:86:29:cb:67:98:cf:31:29:c5:fa:3f:63:ad:6e:e4:8e:
         1c:b3:da:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:16:19 2025 by rpki-client