Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383032303a3a2f34342d3434203d3e20323634353039.roa
File:                     323830343a323062343a383032303a3a2f34342d3434203d3e20323634353039.roa (raw, json)
Hash identifier:          7Vj/q7+th8SAKv77Lmcn4Yk+s79RcvIwLpK7L0XJEF8=
Subject key identifier:   FD:57:B4:E4:66:E1:3D:44:CA:A8:D3:30:01:6B:F5:D7:D0:49:ED:9A
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       7C661E6BC7DB767D40CE572843637ADA96F606B7
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383032303a3a2f34342d3434203d3e20323634353039.roa
Signing time:             Tue 29 Jul 2025 17:00:00 +0000
ROA not before:           Tue 29 Jul 2025 16:55:00 +0000
ROA not after:            Tue 28 Jul 2026 17:00:00 +0000
asID:                     264509
IP address blocks:        2804:20b4:8020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:66:1e:6b:c7:db:76:7d:40:ce:57:28:43:63:7a:da:96:f6:06:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Jul 29 16:55:00 2025 GMT
            Not After : Jul 28 17:00:00 2026 GMT
        Subject: CN=3082010A0282010100CCD0CF358471D4A07627A8C6189DE32F79B92319726111E59050C0D0D533503C7932D320DA2C4824E62DBA1C50C0B351A8A0378B1A9DBD71B4BA3FDB74716FAAD46F03AA8F16762666A7857AEA257F6C4423CEBE100ECDD27C874AF0D354DD0B0DBE9CBBC73B7A3473B01AE16522AD70FCFC2FBD644108340E68456FCD6F1C6D72506E0481E452628891F5F2BF7A1B452EB5C40D85F422384DAAF5ABA639A5673666867B54D1EA970B919DAE7D75B5E7DE36B871D2D3DABD7BE3BA4EF6A24982042CE651E97F81D1748CE4999E921D97A5545EC1D6DEDD3465A20FCA889A6CE678A65DFD382683177E54757527DF59F4F13D8C9362ADD8B5030345C31B9A3C130203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:cf:35:84:71:d4:a0:76:27:a8:c6:18:9d:
                    e3:2f:79:b9:23:19:72:61:11:e5:90:50:c0:d0:d5:
                    33:50:3c:79:32:d3:20:da:2c:48:24:e6:2d:ba:1c:
                    50:c0:b3:51:a8:a0:37:8b:1a:9d:bd:71:b4:ba:3f:
                    db:74:71:6f:aa:d4:6f:03:aa:8f:16:76:26:66:a7:
                    85:7a:ea:25:7f:6c:44:23:ce:be:10:0e:cd:d2:7c:
                    87:4a:f0:d3:54:dd:0b:0d:be:9c:bb:c7:3b:7a:34:
                    73:b0:1a:e1:65:22:ad:70:fc:fc:2f:bd:64:41:08:
                    34:0e:68:45:6f:cd:6f:1c:6d:72:50:6e:04:81:e4:
                    52:62:88:91:f5:f2:bf:7a:1b:45:2e:b5:c4:0d:85:
                    f4:22:38:4d:aa:f5:ab:a6:39:a5:67:36:66:86:7b:
                    54:d1:ea:97:0b:91:9d:ae:7d:75:b5:e7:de:36:b8:
                    71:d2:d3:da:bd:7b:e3:ba:4e:f6:a2:49:82:04:2c:
                    e6:51:e9:7f:81:d1:74:8c:e4:99:9e:92:1d:97:a5:
                    54:5e:c1:d6:de:dd:34:65:a2:0f:ca:88:9a:6c:e6:
                    78:a6:5d:fd:38:26:83:17:7e:54:75:75:27:df:59:
                    f4:f1:3d:8c:93:62:ad:d8:b5:03:03:45:c3:1b:9a:
                    3c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:57:B4:E4:66:E1:3D:44:CA:A8:D3:30:01:6B:F5:D7:D0:49:ED:9A
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383032303a3a2f34342d3434203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:8020::/44

    Signature Algorithm: sha256WithRSAEncryption
         61:f8:a9:39:da:ad:4c:88:bc:6a:4b:c3:ab:e4:d9:8b:03:56:
         27:94:02:69:07:b4:9d:8b:c4:d2:95:99:2a:a4:52:3e:49:a1:
         43:aa:60:52:e4:1d:12:d9:78:47:78:36:de:2a:a1:d9:1f:c4:
         58:31:28:89:f8:82:cc:dd:31:2a:13:03:07:0e:7f:6c:c5:f0:
         02:e2:a9:81:43:37:6e:ad:91:5c:17:b8:18:23:29:40:99:22:
         b8:4b:68:c4:78:ba:25:21:ff:10:ae:81:19:77:21:38:eb:ca:
         28:0c:d6:76:ec:85:71:00:de:9a:68:04:76:f5:39:4e:ca:b2:
         14:ee:06:a8:07:b6:40:71:f1:97:7b:b5:45:c7:18:2d:e9:1c:
         66:80:db:f5:ae:47:b5:a4:96:74:78:1e:46:a4:40:e4:12:ff:
         26:59:dc:22:9e:b2:69:22:bb:ad:85:6f:d1:40:8b:fe:83:d0:
         d4:ae:ac:ee:63:5d:8d:6d:9a:4e:e6:a0:71:8e:e3:41:2f:58:
         8a:05:c2:cf:54:4c:0e:50:37:0d:1c:df:8e:2b:4a:be:05:d6:
         7b:f0:a3:30:1f:23:8a:5e:ee:45:87:ee:ab:df:2a:fb:67:92:
         ce:af:82:2f:0d:27:2c:94:2e:95:02:ce:94:6e:67:9e:77:92:
         64:b1:3a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 00:23:26 2025 by rpki-client