Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383037303a3a2f34342d3434203d3e20323634353039.roa
File:                     323830343a323062343a383037303a3a2f34342d3434203d3e20323634353039.roa (raw, json)
Hash identifier:          2QBeBB5Yjfw4Gr2qjFxuus5nXt9v+QRV8Qat9YzhdtY=
Subject key identifier:   1B:89:C7:8A:ED:55:AE:CA:30:54:AA:05:77:B5:C2:C5:4B:77:FA:DB
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       622BA8896C857AB499D58AF51408875DBBDBF20F
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383037303a3a2f34342d3434203d3e20323634353039.roa
Signing time:             Mon 18 Aug 2025 12:44:02 +0000
ROA not before:           Mon 18 Aug 2025 12:39:02 +0000
ROA not after:            Mon 17 Aug 2026 12:44:02 +0000
asID:                     264509
IP address blocks:        2804:20b4:8070::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2b:a8:89:6c:85:7a:b4:99:d5:8a:f5:14:08:87:5d:bb:db:f2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Aug 18 12:39:02 2025 GMT
            Not After : Aug 17 12:44:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:35:a1:71:ea:fd:3b:ba:4c:6f:9a:86:49:f8:
                    46:cd:fa:47:fc:cc:b6:d7:87:a8:2a:93:b7:d0:d0:
                    af:85:a1:0f:01:7a:88:36:6e:33:8e:4c:16:ed:8a:
                    39:62:e0:78:6f:93:a3:d3:6a:06:61:96:c8:6f:51:
                    b0:e3:e3:42:4d:fb:54:f4:02:89:91:9a:a8:99:74:
                    7f:10:29:45:1f:49:eb:10:be:fe:63:b0:e5:cb:dd:
                    1d:83:27:57:e3:7b:a4:9b:59:27:cf:17:cf:c0:0d:
                    a6:b5:c7:97:f9:7a:a9:37:3a:39:c5:7f:0c:34:e0:
                    73:9e:91:fc:aa:29:31:c8:82:da:99:92:19:c9:f9:
                    96:3a:b2:c1:c8:3c:8d:f8:80:45:c2:90:ed:1a:c2:
                    54:ad:40:2f:af:e8:71:15:4e:d5:a3:1f:9e:67:c9:
                    c2:58:15:0f:c8:0f:28:7b:df:13:50:06:e5:a3:16:
                    e1:53:4f:a1:5b:bc:27:98:01:28:c6:b0:b3:c6:d6:
                    cc:84:fb:9b:bf:b3:37:8b:09:e6:59:b3:b2:55:6c:
                    93:07:5d:27:87:d5:cb:b1:b2:b4:4c:79:97:74:78:
                    a8:ad:f6:f4:e7:10:82:a9:11:55:1a:57:1c:65:87:
                    83:d5:67:d3:65:4f:04:a8:7b:c0:e6:6a:80:44:e7:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:89:C7:8A:ED:55:AE:CA:30:54:AA:05:77:B5:C2:C5:4B:77:FA:DB
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383037303a3a2f34342d3434203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:8070::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:4e:dc:97:1a:5f:68:14:e0:da:21:78:d9:bf:20:ec:a9:26:
         15:c9:c4:99:55:7f:c7:32:a0:f6:91:dd:6d:da:2b:92:9c:06:
         7c:f5:e8:3c:93:10:86:e2:04:4d:5f:45:da:bc:95:b8:f5:03:
         90:19:5a:e2:4f:d0:cc:45:60:22:52:41:cc:94:75:04:1b:bc:
         3f:be:59:db:a6:b9:03:f2:98:21:ce:02:03:da:be:e1:f1:9f:
         de:e0:a3:1c:e0:fe:d7:54:21:e5:eb:81:41:85:a5:88:05:df:
         ac:14:39:58:aa:51:4d:38:6b:1f:3e:ff:04:74:b5:c7:04:46:
         cb:f4:89:56:df:62:48:07:36:78:0d:b6:c8:9e:a6:00:d5:28:
         8f:03:ae:ca:e0:cb:46:c4:9a:20:18:d0:68:10:f9:d8:49:e2:
         f1:59:99:9b:36:f0:9b:58:db:44:be:c7:f2:9f:2a:99:2f:0a:
         d4:9e:2e:22:b2:23:8d:8e:77:5a:12:5c:91:62:87:71:ad:b8:
         6a:c0:fb:e5:9f:8d:9d:2e:8e:c9:d4:c6:4b:f3:6c:35:39:50:
         b1:4a:a4:2e:fb:8b:58:fc:5b:cc:26:c9:b1:ae:5d:b5:22:e5:
         fb:f0:0d:f3:16:59:bd:e4:4e:7f:b3:bc:ba:db:b9:f4:1f:dd:
         67:0d:4c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 00:23:25 2025 by rpki-client