Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/323830343a366532383a3a2f33322d3332203d3e20323730353739.roa
File:                     323830343a366532383a3a2f33322d3332203d3e20323730353739.roa (raw, json)
Hash identifier:          s/pOYzzlDTE7gohX2JaXcio+rhrpzHZoU05RZCWSYIY=
Subject key identifier:   88:85:82:2F:CD:70:F2:DE:1E:78:20:68:EC:1F:54:BC:6A:15:E5:C2
Certificate issuer:       /CN=F369B880738FA6C66F931D123DE6542D4B42FD29
Certificate serial:       3848CD6347C8F98A5DB9F77B11E8A3110F97CE63
Authority key identifier: F3:69:B8:80:73:8F:A6:C6:6F:93:1D:12:3D:E6:54:2D:4B:42:FD:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/323830343a366532383a3a2f33322d3332203d3e20323730353739.roa
Signing time:             Mon 21 Jul 2025 15:57:40 +0000
ROA not before:           Mon 21 Jul 2025 15:52:40 +0000
ROA not after:            Mon 20 Jul 2026 15:57:40 +0000
asID:                     270579
IP address blocks:        2804:6e28::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.crl
                          rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:48:cd:63:47:c8:f9:8a:5d:b9:f7:7b:11:e8:a3:11:0f:97:ce:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B880738FA6C66F931D123DE6542D4B42FD29
        Validity
            Not Before: Jul 21 15:52:40 2025 GMT
            Not After : Jul 20 15:57:40 2026 GMT
        Subject: CN=8885822FCD70F2DE1E782068EC1F54BC6A15E5C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:b5:1c:5b:f3:55:ee:65:bd:4e:f4:74:e3:
                    5f:2e:74:8c:4b:77:61:b2:fa:0b:b5:73:35:36:96:
                    8c:e4:ef:46:19:d5:4b:13:10:31:14:db:a5:f7:30:
                    43:80:21:b3:90:16:6f:8f:a2:27:bd:67:49:4e:41:
                    94:60:fe:7b:52:ef:b4:25:aa:2d:54:82:4b:80:c3:
                    dd:42:fe:2d:da:3b:5a:4e:6c:60:03:f1:99:a9:13:
                    72:b1:c7:2f:ee:cd:ed:9f:85:2b:5a:2c:18:e0:48:
                    77:a9:f5:22:9b:49:2c:d7:cd:10:c0:8d:9f:54:1f:
                    02:80:6e:95:fc:26:2c:84:36:bc:6d:8e:15:7e:1f:
                    c2:33:bd:83:f9:c0:15:55:59:67:97:a4:0b:a5:16:
                    30:c5:2f:d3:87:02:90:32:00:ab:4e:c0:02:27:63:
                    3b:a6:5e:a8:a6:9b:2c:cf:b1:cf:10:18:0e:c6:2c:
                    b2:0b:89:61:c5:f7:4f:8c:ee:af:f1:33:12:88:4c:
                    73:27:bd:d6:5d:4f:39:05:dd:8e:7f:52:56:70:91:
                    86:e5:9f:13:10:c8:c3:ec:1f:c6:10:03:44:33:80:
                    98:5a:ed:ac:80:3f:31:1c:43:36:6e:4e:a9:30:3c:
                    94:ad:88:0f:0d:50:ba:51:dc:91:fb:b1:cf:b0:58:
                    c3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:85:82:2F:CD:70:F2:DE:1E:78:20:68:EC:1F:54:BC:6A:15:E5:C2
            X509v3 Authority Key Identifier:
                keyid:F3:69:B8:80:73:8F:A6:C6:6F:93:1D:12:3D:E6:54:2D:4B:42:FD:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/323830343a366532383a3a2f33322d3332203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:ef:55:6f:49:ee:19:58:1e:a7:f1:34:86:bc:1b:78:1e:1f:
         ec:17:e8:9b:83:4a:6a:9c:ae:6e:d5:ab:11:40:e7:c3:bd:91:
         d5:38:32:51:fc:c7:5a:76:44:a9:94:00:10:25:a2:e1:95:26:
         a0:be:9b:50:7b:47:a0:40:22:9e:6a:07:ea:86:71:31:34:5d:
         cf:36:fd:cb:08:ec:c9:fb:1d:2a:19:a6:4d:7e:d4:f9:42:39:
         b1:03:20:96:6f:cb:46:05:20:4e:43:9d:fc:a0:c2:79:62:d5:
         ea:f4:9f:6b:91:70:d1:c3:03:e6:3c:d4:f9:80:c0:96:76:a4:
         c8:4e:46:e7:22:36:39:0f:9e:d7:e4:3d:f1:c5:63:ee:94:40:
         4d:09:16:b0:ac:3e:5a:16:9d:09:ff:ef:b8:b5:05:1a:99:16:
         ec:30:af:e7:0a:09:49:bb:63:c6:ef:ed:60:9e:f0:46:72:fa:
         da:53:04:1a:c8:cf:c9:f5:fa:f7:d8:51:59:37:e2:e3:86:1a:
         c9:8e:4e:89:b8:87:b5:b0:44:64:a6:2f:53:6e:74:44:63:5e:
         b2:a4:2f:0b:48:de:08:e3:74:13:c9:df:6b:99:c7:be:ed:7d:
         9b:b7:26:9c:1f:f2:68:7d:0d:1e:31:5f:df:e7:d3:e9:4d:52:
         1c:8b:a7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:43:43 2025 by rpki-client