Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3130303a3a2f34302d3430203d3e20323632343234.roa
File:                     323830343a363136343a3130303a3a2f34302d3430203d3e20323632343234.roa (raw, json)
Hash identifier:          n/A7WyU2lm0sIulE6A2j5fcMx4tc9QfQy0CFRQlIueQ=
Subject key identifier:   E9:10:F8:4C:3E:F3:74:CF:2C:E3:F4:D3:13:A9:79:7F:E9:84:0A:C8
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       1AC360B66E7C20CD54F9789CE163527E3A204602
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3130303a3a2f34302d3430203d3e20323632343234.roa
Signing time:             Thu 14 Aug 2025 20:26:55 +0000
ROA not before:           Thu 14 Aug 2025 20:21:55 +0000
ROA not after:            Thu 13 Aug 2026 20:26:55 +0000
asID:                     262424
IP address blocks:        2804:6164:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 22:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c3:60:b6:6e:7c:20:cd:54:f9:78:9c:e1:63:52:7e:3a:20:46:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: Aug 14 20:21:55 2025 GMT
            Not After : Aug 13 20:26:55 2026 GMT
        Subject: CN=E910F84C3EF374CF2CE3F4D313A9797FE9840AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:30:84:1d:1a:fd:8d:86:93:cd:4f:7e:b1:
                    3b:3c:7f:4c:e2:76:b0:b8:3c:25:42:92:a0:86:08:
                    11:3f:ff:35:41:50:11:99:31:2c:1c:f4:87:80:42:
                    86:cc:8e:8a:41:94:f0:88:4d:5c:19:85:49:b0:02:
                    86:fe:15:51:0c:64:47:5b:12:35:4e:5c:84:d5:2b:
                    fa:9f:09:f3:f3:2b:7d:a4:cc:bc:b2:8e:e0:1e:c5:
                    d5:7c:c2:7b:fb:ac:0a:f6:ce:99:a1:b9:bb:9f:14:
                    12:94:de:13:7d:99:b0:28:29:9e:8e:82:12:8b:9e:
                    82:a6:df:06:ed:ce:bc:93:32:41:d3:7a:73:c6:cb:
                    11:da:0f:f9:c1:7f:65:a4:94:8c:e9:24:33:21:a7:
                    a9:ee:b2:09:27:c1:15:36:46:8e:26:9a:4f:e0:01:
                    3f:e0:22:04:a6:9d:d5:28:b8:80:4e:8d:67:5b:fb:
                    60:4c:ab:4f:62:dc:e1:0f:83:1c:54:17:49:6b:45:
                    d1:18:64:1a:b7:a2:c0:1b:49:99:b0:59:55:d3:01:
                    11:d9:14:9d:bd:c1:24:7a:c9:96:f1:dd:95:c0:f2:
                    99:25:04:63:cf:ec:f6:b5:2d:f9:50:48:4e:f5:30:
                    af:35:00:01:98:d6:87:0a:77:84:53:d5:a5:37:a7:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:10:F8:4C:3E:F3:74:CF:2C:E3:F4:D3:13:A9:79:7F:E9:84:0A:C8
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3130303a3a2f34302d3430203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:68:9e:20:e9:6a:c1:e8:eb:b6:f8:c0:c4:fe:29:55:d2:d8:
         07:5c:ec:72:0c:05:2c:7e:5d:91:ed:a4:fa:9b:ac:95:97:f0:
         d5:8e:df:67:da:44:d9:29:35:8d:26:b7:a3:06:ba:96:cf:97:
         00:87:24:95:97:3a:b1:f9:92:c0:1a:38:90:82:79:af:43:ca:
         12:4c:89:ad:0c:0a:ff:98:5d:52:ba:a8:ac:32:98:27:70:20:
         82:e8:5c:05:9e:cf:0e:31:bf:69:f7:92:12:dd:93:06:12:5c:
         3e:b9:9d:ff:fa:36:84:76:63:96:0c:47:f6:c0:50:d0:b4:57:
         3d:21:24:1a:54:e5:67:12:5b:e4:92:e4:c9:ca:8e:4c:f7:1e:
         7a:ab:47:e4:81:ee:95:22:2d:44:58:66:ad:42:a4:a0:15:c8:
         28:e2:7d:67:1d:42:92:c4:a7:f3:d2:3b:09:f1:d1:5f:99:b0:
         f2:6a:b4:59:b3:72:f7:cf:6e:7f:00:a6:9d:04:75:af:a3:05:
         f3:e3:77:fa:73:e2:1e:9e:cc:5b:46:e6:bb:70:50:d9:16:7b:
         a6:a5:e3:3f:8f:10:3d:71:41:15:c1:75:51:b0:7c:16:cb:5e:
         f5:38:14:eb:df:2a:df:73:3d:92:56:8a:7b:4f:c8:fe:af:a8:
         43:f1:e8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:09:39 2025 by rpki-client