Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a383030303a3a2f33342d3334203d3e203532383230.roa
File:                     323830343a386163303a383030303a3a2f33342d3334203d3e203532383230.roa (raw, json)
Hash identifier:          mG7Ydhb9Tmu/O92yhJIekRYb0GrctTyRnQSWy9CY7g0=
Subject key identifier:   47:A2:25:BE:E2:90:12:B5:30:1E:8A:73:9D:D2:D7:B0:4C:BD:22:FC
Certificate issuer:       /CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
Certificate serial:       75D20D7CC7B4EA88A660A70860841EA28CA245B2
Authority key identifier: 7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a383030303a3a2f33342d3334203d3e203532383230.roa
Signing time:             Wed 06 Aug 2025 13:59:41 +0000
ROA not before:           Wed 06 Aug 2025 13:54:41 +0000
ROA not after:            Wed 05 Aug 2026 13:59:41 +0000
asID:                     52820
IP address blocks:        2804:8ac0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl
                          rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d2:0d:7c:c7:b4:ea:88:a6:60:a7:08:60:84:1e:a2:8c:a2:45:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
        Validity
            Not Before: Aug  6 13:54:41 2025 GMT
            Not After : Aug  5 13:59:41 2026 GMT
        Subject: CN=47A225BEE29012B5301E8A739DD2D7B04CBD22FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:59:34:11:b2:02:4c:a7:42:a8:fd:c4:a1:
                    62:18:aa:3c:ff:80:b7:50:78:f2:d5:a2:39:56:3e:
                    8b:05:5a:75:5c:59:f1:61:18:69:f8:a7:df:88:a6:
                    45:51:9c:f6:b6:a5:2c:b3:15:b0:54:16:0b:1f:5f:
                    22:c8:99:79:c7:f6:54:1d:fc:39:f4:95:39:87:7b:
                    b6:7e:ed:cf:36:9c:16:e0:eb:17:7b:0c:13:37:c0:
                    59:4e:e2:e5:84:47:ee:e8:7f:f6:35:42:cd:d0:12:
                    51:b6:c0:5a:5d:d5:12:52:b4:5d:5e:70:6f:0c:2c:
                    c8:6f:55:2f:b1:44:05:f9:cc:88:a2:d3:f6:1a:a5:
                    1a:c1:2e:b2:32:9f:ad:3f:38:1b:00:7a:a0:b9:48:
                    99:5d:ff:7b:4f:65:10:8a:ae:1c:b1:59:ef:81:44:
                    ed:cd:bf:07:94:46:05:26:f3:8b:74:e5:30:58:49:
                    60:42:11:17:cf:15:ee:49:04:4c:e1:a8:ba:e1:0e:
                    52:f3:0e:e3:c6:58:76:51:d9:3b:64:0d:c9:94:e8:
                    58:bc:9c:58:f4:ec:2c:57:0b:56:ff:d0:f7:b1:da:
                    9e:2e:b1:95:78:38:aa:ca:d3:86:7d:c5:a1:55:bf:
                    f1:49:48:38:23:d5:15:b9:84:76:42:53:2f:cf:28:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A2:25:BE:E2:90:12:B5:30:1E:8A:73:9D:D2:D7:B0:4C:BD:22:FC
            X509v3 Authority Key Identifier:
                keyid:7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a383030303a3a2f33342d3334203d3e203532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ac0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         35:ca:17:7b:70:9f:00:bc:cf:27:8b:b4:2c:69:73:3e:78:fe:
         b0:08:89:70:26:fd:64:f9:23:7f:39:c5:99:6c:0c:e9:da:38:
         41:4c:b3:71:3a:f4:c1:fd:2c:80:0a:21:03:6f:e0:c4:e1:04:
         f4:33:f9:0d:18:f0:60:10:4a:47:7f:46:d8:35:01:24:c0:08:
         b3:b8:9b:e7:57:2c:15:c7:24:f6:0b:ee:13:0a:66:63:e5:93:
         6b:09:96:b4:97:31:ef:1f:3e:1c:86:65:8f:f3:69:a2:e4:c3:
         10:f7:67:f7:0a:f5:33:6e:4f:93:0e:e6:9c:c1:df:c6:30:07:
         2f:c7:d0:e5:1e:f2:0d:4d:f0:24:ab:a7:20:21:5f:f8:90:c4:
         ad:3a:cd:cc:42:0c:c9:e5:ab:4c:73:6b:07:5d:cb:ce:e3:37:
         5b:43:eb:89:d3:7b:d4:e0:94:df:c6:ff:7a:16:f5:db:bc:c5:
         0d:ad:d8:57:f7:5e:9e:86:51:21:30:40:ee:4e:1c:8d:ae:30:
         b9:5a:92:65:e1:e4:49:30:49:0b:7d:e0:1e:88:43:86:ee:9b:
         04:ae:dd:07:4f:7a:ae:c8:37:0d:04:88:73:09:00:aa:ab:1e:
         e5:57:52:f9:8e:ad:92:ad:22:b4:10:f0:d1:ea:9f:d1:86:37:
         ad:55:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:10:25 2025 by rpki-client