Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a3a2f33322d3332203d3e203532383230.roa
File:                     323830343a386163303a3a2f33322d3332203d3e203532383230.roa (raw, json)
Hash identifier:          xjodvmfOESeG7BG7WoT2/+dWu/ebHboy097mzsNtjlU=
Subject key identifier:   9F:20:E6:87:39:97:35:56:B3:BE:2F:66:6B:7E:73:FD:1E:B2:3E:E0
Certificate issuer:       /CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
Certificate serial:       2DB3F98E0DEC33FFC43535F921F2E669EF20EE2D
Authority key identifier: 7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a3a2f33322d3332203d3e203532383230.roa
Signing time:             Wed 06 Aug 2025 13:59:42 +0000
ROA not before:           Wed 06 Aug 2025 13:54:42 +0000
ROA not after:            Wed 05 Aug 2026 13:59:42 +0000
asID:                     52820
IP address blocks:        2804:8ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl
                          rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b3:f9:8e:0d:ec:33:ff:c4:35:35:f9:21:f2:e6:69:ef:20:ee:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
        Validity
            Not Before: Aug  6 13:54:42 2025 GMT
            Not After : Aug  5 13:59:42 2026 GMT
        Subject: CN=9F20E68739973556B3BE2F666B7E73FD1EB23EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:4a:3d:b7:4d:7b:77:a6:c0:7b:aa:24:f8:
                    6a:0b:a0:45:aa:ff:ea:44:29:8f:c1:a0:8d:d4:b2:
                    14:6a:0b:2a:60:fe:90:3f:28:ce:58:97:90:19:24:
                    a2:d6:8e:32:7e:88:b7:0d:ae:12:fb:37:98:b0:57:
                    07:27:29:e4:22:1a:1e:72:27:f1:b9:d6:ff:c2:46:
                    15:95:c0:71:14:9b:db:5a:aa:7e:f3:0d:5a:71:c3:
                    de:f2:1f:90:ae:0c:ce:5b:f0:7a:29:10:3e:80:46:
                    5c:e2:86:74:96:80:99:17:c3:b1:bd:69:39:67:1b:
                    44:6c:05:49:21:ea:b8:5c:79:ca:3f:5d:50:f5:90:
                    c8:0a:81:81:c7:8b:e7:20:00:c7:35:4f:a0:7c:d6:
                    43:01:07:06:cc:09:2d:12:7d:aa:57:5e:57:13:14:
                    08:48:cd:27:98:22:ca:fc:ce:09:70:4a:38:b8:01:
                    b9:ab:12:35:86:a2:60:b9:c1:03:8f:b8:d5:85:77:
                    08:c9:7e:24:36:99:a0:c8:5d:d4:58:e2:57:36:a8:
                    8d:41:0d:40:5f:83:b1:89:a5:0c:4c:c5:05:c5:98:
                    cb:ad:48:a7:eb:2c:6d:f8:b8:c6:d9:88:1e:1b:d8:
                    6d:10:87:77:cb:22:70:25:7a:ee:9c:98:13:50:28:
                    3c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:20:E6:87:39:97:35:56:B3:BE:2F:66:6B:7E:73:FD:1E:B2:3E:E0
            X509v3 Authority Key Identifier:
                keyid:7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a3a2f33322d3332203d3e203532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:25:b3:bc:13:dd:fb:6f:b6:0b:63:5d:78:6e:cd:87:02:bd:
         fb:40:38:1f:e5:8b:58:68:4f:4e:c8:f3:7e:45:ea:f3:32:11:
         da:21:a0:2b:a8:13:9d:2e:3a:73:22:b9:1f:61:b7:0d:3a:99:
         f5:9e:ab:c6:0a:4b:5a:ff:46:7e:70:c5:30:3e:93:c4:4b:84:
         e2:a0:5c:3b:c4:4d:78:3a:07:41:9a:92:91:4d:cf:c2:38:c3:
         c2:8e:db:6e:f3:4f:30:9e:48:34:ea:a4:6e:c2:ba:51:7c:f6:
         7f:f2:cb:70:a8:b1:91:65:35:fd:14:92:eb:5b:58:3a:b5:37:
         15:e4:20:0e:53:73:70:4e:2a:57:e9:d9:9b:ed:bd:6e:73:0f:
         8d:ff:5e:28:01:ca:1a:85:f9:1e:9e:37:3d:39:9c:33:8c:21:
         0e:2e:ab:a4:6e:55:9a:13:20:b8:83:37:80:e3:40:9b:93:ab:
         ec:75:9b:78:09:bd:3c:7f:df:ae:de:a9:ee:63:4d:fe:12:79:
         e9:f1:7f:91:80:a3:cc:45:de:6f:f6:bf:5e:a8:98:c1:d5:98:
         f7:c6:cf:e9:d3:4e:a4:77:38:60:7a:2b:83:b4:34:1f:f1:f4:
         34:f0:99:dd:b1:59:4a:db:0a:9a:4e:80:14:16:1e:fb:e8:6b:
         bf:8b:e3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:10:25 2025 by rpki-client