Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/323830343a313663633a3a2f33322d3438203d3e203631393137.roa
File:                     323830343a313663633a3a2f33322d3438203d3e203631393137.roa (raw, json)
Hash identifier:          f0u9sRMdArmGcQGj3CPKu88kOw32SJAhw5oZT9XUkgE=
Subject key identifier:   D4:BE:66:B7:FF:EF:A6:EE:A4:79:B5:86:5F:3C:28:B9:6C:84:62:A2
Certificate issuer:       /CN=2B9866B6675820B4CEA1CD085C75C53F640B6695
Certificate serial:       0E0A8EA85DFEF46C212F2C0D603345CD4647062E
Authority key identifier: 2B:98:66:B6:67:58:20:B4:CE:A1:CD:08:5C:75:C5:3F:64:0B:66:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9866B6675820B4CEA1CD085C75C53F640B6695.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/323830343a313663633a3a2f33322d3438203d3e203631393137.roa
Signing time:             Thu 31 Jul 2025 18:00:23 +0000
ROA not before:           Thu 31 Jul 2025 17:55:23 +0000
ROA not after:            Thu 30 Jul 2026 18:00:23 +0000
asID:                     61917
IP address blocks:        2804:16cc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/2B9866B6675820B4CEA1CD085C75C53F640B6695.crl
                          rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/2B9866B6675820B4CEA1CD085C75C53F640B6695.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9866B6675820B4CEA1CD085C75C53F640B6695.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 09:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0a:8e:a8:5d:fe:f4:6c:21:2f:2c:0d:60:33:45:cd:46:47:06:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B9866B6675820B4CEA1CD085C75C53F640B6695
        Validity
            Not Before: Jul 31 17:55:23 2025 GMT
            Not After : Jul 30 18:00:23 2026 GMT
        Subject: CN=D4BE66B7FFEFA6EEA479B5865F3C28B96C8462A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:3e:68:ad:d6:c1:40:73:85:02:ce:08:88:
                    6a:db:57:e8:c8:cc:25:0b:7f:2a:62:19:6d:ee:6d:
                    fd:5e:11:f6:78:7e:07:81:2c:d4:25:a9:09:48:10:
                    bc:e4:0f:5b:73:15:71:97:28:21:6f:b3:d7:9a:c2:
                    25:fc:b4:97:7a:14:6e:a5:1b:94:fd:34:5c:bb:f1:
                    f0:43:45:fb:cf:6f:23:99:06:94:8b:16:51:bf:df:
                    b3:6c:bc:33:f1:b1:bf:96:f2:de:93:a9:52:54:12:
                    ce:c3:9a:04:54:78:d5:71:62:d2:68:31:79:68:82:
                    22:11:4f:cf:c7:34:ef:3c:56:6f:18:18:33:3d:c0:
                    2d:84:6f:7a:fc:4c:51:8d:09:f2:6a:6f:46:a1:54:
                    b7:f2:df:3c:48:87:19:de:94:fa:95:86:bc:6c:ca:
                    62:1c:a6:00:e6:7f:77:53:2c:dc:66:18:2a:95:67:
                    ab:64:00:31:52:a7:71:c6:82:f9:52:89:35:5c:ec:
                    d8:3f:9c:12:f0:51:cf:0a:f2:d0:91:8a:3d:e0:94:
                    18:a8:37:03:68:48:e2:83:a9:bb:28:11:97:7c:75:
                    3e:17:e2:77:85:2b:92:7a:72:e1:bf:22:07:fb:f9:
                    c1:ed:05:13:58:43:ea:b0:7d:8b:f3:76:49:e7:23:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BE:66:B7:FF:EF:A6:EE:A4:79:B5:86:5F:3C:28:B9:6C:84:62:A2
            X509v3 Authority Key Identifier:
                keyid:2B:98:66:B6:67:58:20:B4:CE:A1:CD:08:5C:75:C5:3F:64:0B:66:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/2B9866B6675820B4CEA1CD085C75C53F640B6695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9866B6675820B4CEA1CD085C75C53F640B6695.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/323830343a313663633a3a2f33322d3438203d3e203631393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:54:d0:33:42:ef:26:37:94:31:bb:fa:46:9a:67:05:b5:b1:
         10:5e:78:3b:9e:ed:64:03:76:0d:9d:96:d3:87:be:81:19:47:
         da:c4:24:3b:96:f4:3f:0d:be:b3:8f:9e:d9:27:1d:7e:d8:37:
         7c:26:39:c4:bf:37:d8:63:f0:76:4f:76:c1:bd:44:5a:ce:56:
         10:5d:3e:cb:27:68:00:9e:ae:07:94:10:2d:25:99:22:af:a7:
         ea:71:fc:a3:55:3d:0b:04:f5:ad:c4:86:13:91:df:8a:19:8b:
         33:40:af:1a:9e:ce:a7:94:b9:fc:06:78:c9:3b:3d:2a:ff:97:
         67:68:21:71:60:f3:85:8d:68:24:5c:ab:2c:c7:dc:f9:6a:d1:
         aa:31:99:ee:89:6c:e2:47:db:92:67:ca:68:23:e0:6b:73:39:
         4e:5d:80:9f:3c:f0:a9:1b:5a:83:8e:60:06:c8:42:53:09:8f:
         9f:0f:cf:a2:ca:30:aa:6f:b8:10:f2:ba:5f:17:02:40:45:fd:
         ae:07:ae:58:96:20:94:e5:2c:42:02:8f:cc:63:f7:35:3e:63:
         90:48:ba:53:50:70:45:64:fa:7e:2f:5e:cd:18:7d:40:ab:9a:
         b6:4a:de:c2:36:15:06:1e:90:98:24:13:c2:61:08:7f:9e:b6:
         de:4d:3b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:48:05 2025 by rpki-client