Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a3331303a3a2f33322d3438203d3e20323632363838.roa
File:                     323830343a3331303a3a2f33322d3438203d3e20323632363838.roa (raw, json)
Hash identifier:          HIHT2Avkl/LJxNEUuw788FGItkf0DCrmagQSxSZM5ro=
Subject key identifier:   AF:F0:22:CF:FB:F5:4D:E7:28:F7:A6:09:7A:35:91:F4:DC:07:13:35
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       74784266BE97ACE53D13607FD39AC0BD708EE17F
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a3331303a3a2f33322d3438203d3e20323632363838.roa
Signing time:             Mon 12 May 2025 13:01:30 +0000
ROA not before:           Mon 12 May 2025 12:56:30 +0000
ROA not after:            Mon 11 May 2026 13:01:30 +0000
asID:                     262688
IP address blocks:        2804:310::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:78:42:66:be:97:ac:e5:3d:13:60:7f:d3:9a:c0:bd:70:8e:e1:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:56:30 2025 GMT
            Not After : May 11 13:01:30 2026 GMT
        Subject: CN=AFF022CFFBF54DE728F7A6097A3591F4DC071335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:81:9a:71:61:9f:d5:60:2e:9a:76:6b:14:
                    79:62:ca:8e:3e:ae:12:4f:ec:2f:64:0a:9d:d0:23:
                    23:d7:8b:29:c0:9d:3c:b8:47:75:f7:35:0d:08:18:
                    14:ef:fe:11:1e:42:a5:da:a7:df:44:cc:93:28:bd:
                    60:b3:b1:b3:da:44:c2:c0:ff:74:f0:d8:1a:8c:45:
                    fb:6c:47:46:6e:6f:a1:d0:0b:5c:74:95:db:6f:cf:
                    d8:9c:a7:16:ec:c1:5e:90:35:dd:84:b2:2a:16:49:
                    6c:9f:dc:43:13:73:8f:82:b3:d8:a1:07:38:39:df:
                    74:18:0e:75:8b:50:01:6f:40:63:c6:41:16:08:fb:
                    c9:37:17:58:1d:35:7d:b6:7d:27:c9:43:67:bf:45:
                    b2:fd:b8:fe:73:31:4c:dd:be:3e:35:41:af:40:62:
                    a8:a4:bf:f3:8c:43:ca:fa:27:87:d1:2c:25:d2:5e:
                    a1:a5:26:36:cc:5f:8b:6f:fe:67:a9:8e:5e:0b:de:
                    ec:08:51:95:2e:b1:1d:11:b0:a7:33:58:f6:61:3a:
                    17:05:84:2f:7f:f6:74:88:b0:6b:99:f5:f3:41:f5:
                    8e:38:9c:27:65:89:1e:ef:93:1a:99:57:21:cc:4f:
                    a4:8f:b0:2c:73:2a:64:0b:66:03:eb:ad:6f:f5:c2:
                    2c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F0:22:CF:FB:F5:4D:E7:28:F7:A6:09:7A:35:91:F4:DC:07:13:35
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a3331303a3a2f33322d3438203d3e20323632363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:310::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:e9:e0:b8:4a:73:69:af:3a:26:bb:f2:cf:55:f7:f9:a3:93:
         d6:81:75:5d:ee:5e:68:3e:9d:08:d5:ab:ec:b9:1a:c6:bc:4f:
         6b:4a:c6:3f:ed:f9:e5:80:49:27:61:1e:4a:be:e4:55:0c:ef:
         c6:65:24:ea:a0:04:c2:7b:fc:c2:47:4e:1e:85:53:72:eb:93:
         77:a1:1f:6d:76:07:91:51:49:47:94:cc:35:8a:80:13:94:66:
         97:f3:44:a3:1d:10:8e:0c:96:78:b9:f5:24:41:c3:da:9b:9f:
         5c:59:44:22:18:fb:58:73:85:d7:ea:06:1e:c4:d5:c5:5a:08:
         ab:d7:f6:44:fe:b7:98:42:3d:fd:9f:95:e3:24:4a:d7:96:04:
         95:0c:6d:57:05:84:09:1d:9a:cf:ac:8b:fe:67:b0:62:73:99:
         da:71:6a:9c:39:de:57:96:75:53:9c:a8:29:7c:5e:b6:e4:6d:
         91:91:84:65:02:25:80:9f:f2:89:69:8b:af:cc:02:4f:4b:f8:
         f0:e6:0a:3b:54:67:8f:4f:85:04:cc:93:5d:93:0d:27:ca:10:
         b1:f3:5c:5b:b8:33:9a:10:e7:ee:c5:c8:dc:49:b4:2d:cf:e2:
         93:d8:31:91:64:0e:25:e4:d9:5d:d9:6b:66:df:02:e7:1e:e5:
         6d:db:c6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:53:45 2025 by rpki-client