Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a3a2f33342d3334203d3e20323637303234.roa
File:                     323830343a343666633a3a2f33342d3334203d3e20323637303234.roa (raw, json)
Hash identifier:          jxbt0ZXF79Qjp1sVk6D1zwTlDsyLy8kRob2uXRkANOc=
Subject key identifier:   B4:94:D7:FF:31:A1:84:77:91:E0:38:3B:68:57:1D:34:6C:7A:9C:28
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       6B03DD9C33F65917AF0765CAB70DFD6CD0DC227E
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a3a2f33342d3334203d3e20323637303234.roa
Signing time:             Tue 26 Aug 2025 11:22:15 +0000
ROA not before:           Tue 26 Aug 2025 11:17:15 +0000
ROA not after:            Tue 25 Aug 2026 11:22:15 +0000
asID:                     267024
IP address blocks:        2804:46fc::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 22:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:03:dd:9c:33:f6:59:17:af:07:65:ca:b7:0d:fd:6c:d0:dc:22:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Aug 26 11:17:15 2025 GMT
            Not After : Aug 25 11:22:15 2026 GMT
        Subject: CN=B494D7FF31A1847791E0383B68571D346C7A9C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:38:ff:69:47:9a:bd:48:73:13:5d:07:4e:
                    15:61:6c:92:51:cb:a0:ef:a4:a7:83:8d:15:e0:69:
                    53:ad:24:7a:de:1f:95:df:ad:1f:f9:9e:82:2b:e6:
                    dd:92:24:96:1d:7c:40:5a:2e:5b:26:5b:04:68:74:
                    29:7f:e1:ed:81:1d:aa:0d:a6:49:00:32:c6:54:4a:
                    5d:22:1d:64:31:f8:a5:0c:db:b7:ac:2e:68:bd:72:
                    e6:ce:86:6c:d0:01:c7:90:89:58:ca:fe:1c:49:e6:
                    bb:37:e8:27:f3:d6:0f:3a:5a:18:27:35:37:3e:53:
                    b6:ed:01:be:b9:69:29:e1:51:fd:02:22:6a:74:7b:
                    05:3a:8c:c2:df:05:f3:3e:ac:8f:ad:3e:fc:3d:48:
                    b5:80:3f:56:72:aa:9e:90:b8:76:ed:d5:e9:21:54:
                    09:38:94:65:c7:5a:3f:8b:58:4b:70:b9:46:43:c7:
                    f5:a5:55:25:e8:f5:3f:a9:ac:d7:3e:98:68:42:65:
                    7f:c4:29:d2:46:f1:16:93:3e:1b:78:f8:64:60:f0:
                    b9:87:dd:ac:80:8c:6f:ec:b9:b5:3e:57:80:71:04:
                    df:c5:2f:18:d4:17:b5:a5:ef:58:f5:b9:6e:80:13:
                    a4:71:41:80:76:26:ac:66:f8:08:66:1a:ee:d1:06:
                    48:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:94:D7:FF:31:A1:84:77:91:E0:38:3B:68:57:1D:34:6C:7A:9C:28
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a3a2f33342d3334203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc::/34

    Signature Algorithm: sha256WithRSAEncryption
         9c:d8:be:55:51:51:31:14:c2:77:28:4b:01:f7:c9:e4:06:28:
         9f:28:8b:4d:22:97:37:39:61:ca:3e:88:6a:3c:a7:66:ed:df:
         f1:56:dc:7e:20:46:59:4b:36:fc:97:74:fc:04:fd:8a:40:2f:
         16:ed:24:3b:33:eb:45:b8:68:51:fe:86:7d:9f:12:55:92:45:
         07:c6:6c:d9:6d:4e:5a:58:71:75:00:63:93:a5:9c:b2:60:72:
         c6:2c:3f:bf:46:00:84:d3:5b:b3:1c:36:5d:6d:5a:db:97:80:
         cf:b4:f6:fd:0e:12:ce:79:20:4b:35:bd:75:2f:08:58:81:12:
         8d:27:de:26:3d:1b:d9:b3:b8:b8:98:e2:40:10:c6:18:d8:21:
         1f:e7:1f:de:a1:f7:c6:49:97:41:e9:2f:15:67:61:86:3e:32:
         30:d2:39:6a:f0:46:fc:fc:f0:ff:af:92:ca:7e:5a:16:bf:8a:
         2f:aa:f7:dc:83:c1:b0:a3:27:66:24:7b:05:ba:44:8f:63:f1:
         8e:b3:a9:6c:7c:65:5c:a7:92:e5:20:5f:34:9b:bd:18:cb:f3:
         9a:28:9f:a4:dc:aa:b9:96:11:58:6b:6d:80:dc:f1:26:02:60:
         7d:1c:ed:af:d1:df:c2:61:a9:a6:25:3c:27:43:71:25:b6:df:
         5c:d3:9f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:52:10 2025 by rpki-client