Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/323830343a363331633a3a2f33322d3438203d3e20323639333339.roa
File:                     323830343a363331633a3a2f33322d3438203d3e20323639333339.roa (raw, json)
Hash identifier:          HD0myhB8bn7kzpt0FynNIYGe5HWBiFi6r/TKWu/vwag=
Subject key identifier:   6C:E3:83:60:00:F0:3B:20:C9:4F:52:F0:A8:1A:9B:84:14:FD:31:D3
Certificate issuer:       /CN=8031D0E22F282EF7F099D4A03C6628FBA6DB248F
Certificate serial:       7EE8C57F29BD53B8EE07C962D58EB66CE2914565
Authority key identifier: 80:31:D0:E2:2F:28:2E:F7:F0:99:D4:A0:3C:66:28:FB:A6:DB:24:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/323830343a363331633a3a2f33322d3438203d3e20323639333339.roa
Signing time:             Wed 06 Aug 2025 14:54:39 +0000
ROA not before:           Wed 06 Aug 2025 14:49:39 +0000
ROA not after:            Wed 05 Aug 2026 14:54:39 +0000
asID:                     269339
IP address blocks:        2804:631c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.crl
                          rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 11:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e8:c5:7f:29:bd:53:b8:ee:07:c9:62:d5:8e:b6:6c:e2:91:45:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031D0E22F282EF7F099D4A03C6628FBA6DB248F
        Validity
            Not Before: Aug  6 14:49:39 2025 GMT
            Not After : Aug  5 14:54:39 2026 GMT
        Subject: CN=6CE3836000F03B20C94F52F0A81A9B8414FD31D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:54:21:76:69:74:ef:6b:2d:0a:0f:7e:16:
                    a4:1e:30:df:95:c1:07:de:f4:fb:1f:86:c2:85:dc:
                    e0:bd:d9:1f:c8:f3:28:5b:28:cf:a5:04:c2:f3:79:
                    f8:d9:d0:ca:9e:2b:cc:29:c2:e0:b6:75:be:e2:62:
                    4b:47:7d:e6:99:b8:6b:e3:cb:e3:5c:9a:f5:e0:7b:
                    11:1b:1c:c9:ed:b5:f9:c7:6e:f4:dc:8e:fc:ac:8a:
                    c5:c3:52:8c:b9:e8:77:3e:04:79:2e:8e:30:d6:d3:
                    75:7b:68:19:c3:46:01:04:57:73:a1:1a:ee:72:22:
                    d7:9e:6c:05:1a:4b:95:95:d2:c0:fd:ca:de:7d:72:
                    c3:47:b8:14:fd:cc:1d:18:25:39:95:0b:2a:4d:04:
                    d9:65:9a:ac:9f:2c:9e:cd:03:e1:be:09:c4:02:cd:
                    ff:47:6a:73:35:3c:87:5f:f6:6a:bf:b3:4c:13:9b:
                    e5:17:bb:e8:83:59:7c:59:08:a9:fd:12:12:ec:13:
                    32:15:52:a3:85:3c:a5:24:7e:f9:d1:c1:db:5f:17:
                    6e:1c:c2:23:d8:b0:b8:88:61:2a:6c:96:a9:73:d4:
                    bc:cf:e2:13:b3:e1:88:ae:dd:0d:c1:34:bf:3d:db:
                    31:38:11:fe:ac:96:f8:23:07:c4:93:2d:ad:c9:74:
                    dc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E3:83:60:00:F0:3B:20:C9:4F:52:F0:A8:1A:9B:84:14:FD:31:D3
            X509v3 Authority Key Identifier:
                keyid:80:31:D0:E2:2F:28:2E:F7:F0:99:D4:A0:3C:66:28:FB:A6:DB:24:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/323830343a363331633a3a2f33322d3438203d3e20323639333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:631c::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:32:b8:58:28:1a:67:13:b8:60:4b:db:59:4f:e0:6c:40:4e:
         7e:da:a0:2a:7e:66:47:fd:aa:53:cd:cb:79:ae:f4:bd:65:0b:
         ea:35:29:23:0f:50:f4:61:0c:ad:87:f8:72:ed:6f:69:8d:f0:
         ad:68:eb:7f:6b:66:c7:73:e4:78:1b:44:76:42:09:d7:f7:50:
         b0:3b:47:0b:aa:4b:b0:22:63:ac:15:76:af:61:76:ed:2a:d7:
         01:cd:84:d2:ca:c1:64:8f:2a:9b:77:d8:23:d0:d5:7c:31:42:
         0c:2f:0d:b8:1d:e7:91:f3:c8:8d:90:3a:75:09:e4:ce:03:6a:
         06:cf:96:82:4a:2f:00:c3:38:43:07:b0:b8:e8:7c:89:28:62:
         9e:60:3e:ad:45:f3:20:f8:00:c1:7e:c8:3e:96:b3:14:f8:a5:
         46:c9:c7:65:48:de:b4:0c:fd:53:cf:6d:80:80:46:80:33:bb:
         d2:1f:a5:5b:61:76:6b:18:32:41:f2:18:74:43:e4:da:28:5e:
         b5:c7:4e:ef:f9:d9:c9:09:ac:17:01:53:b3:40:20:c6:3d:3a:
         c5:72:44:f0:a0:24:32:c6:2b:64:c1:02:00:4e:75:c5:ed:ae:
         25:c8:2b:3b:9d:af:c4:23:ec:e7:f4:c8:0a:d4:fd:42:5d:d5:
         d8:69:93:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:16:44 2025 by rpki-client