Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/323830343a323932343a3a2f33322d3438203d3e20323634303030.roa
File:                     323830343a323932343a3a2f33322d3438203d3e20323634303030.roa (raw, json)
Hash identifier:          425fRHipWeVVhwQE9GftMQzYng6sGZHWVyNs2OmtrKw=
Subject key identifier:   63:11:8F:3F:92:D4:D6:C3:8C:BE:A4:4D:D7:84:FF:75:8E:F3:C4:26
Certificate issuer:       /CN=A3EDDFE04A45C8B895057324A100C0F681DF4A77
Certificate serial:       29500654BF69F6710D46E8371D7AADEBFF55D84D
Authority key identifier: A3:ED:DF:E0:4A:45:C8:B8:95:05:73:24:A1:00:C0:F6:81:DF:4A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3EDDFE04A45C8B895057324A100C0F681DF4A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/323830343a323932343a3a2f33322d3438203d3e20323634303030.roa
Signing time:             Tue 26 Aug 2025 19:32:50 +0000
ROA not before:           Tue 26 Aug 2025 19:27:50 +0000
ROA not after:            Tue 25 Aug 2026 19:32:50 +0000
asID:                     264000
IP address blocks:        2804:2924::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.crl
                          rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3EDDFE04A45C8B895057324A100C0F681DF4A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:50:06:54:bf:69:f6:71:0d:46:e8:37:1d:7a:ad:eb:ff:55:d8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3EDDFE04A45C8B895057324A100C0F681DF4A77
        Validity
            Not Before: Aug 26 19:27:50 2025 GMT
            Not After : Aug 25 19:32:50 2026 GMT
        Subject: CN=63118F3F92D4D6C38CBEA44DD784FF758EF3C426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:55:f3:a1:2b:6a:35:75:24:84:33:07:10:
                    45:fd:9f:ef:a9:71:e9:09:e3:ea:25:c0:e5:1b:cd:
                    c8:03:27:3b:5d:37:27:89:bf:09:eb:d7:eb:30:34:
                    ea:1c:d9:c3:8e:b9:f5:ba:ec:5e:bc:cd:6c:8e:f5:
                    b3:77:4f:80:f3:dc:34:ad:11:60:bf:9a:68:24:ae:
                    ba:07:43:2a:9f:d5:e5:e0:d7:1d:a3:33:3e:d9:92:
                    0e:87:7b:53:b3:02:fc:b4:d5:f8:21:90:2d:1d:f8:
                    b3:91:8b:a6:21:b7:2c:d1:dc:0b:9e:1e:da:01:d1:
                    f2:21:e5:11:9f:73:7a:76:82:ee:14:26:4d:36:22:
                    38:98:ab:94:3f:22:55:2d:07:d0:cb:89:cf:d9:f5:
                    73:76:31:8c:66:0a:c9:65:ca:c8:99:af:ee:5a:5b:
                    8d:7b:db:18:5e:e0:2c:dc:6e:6d:fb:8a:84:37:05:
                    57:e9:36:97:c4:da:c1:be:82:77:7c:11:68:74:b2:
                    36:75:94:6d:65:dc:60:36:b5:09:9b:4a:79:94:fe:
                    4c:23:13:7b:10:b2:9d:c2:e1:f7:4c:f3:87:ab:97:
                    97:6d:03:79:da:1c:45:95:59:db:16:c0:99:30:b9:
                    a3:c9:9c:cc:09:62:51:54:8b:55:27:47:0d:b8:6e:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:11:8F:3F:92:D4:D6:C3:8C:BE:A4:4D:D7:84:FF:75:8E:F3:C4:26
            X509v3 Authority Key Identifier:
                keyid:A3:ED:DF:E0:4A:45:C8:B8:95:05:73:24:A1:00:C0:F6:81:DF:4A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3EDDFE04A45C8B895057324A100C0F681DF4A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/323830343a323932343a3a2f33322d3438203d3e20323634303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2924::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:ca:a6:18:71:75:80:a8:e0:d5:71:61:44:cc:12:26:67:fb:
         d4:2f:be:39:62:f3:67:6f:e5:68:3f:a6:8c:91:cf:f0:da:33:
         71:e9:1a:ac:aa:76:63:73:08:1f:6a:de:d5:a2:31:28:a8:c1:
         13:e8:ba:41:e8:95:b7:48:21:7b:e5:89:b9:b2:8d:86:66:d1:
         ce:76:9b:98:99:b6:14:92:e3:10:7d:13:0e:8a:c6:31:d7:bf:
         8d:9e:11:a4:5b:c1:b5:38:f2:b7:8f:af:45:d9:ce:8b:a6:e9:
         81:be:e3:3f:4d:86:f5:c0:1f:8f:e0:b0:50:0f:6e:f9:4d:6e:
         3f:c1:f9:68:93:01:e7:f8:59:4a:1b:ad:3a:2b:cf:ff:93:b0:
         43:78:de:73:3d:e7:12:97:45:3e:ed:ad:1d:1d:9a:ad:44:46:
         2f:39:ce:00:ed:ec:49:f7:0b:59:bb:b6:83:87:5f:9f:f8:6e:
         99:92:61:d5:ea:15:ba:3a:d2:59:8e:5f:23:44:57:09:ef:1a:
         15:c4:0e:a9:5e:a6:97:9d:8a:e2:24:25:81:73:d3:68:a9:ce:
         2b:28:59:92:99:c3:5a:6b:95:29:0b:b7:e6:a2:46:8b:30:96:
         21:96:e2:6c:4e:0f:4d:60:cc:66:7b:d7:43:f4:7f:49:20:ed:
         e8:1b:47:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:24:34 2025 by rpki-client