Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/323830343a346134383a3a2f33322d3332203d3e20323637323239.roa
File:                     323830343a346134383a3a2f33322d3332203d3e20323637323239.roa (raw, json)
Hash identifier:          iWAop7PqMBTZt1vsWHppS2OKWwlbPMPB2P6fXl/rbp8=
Subject key identifier:   42:13:53:85:1D:33:A9:E0:20:9B:EF:5A:62:8F:38:CD:40:C1:3E:45
Certificate issuer:       /CN=F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4
Certificate serial:       0F45F02D24F7D3E818CCC87A5C40D677A7B7AA96
Authority key identifier: F9:AA:3F:12:A4:FC:F0:B7:33:F0:FF:95:94:2F:6F:21:D7:7D:63:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/323830343a346134383a3a2f33322d3332203d3e20323637323239.roa
Signing time:             Mon 04 Aug 2025 14:49:32 +0000
ROA not before:           Mon 04 Aug 2025 14:44:32 +0000
ROA not after:            Mon 03 Aug 2026 14:49:32 +0000
asID:                     267229
IP address blocks:        2804:4a48::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.crl
                          rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 04:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:45:f0:2d:24:f7:d3:e8:18:cc:c8:7a:5c:40:d6:77:a7:b7:aa:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4
        Validity
            Not Before: Aug  4 14:44:32 2025 GMT
            Not After : Aug  3 14:49:32 2026 GMT
        Subject: CN=421353851D33A9E0209BEF5A628F38CD40C13E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:77:6f:00:8d:a9:c8:89:a0:56:8d:c4:d7:
                    51:e7:df:7c:6e:8d:0f:fd:ef:fd:86:dd:57:06:40:
                    67:b9:a5:8b:1e:0e:8c:dd:e3:95:ca:c5:98:20:14:
                    d2:e4:a3:66:26:a2:c5:90:ef:1c:e5:bf:e7:12:70:
                    77:15:f5:b0:03:4e:e4:81:d4:ba:0a:46:0c:d7:1c:
                    45:07:eb:55:4b:18:84:3f:9f:8e:a5:1e:ba:24:21:
                    88:b6:b4:ee:35:7c:d4:9f:7f:b4:a3:59:28:fa:e3:
                    42:d7:ee:b1:67:81:fb:61:49:a8:c6:85:35:d3:b7:
                    8d:72:0a:a0:13:58:82:6f:f4:70:a4:3e:59:a4:36:
                    b2:99:f3:7b:f0:27:c2:3a:42:64:ef:41:0f:1c:08:
                    45:28:6a:45:f9:c4:12:91:2a:e4:49:2f:39:ef:2e:
                    99:2e:97:20:49:3a:07:36:8a:a7:09:58:ae:86:2f:
                    e5:58:b8:d3:ad:b8:21:2f:04:b6:db:ef:ee:55:3f:
                    2a:a8:a0:37:ce:97:d7:dd:d2:3b:77:b1:81:18:e7:
                    d2:04:e3:d4:33:52:86:2e:d8:70:aa:13:05:b5:12:
                    f2:fa:b7:ac:be:25:d7:d6:74:06:25:bd:3d:94:e7:
                    66:a0:73:be:f0:92:9c:17:00:10:66:14:d2:ca:2c:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:13:53:85:1D:33:A9:E0:20:9B:EF:5A:62:8F:38:CD:40:C1:3E:45
            X509v3 Authority Key Identifier:
                keyid:F9:AA:3F:12:A4:FC:F0:B7:33:F0:FF:95:94:2F:6F:21:D7:7D:63:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/323830343a346134383a3a2f33322d3332203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a48::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:01:b1:33:ec:71:06:e3:2a:c9:31:f0:a3:11:10:9c:ef:34:
         f0:6c:30:dc:97:c7:cb:de:be:5b:c0:8a:07:f1:de:3c:1a:d0:
         49:e0:7e:24:90:d6:c6:6a:c7:94:a2:51:b0:e0:75:eb:4f:78:
         c5:ca:83:e8:54:9b:3f:74:5d:15:55:f8:7d:e4:bd:a8:95:2f:
         d0:70:2b:12:cf:dc:a3:ae:1e:22:6b:0c:d2:c5:bf:86:61:99:
         e3:de:a4:10:17:98:df:af:71:1b:62:a1:bf:b5:89:12:27:e3:
         3f:af:50:bb:43:a3:35:01:2a:a6:08:29:2d:cf:71:80:45:60:
         63:33:cb:11:3b:04:f2:02:59:bc:30:5d:f2:89:48:e6:06:c2:
         cf:95:1c:de:75:cb:9b:2a:3b:05:c3:49:be:53:b5:f9:11:6a:
         b3:4d:4b:95:dd:e3:21:ac:9e:22:a4:a4:52:7c:85:6a:ba:22:
         3b:e3:1d:2d:fa:d6:4f:b2:d4:8f:f7:1e:33:be:9c:fc:e1:b0:
         5f:b1:1e:3c:7a:6e:f7:cb:41:0b:02:51:a6:36:5a:20:e0:fd:
         36:bf:f1:9d:a2:5c:e0:39:1c:83:56:ec:1a:9f:62:89:4c:6c:
         7d:65:bc:29:eb:d6:46:8b:e9:18:4c:0d:41:91:e7:15:a7:80:
         cc:0a:06:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:49:21 2025 by rpki-client