Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRDFjRyewRKZmEbjnyygWmLFVx2XxR3RrLQrphByVuGq/0/323830343a326430383a3a2f33322d313238203d3e20323635323538.roa
File:                     323830343a326430383a3a2f33322d313238203d3e20323635323538.roa (raw, json)
Hash identifier:          0M8riRlp6Pxc3pH2yRdYFrRirwB9jZxDl1Lzhv7ZUfA=
Subject key identifier:   6C:17:73:DF:7C:37:71:A1:E2:A5:EC:84:B7:E2:E4:34:4C:93:0D:57
Certificate issuer:       /CN=75CD9B0F7A3227D0E732AB230520DCAA15864431
Certificate serial:       49AF20FFA9A31A25FF35BA6FFD7E6235F98ECDC3
Authority key identifier: 75:CD:9B:0F:7A:32:27:D0:E7:32:AB:23:05:20:DC:AA:15:86:44:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CD9B0F7A3227D0E732AB230520DCAA15864431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRDFjRyewRKZmEbjnyygWmLFVx2XxR3RrLQrphByVuGq/0/323830343a326430383a3a2f33322d313238203d3e20323635323538.roa
Signing time:             Thu 10 Jul 2025 17:19:59 +0000
ROA not before:           Thu 10 Jul 2025 17:14:59 +0000
ROA not after:            Thu 09 Jul 2026 17:19:59 +0000
asID:                     265258
IP address blocks:        2804:2d08::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRDFjRyewRKZmEbjnyygWmLFVx2XxR3RrLQrphByVuGq/0/75CD9B0F7A3227D0E732AB230520DCAA15864431.crl
                          rsync://rpki-repo.registro.br/repo/BRDFjRyewRKZmEbjnyygWmLFVx2XxR3RrLQrphByVuGq/0/75CD9B0F7A3227D0E732AB230520DCAA15864431.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CD9B0F7A3227D0E732AB230520DCAA15864431.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 14:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:af:20:ff:a9:a3:1a:25:ff:35:ba:6f:fd:7e:62:35:f9:8e:cd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CD9B0F7A3227D0E732AB230520DCAA15864431
        Validity
            Not Before: Jul 10 17:14:59 2025 GMT
            Not After : Jul  9 17:19:59 2026 GMT
        Subject: CN=6C1773DF7C3771A1E2A5EC84B7E2E4344C930D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b2:44:ba:24:8e:61:2f:8a:5d:11:1a:ae:cb:
                    9d:d3:c9:71:22:66:c3:49:2b:c8:72:99:25:91:8a:
                    90:73:89:f6:d4:bc:36:48:54:2c:d4:65:7f:5b:5f:
                    9d:0d:4f:dd:1d:09:b0:bf:44:1e:20:e0:ab:fa:38:
                    5c:15:73:2c:07:2b:73:16:40:be:e6:37:22:38:cc:
                    48:2c:24:60:63:47:4d:f8:9d:77:c7:d5:86:91:73:
                    b8:83:13:c3:db:b3:9d:02:49:32:b3:e7:53:50:69:
                    d2:a2:6d:d9:36:b9:f6:d6:8b:4e:50:37:c2:68:5a:
                    8a:22:57:46:28:3c:19:39:86:b6:4a:56:99:66:8d:
                    d0:0e:aa:fa:08:68:0b:98:aa:31:23:4b:26:95:ef:
                    88:52:af:11:59:0d:00:c9:40:a1:45:6c:39:28:3f:
                    e7:4d:48:a9:df:19:4c:20:b2:95:33:35:3c:7a:36:
                    60:68:6c:0a:d5:b5:c0:10:19:da:88:b3:b7:7f:d8:
                    11:3f:d9:93:eb:41:90:4a:c7:c5:14:4e:d1:df:83:
                    ae:cc:20:fd:72:a5:74:7d:cc:d7:47:5d:8e:1d:72:
                    50:e7:02:97:39:d6:6c:36:81:94:c4:93:12:97:5f:
                    e5:b6:a7:ab:a6:e8:a1:db:eb:64:49:e4:15:c0:f2:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:17:73:DF:7C:37:71:A1:E2:A5:EC:84:B7:E2:E4:34:4C:93:0D:57
            X509v3 Authority Key Identifier:
                keyid:75:CD:9B:0F:7A:32:27:D0:E7:32:AB:23:05:20:DC:AA:15:86:44:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRDFjRyewRKZmEbjnyygWmLFVx2XxR3RrLQrphByVuGq/0/75CD9B0F7A3227D0E732AB230520DCAA15864431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CD9B0F7A3227D0E732AB230520DCAA15864431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRDFjRyewRKZmEbjnyygWmLFVx2XxR3RrLQrphByVuGq/0/323830343a326430383a3a2f33322d313238203d3e20323635323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d08::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:c1:0d:b2:5a:e1:0d:2c:dc:38:e9:18:55:5c:60:91:f4:70:
         2d:55:3f:5e:39:14:64:da:d6:f1:7b:17:f4:22:d8:cc:ad:50:
         75:41:23:4f:0d:e9:6c:04:39:0d:5e:6f:c6:8a:b5:ca:7c:51:
         18:67:b6:db:21:c4:9a:c9:99:5d:b0:e3:fe:65:59:dd:13:be:
         9d:26:21:0a:f4:4e:89:ee:ca:3c:3d:2b:8e:66:70:66:76:9a:
         ea:a0:76:5e:35:af:eb:8f:8b:13:d6:80:24:22:a1:26:2d:d1:
         ee:ad:dc:9a:7b:70:21:ee:70:e5:62:bb:63:04:ef:52:08:b8:
         2c:c2:64:c7:c2:88:5f:df:e7:8e:e5:14:70:24:44:e1:d6:5b:
         c1:a7:7e:91:2e:94:2a:13:2d:9a:98:38:c1:3d:09:dc:58:d8:
         35:11:a8:ea:2c:34:d3:c5:98:bd:b7:7a:35:08:77:66:05:f3:
         ef:4f:e2:1d:5c:03:b4:19:69:f2:27:c9:1e:9e:75:61:81:46:
         ab:23:04:3c:50:8c:65:99:a3:0d:2f:0a:57:a1:ea:2b:11:bc:
         94:b0:52:b3:55:57:c8:b2:1f:1d:4c:27:b1:8e:f7:e8:7b:b0:
         aa:38:81:7a:bb:1b:f6:27:84:ae:ed:e9:ba:43:c7:ce:0a:a9:
         1c:63:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:21:44 2025 by rpki-client