Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a3a2f33322d313238203d3e20323731353438.roa
File:                     323830343a376433633a3a2f33322d313238203d3e20323731353438.roa (raw, json)
Hash identifier:          NvJFPOK0qETcnQfcGhZP3x6owhlYyfWOJqZc0HdpzOk=
Subject key identifier:   6D:2C:65:44:C1:63:67:C7:2B:B7:86:D0:F8:30:7B:11:F2:6E:02:D6
Certificate issuer:       /CN=22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05
Certificate serial:       0F7699A015E3FC281341B77DC2E59D561B625477
Authority key identifier: 22:DF:C9:57:03:9A:AE:7A:7D:C1:7B:E2:EC:7A:FD:D1:75:7D:FA:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a3a2f33322d313238203d3e20323731353438.roa
Signing time:             Tue 26 Aug 2025 13:48:50 +0000
ROA not before:           Tue 26 Aug 2025 13:43:50 +0000
ROA not after:            Tue 25 Aug 2026 13:48:50 +0000
asID:                     271548
IP address blocks:        2804:7d3c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.crl
                          rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 01:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:76:99:a0:15:e3:fc:28:13:41:b7:7d:c2:e5:9d:56:1b:62:54:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05
        Validity
            Not Before: Aug 26 13:43:50 2025 GMT
            Not After : Aug 25 13:48:50 2026 GMT
        Subject: CN=6D2C6544C16367C72BB786D0F8307B11F26E02D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:33:b6:58:ea:d1:bf:8e:54:8c:e4:b5:d9:0f:
                    87:6d:38:9f:66:d4:a4:f6:02:5a:98:fe:74:5b:76:
                    ff:2f:13:b2:fd:43:89:ae:b3:c1:df:74:c0:65:82:
                    88:16:4a:5e:9b:61:e8:bc:83:9a:dd:3a:6a:dc:9a:
                    cc:ce:d4:53:b5:31:b8:37:6b:60:9c:89:d8:8a:21:
                    11:59:56:9a:b2:b7:95:f2:52:9b:a4:40:06:28:9e:
                    bd:76:77:20:9b:55:3b:66:bc:d2:94:23:38:6a:73:
                    83:d6:32:55:30:74:ec:fd:f9:8a:fe:ba:78:0b:11:
                    c7:97:ac:9a:bd:cd:4f:48:77:a9:a2:42:ed:3a:d1:
                    43:b2:b3:66:12:ee:a8:cf:57:a9:f2:17:10:0e:76:
                    d0:20:01:50:74:a4:1d:37:7c:2e:af:4f:3d:16:92:
                    49:48:43:6e:3e:32:48:78:de:55:81:78:b7:32:2d:
                    17:63:23:11:63:0e:ab:36:27:c6:3f:fc:f9:ba:c7:
                    19:94:98:cc:3e:32:63:aa:13:d7:9e:71:df:b8:d6:
                    c3:6a:2d:51:99:4f:a3:d4:da:ef:fd:ab:93:a4:8c:
                    a3:dc:26:c8:23:bc:5f:d0:cb:de:d5:35:b4:ca:42:
                    65:7d:90:94:68:c9:ef:1a:60:bc:c5:52:85:29:12:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2C:65:44:C1:63:67:C7:2B:B7:86:D0:F8:30:7B:11:F2:6E:02:D6
            X509v3 Authority Key Identifier:
                keyid:22:DF:C9:57:03:9A:AE:7A:7D:C1:7B:E2:EC:7A:FD:D1:75:7D:FA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a3a2f33322d313238203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:d7:ec:9e:89:e6:01:f3:66:fa:50:12:94:5a:a2:68:e7:5d:
         6f:18:80:6e:2d:b4:b5:b2:63:ec:07:ac:fc:a3:ab:92:bf:c6:
         3d:50:2e:fb:29:c1:06:e9:9d:52:70:4c:be:e5:1f:e0:9a:9b:
         26:fa:26:2c:3c:25:36:72:82:6d:39:f2:40:33:c5:ec:88:2a:
         f8:16:cb:32:db:79:68:80:84:e4:5a:a3:c3:03:b4:a4:5a:d8:
         74:61:25:bf:31:be:1c:a6:85:2d:e2:31:9b:15:bb:35:90:ac:
         f4:d8:b8:72:4b:9f:bd:0f:3b:c9:0b:ec:fb:56:f4:8a:ce:6f:
         68:b5:f2:5e:8a:e6:bc:f7:5d:b3:82:a1:fd:38:b4:b3:f7:d3:
         18:11:d8:bc:7b:1f:e5:55:38:d8:0d:52:b3:1e:b4:5d:4f:68:
         96:66:2d:a4:fd:96:f4:f6:4f:ff:a0:9f:14:fa:69:9f:56:29:
         bf:8c:fe:55:8e:48:9b:cc:75:65:72:53:47:af:d6:7a:8d:77:
         f4:4b:35:1e:e2:f1:1b:39:9f:d3:dd:ea:49:ee:dc:4e:ab:c0:
         51:10:3a:47:a4:5e:31:9c:3d:bb:c0:d1:44:d7:d8:46:0a:73:
         f4:67:45:1b:35:47:d1:d4:69:41:69:48:82:80:cd:03:f4:0a:
         f2:ca:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:47:22 2025 by rpki-client