Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a32613a3a2f34372d3437203d3e20323634353434.roa
File:                     323830343a323133633a32613a3a2f34372d3437203d3e20323634353434.roa (raw, json)
Hash identifier:          RnifI3vGir9KQoako8xIHrGhSZM1fBSJeEazSu/204Q=
Subject key identifier:   B0:8C:7B:E9:19:2C:7E:CB:0A:D4:21:6B:98:9D:28:9A:BF:70:50:07
Certificate issuer:       /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial:       63B1BDB9834CA999C23EA7307189381E90C6FDE2
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a32613a3a2f34372d3437203d3e20323634353434.roa
Signing time:             Mon 08 Sep 2025 17:16:23 +0000
ROA not before:           Mon 08 Sep 2025 17:11:23 +0000
ROA not after:            Mon 07 Sep 2026 17:16:23 +0000
asID:                     264544
IP address blocks:        2804:213c:2a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl
                          rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 09:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b1:bd:b9:83:4c:a9:99:c2:3e:a7:30:71:89:38:1e:90:c6:fd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
        Validity
            Not Before: Sep  8 17:11:23 2025 GMT
            Not After : Sep  7 17:16:23 2026 GMT
        Subject: CN=B08C7BE9192C7ECB0AD4216B989D289ABF705007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:03:00:c9:3f:19:26:7d:e9:21:2c:86:88:a0:
                    1d:4e:bc:ce:ac:2b:b6:64:72:0e:44:24:60:1a:0b:
                    97:4f:87:53:e8:f8:89:d4:ca:e8:f5:1e:de:56:be:
                    a4:fe:4d:32:75:a7:5e:ac:b6:b4:75:c7:b9:78:91:
                    ee:d6:7a:5b:b7:27:c1:cd:2a:cc:ae:d4:3e:2b:8c:
                    04:b6:4c:35:9c:19:93:b0:8e:7c:eb:b1:c4:71:bb:
                    0f:43:92:f9:e6:2e:fb:ab:d5:ff:dd:24:b3:6f:a2:
                    2c:a3:66:16:f5:4c:e8:ba:5a:a4:99:6d:b6:d7:4d:
                    4c:ae:77:1a:c7:e8:aa:19:97:ce:1a:26:8f:35:57:
                    44:6f:32:80:78:95:3e:77:fb:05:50:11:ec:9e:4d:
                    8f:ab:91:f0:ca:2f:f0:ba:9b:a5:10:0b:bb:6c:80:
                    ae:81:27:d8:49:4f:05:df:c4:29:1d:4c:63:da:dd:
                    2e:51:86:b2:0b:4e:fd:93:f7:43:f2:6e:78:b5:7d:
                    db:1d:fe:59:84:3c:e0:2a:b6:ca:06:63:62:0f:1f:
                    38:c7:a0:91:93:81:3d:d5:f0:d8:8b:8d:90:d7:af:
                    74:67:bd:9d:91:2c:ca:b5:2d:10:36:b3:7e:38:e0:
                    4c:df:e4:dd:62:1b:a1:43:00:bf:dc:09:d1:d4:c8:
                    83:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8C:7B:E9:19:2C:7E:CB:0A:D4:21:6B:98:9D:28:9A:BF:70:50:07
            X509v3 Authority Key Identifier:
                keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a32613a3a2f34372d3437203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:213c:2a::/47

    Signature Algorithm: sha256WithRSAEncryption
         36:5f:9a:a2:66:13:33:91:bf:35:5f:15:6a:11:99:87:12:bb:
         00:75:b5:0d:30:7a:5e:22:56:b4:7e:3d:81:53:e9:39:1a:55:
         47:d0:e6:5f:a9:8b:4a:e4:9e:8e:0e:5e:03:5b:98:38:a5:9f:
         58:c0:e0:6b:ea:bb:9c:1c:61:08:3d:1d:65:ed:2c:9d:8f:f9:
         ee:ee:71:2c:ff:97:53:70:c7:7f:1b:aa:3d:5f:6a:cf:84:e6:
         95:98:66:14:63:e8:24:71:2d:e5:d3:6f:bd:91:11:f9:07:1c:
         a4:74:53:1e:b5:b3:b1:f8:ad:c2:bd:0a:55:99:22:de:07:5d:
         5a:8f:14:43:4d:83:71:b2:e9:a4:2d:ed:45:ec:98:e5:57:7e:
         fa:6f:50:60:3d:02:dc:75:00:5c:c4:0a:17:b8:3a:65:28:84:
         19:48:6a:7e:71:ef:5e:fe:0a:85:94:ee:25:9a:64:af:11:80:
         86:a4:35:ea:98:de:6f:4b:36:f5:3f:29:1f:82:7f:f8:9f:42:
         92:6a:38:83:3b:e1:46:e3:6e:b6:2f:ee:78:f0:bf:65:0c:ec:
         5f:4a:ed:51:cc:97:2e:ae:a2:67:ab:e9:68:43:3c:83:60:3b:
         11:db:c3:79:46:e0:07:92:ae:01:89:6e:29:c2:b4:7f:ae:44:
         58:0d:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:20:31 2025 by rpki-client