Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33332d3333203d3e20323633343939.roa
File:                     323830343a313263633a3a2f33332d3333203d3e20323633343939.roa (raw, json)
Hash identifier:          NZRyGwAcXznqNURPOpRa2AHQ21Wc4yFPQ486MM7ZEzk=
Subject key identifier:   0B:00:6F:14:57:8A:B6:48:83:E2:DB:B3:8C:76:9D:ED:BD:A7:39:99
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       429B0F9D0627E9D2022C9E74C65D24F7965AE91A
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33332d3333203d3e20323633343939.roa
Signing time:             Wed 16 Jul 2025 15:00:00 +0000
ROA not before:           Wed 16 Jul 2025 14:55:00 +0000
ROA not after:            Wed 15 Jul 2026 15:00:00 +0000
asID:                     263499
IP address blocks:        2804:12cc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 31 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9b:0f:9d:06:27:e9:d2:02:2c:9e:74:c6:5d:24:f7:96:5a:e9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Jul 16 14:55:00 2025 GMT
            Not After : Jul 15 15:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:57:94:ce:4d:f1:4f:19:45:c4:08:1e:1e:a4:
                    ff:41:4f:ff:6a:0e:83:b2:7c:05:4a:6c:f6:95:4a:
                    ae:ea:b4:e3:8b:dc:2d:9f:15:fc:f0:96:94:9f:10:
                    43:21:32:44:78:d2:3f:e6:ec:db:f1:d1:cd:99:62:
                    81:68:c6:de:eb:1d:f0:d9:ed:b6:39:04:69:ca:68:
                    43:f3:74:7c:d1:04:39:cb:45:10:9f:3a:a8:44:62:
                    a4:97:31:0c:53:0a:62:60:66:cf:61:91:e1:61:50:
                    48:49:97:af:8c:c9:c8:56:15:85:89:cf:19:2d:13:
                    2c:54:2b:4d:bf:92:db:75:55:57:1b:79:a8:23:ea:
                    ed:04:64:22:cf:81:fd:c0:14:ee:2f:ae:b6:cb:8f:
                    8a:4d:58:38:77:c7:7f:8f:12:42:ed:ab:c6:bd:d6:
                    50:fa:07:e7:81:35:7f:1b:6f:59:65:e0:d6:83:cc:
                    02:31:da:d4:7f:35:c4:a4:5d:4e:4e:ed:e9:27:e0:
                    24:49:70:f0:73:c4:ab:53:ff:3c:ab:b5:6b:f4:30:
                    18:8a:90:ca:15:ba:9f:59:a1:ab:98:02:02:7c:28:
                    2b:c0:49:fb:67:0e:df:06:99:bf:92:99:9e:98:69:
                    12:7e:30:1a:ee:04:59:7c:85:bc:22:ed:b8:b5:4a:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:00:6F:14:57:8A:B6:48:83:E2:DB:B3:8C:76:9D:ED:BD:A7:39:99
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33332d3333203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12cc::/33

    Signature Algorithm: sha256WithRSAEncryption
         21:b4:cc:39:7e:12:70:f5:61:79:60:27:97:a8:05:09:d5:42:
         74:84:bf:03:b2:48:82:58:78:fa:43:5d:ea:26:de:d3:6a:a7:
         22:08:2c:06:d7:94:01:ad:58:c2:9b:2b:72:1c:85:11:36:ef:
         2a:0e:58:d8:2e:75:b7:72:6a:7d:19:40:0c:49:a8:a3:6c:ba:
         81:8a:5a:0e:78:4f:4e:86:11:85:2e:d0:e4:9d:fa:21:69:6f:
         b4:9f:73:17:2d:42:3f:8a:44:a5:44:c3:3c:e9:5f:49:9b:cc:
         d0:91:ce:d3:6b:15:1b:96:6a:a5:3f:77:1a:f9:2c:2f:f2:d8:
         7a:13:87:e4:e7:a5:57:58:15:4b:a4:2f:74:9d:f6:f4:a0:93:
         a2:a3:46:99:31:66:df:4c:a3:5d:f0:d8:bc:45:44:f7:48:b5:
         7a:77:79:a1:89:75:60:69:a3:cf:84:17:43:24:27:55:d9:82:
         c3:cf:aa:57:b6:16:95:5f:8c:61:b7:bf:13:af:1a:56:f7:aa:
         9f:d4:35:7a:cd:c6:82:78:63:25:c8:bc:ad:28:5b:5e:ac:46:
         da:c1:85:e8:f6:1f:8d:e9:96:7b:8b:e0:6e:33:f0:6e:30:49:
         bc:2a:84:22:3b:24:d8:72:b2:a2:be:d1:a1:4f:67:40:e6:d2:
         aa:c0:c2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 22:12:08 2025 by rpki-client