Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a343a3a2f34382d3438203d3e20323730363330.roa
File:                     323830343a366566383a343a3a2f34382d3438203d3e20323730363330.roa (raw, json)
Hash identifier:          OZQzo7VppFsypmQE82A3vsZnWg2kTN6QDSd7KfIjz+M=
Subject key identifier:   C8:57:FA:0A:2E:95:22:FA:56:44:AE:12:40:D6:ED:9E:50:92:FD:81
Certificate issuer:       /CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
Certificate serial:       01A1CB0ACC38222EAB2E21BC191E167F6737F94F
Authority key identifier: 3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a343a3a2f34382d3438203d3e20323730363330.roa
Signing time:             Wed 16 Jul 2025 21:14:59 +0000
ROA not before:           Wed 16 Jul 2025 21:09:59 +0000
ROA not after:            Wed 15 Jul 2026 21:14:59 +0000
asID:                     270630
IP address blocks:        2804:6ef8:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl
                          rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 14:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:cb:0a:cc:38:22:2e:ab:2e:21:bc:19:1e:16:7f:67:37:f9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
        Validity
            Not Before: Jul 16 21:09:59 2025 GMT
            Not After : Jul 15 21:14:59 2026 GMT
        Subject: CN=C857FA0A2E9522FA5644AE1240D6ED9E5092FD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:f1:e8:42:78:9a:8c:a0:fa:46:fd:e4:6d:
                    c3:c6:71:fa:76:d4:2f:38:07:a2:f7:50:28:e8:f7:
                    35:b6:53:e4:35:92:6b:9f:16:f3:f4:09:ea:2d:82:
                    3e:ba:69:bc:42:40:94:3f:68:ac:a3:17:ca:dd:78:
                    51:24:59:52:6a:d0:ca:09:3e:4f:f2:bf:73:27:23:
                    a9:cd:31:2f:5d:3b:9c:ff:33:fb:71:2c:11:37:db:
                    c7:43:08:17:0c:50:93:8b:93:f9:16:62:e4:16:0c:
                    a0:51:e6:fd:a1:6e:9c:2a:af:c5:38:3f:41:f1:b7:
                    6b:75:b3:8c:d3:ce:e9:98:9a:26:35:92:ae:22:7d:
                    c5:e1:1a:81:9d:67:17:e9:fa:0a:80:d9:a1:9e:8c:
                    42:cd:74:8f:98:58:dd:65:97:97:58:b0:46:20:1f:
                    d1:03:0f:12:6b:4b:66:3f:8c:f7:05:e8:17:0f:a7:
                    dc:1f:72:51:2b:c5:83:ce:cf:25:e5:06:fd:1e:eb:
                    88:00:0c:d0:e4:7c:58:63:bc:b1:8e:9d:a1:9f:f1:
                    b3:19:8a:43:8b:b2:5a:22:f4:e1:65:69:74:2a:bb:
                    d8:b1:67:4a:36:d3:74:0e:3b:78:ea:5e:b4:da:b3:
                    5f:95:0b:4a:ae:2e:eb:87:ad:2f:09:ce:62:69:84:
                    6b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:57:FA:0A:2E:95:22:FA:56:44:AE:12:40:D6:ED:9E:50:92:FD:81
            X509v3 Authority Key Identifier:
                keyid:3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a343a3a2f34382d3438203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef8:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:22:8c:44:5f:10:0f:2c:33:01:95:64:b1:bd:0a:63:cf:ae:
         fd:8d:cc:da:26:9d:07:17:34:73:8c:3d:4e:09:ab:db:cc:cb:
         0c:14:32:d5:08:85:46:bc:62:1d:e9:f2:aa:12:5b:23:db:af:
         39:3a:68:47:4c:66:d4:4b:7c:67:ed:b7:a6:15:96:ba:a9:88:
         13:a4:39:61:99:97:de:80:7f:51:59:cf:86:1e:1b:3e:8d:fa:
         38:45:e7:a0:06:34:fa:cb:90:2f:c6:d9:27:ae:12:38:b0:3d:
         56:20:d0:2b:cf:a2:84:11:94:9c:95:a5:60:18:58:a8:af:f7:
         fa:32:90:9e:bb:47:f3:71:34:56:81:df:cf:39:c0:3c:93:8a:
         0f:7f:22:66:55:dd:03:41:cc:41:a7:5e:fb:a3:a2:8a:17:9c:
         91:aa:2a:f3:91:90:6c:f6:96:fd:c4:5d:a6:4e:12:2c:04:e5:
         96:b9:d4:36:0a:6c:6a:ac:02:8c:97:b8:1d:d0:36:41:6d:42:
         1b:96:d1:a5:42:a1:3f:ac:05:c8:ea:b7:d6:80:0e:b8:c8:e4:
         8d:8b:e9:61:c8:5e:7c:df:57:cf:62:18:9b:60:ef:79:bd:e9:
         da:f9:62:70:ab:35:09:77:9a:54:32:96:3f:2f:d4:ad:5c:1c:
         5e:40:bd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:02:18 2025 by rpki-client