Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33322d3334203d3e20323637313238.roa
File:                     323830343a343838633a3a2f33322d3334203d3e20323637313238.roa (raw, json)
Hash identifier:          7ioWv+IRXQuJci/BwSCDSwxhkzBb2TZETCwqNrFzMro=
Subject key identifier:   D3:12:A5:E1:DC:0B:24:8E:82:7D:66:5B:45:08:8C:08:E4:F8:A5:77
Certificate issuer:       /CN=206D33F3A8B725D8326CB6CF3F2E8CBBB714859E
Certificate serial:       118D913D8C7D543F4BE6EB648C5DECA3AF98A5FC
Authority key identifier: 20:6D:33:F3:A8:B7:25:D8:32:6C:B6:CF:3F:2E:8C:BB:B7:14:85:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33322d3334203d3e20323637313238.roa
Signing time:             Mon 11 Aug 2025 14:01:01 +0000
ROA not before:           Mon 11 Aug 2025 13:56:01 +0000
ROA not after:            Mon 10 Aug 2026 14:01:01 +0000
asID:                     267128
IP address blocks:        2804:488c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.crl
                          rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8d:91:3d:8c:7d:54:3f:4b:e6:eb:64:8c:5d:ec:a3:af:98:a5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206D33F3A8B725D8326CB6CF3F2E8CBBB714859E
        Validity
            Not Before: Aug 11 13:56:01 2025 GMT
            Not After : Aug 10 14:01:01 2026 GMT
        Subject: CN=D312A5E1DC0B248E827D665B45088C08E4F8A577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:36:e0:52:a5:90:9c:83:95:db:4d:d8:6b:
                    6f:bf:c3:5f:03:2d:b9:d3:f6:85:b4:9f:ef:e0:64:
                    e9:92:4f:a9:48:cc:fe:52:2b:bb:27:b2:6f:c2:92:
                    e7:3d:53:06:fa:e1:46:53:4f:8b:c0:ae:ed:4d:81:
                    24:ac:9e:31:04:76:e0:13:ef:ad:d5:57:bd:d9:16:
                    3c:97:72:16:bf:77:aa:bd:98:00:5f:20:42:b0:6c:
                    3d:70:60:aa:57:4a:ba:02:aa:06:1b:f0:71:c7:fa:
                    00:a8:36:3c:bf:a9:8f:bf:3c:37:dc:b0:91:97:a0:
                    5c:8f:71:19:05:b4:ba:78:cf:45:c0:e0:35:47:06:
                    99:f8:ed:91:08:69:15:7f:92:9f:0f:08:19:db:f5:
                    43:1e:9c:19:f4:d3:96:0e:5e:d5:b4:ad:6b:30:42:
                    60:56:7b:9d:d0:c7:6f:a2:3b:a0:0b:99:66:63:b5:
                    a2:19:74:36:c7:d6:83:38:7c:4a:69:a6:ad:c9:97:
                    41:cc:75:a4:74:b9:b0:9e:d8:0c:3d:8a:d0:8a:3a:
                    95:a6:79:4c:68:36:fb:71:78:f0:d0:cb:47:ca:e9:
                    80:3c:72:0d:5f:ed:d9:86:06:e9:a7:00:f6:3c:a1:
                    b5:76:49:d2:3e:c4:8d:f6:97:e8:c5:e6:8d:54:6e:
                    15:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:12:A5:E1:DC:0B:24:8E:82:7D:66:5B:45:08:8C:08:E4:F8:A5:77
            X509v3 Authority Key Identifier:
                keyid:20:6D:33:F3:A8:B7:25:D8:32:6C:B6:CF:3F:2E:8C:BB:B7:14:85:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33322d3334203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:488c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:f0:47:17:f9:3b:ef:32:5c:f4:0e:32:69:f8:23:30:b9:02:
         3f:07:67:53:5c:28:8d:23:20:fe:ce:f6:89:6a:26:4c:dd:34:
         63:c3:80:8d:a7:1b:fd:ac:e3:8d:c4:f0:20:5c:9f:b3:5b:a5:
         11:74:b2:b3:be:a3:3f:2c:a1:a2:5b:4e:93:1e:a7:26:3c:bb:
         85:a6:1f:03:ed:86:dd:49:3f:78:b0:39:25:65:90:af:2f:d8:
         b3:90:31:90:6d:d5:2d:ba:48:92:af:26:97:49:6c:cd:be:bd:
         7c:c6:f3:10:52:bf:00:07:f5:2d:b9:f8:c8:e8:7d:86:14:2e:
         58:fe:72:09:7a:b3:9e:f2:73:3e:cb:3b:d1:88:0c:5f:b8:d1:
         f1:da:5a:7d:56:ec:9f:fb:2e:83:6b:1f:84:de:42:84:23:42:
         5b:4a:07:8d:2a:b4:f3:dc:8d:3c:a2:92:b6:aa:87:81:76:6d:
         02:07:5f:d2:95:f3:ce:f2:8a:c0:8d:7d:09:1f:e3:3f:48:56:
         a9:5d:2f:5f:29:3d:96:50:9c:cb:87:fe:5c:d7:f0:f9:1e:a5:
         44:f8:46:9c:bc:34:9f:ab:54:af:dc:58:06:36:7c:90:a8:ad:
         76:0b:4a:3d:fd:bb:79:98:d9:85:69:79:62:99:cf:b7:25:db:
         00:17:9e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:44:24 2025 by rpki-client