Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a633030303a3a2f33342d3334203d3e20323636343731.roa
File:                     323830343a333835383a633030303a3a2f33342d3334203d3e20323636343731.roa (raw, json)
Hash identifier:          V4bWXQrcBzj++aPl2rXveSM6B/hbza+yrauSEwbW5B4=
Subject key identifier:   13:6F:34:C5:E4:4E:E4:08:60:1D:AA:17:E3:FB:3A:E7:30:A2:B7:A7
Certificate issuer:       /CN=7450D09D3099C74B5BA0650438B50168D9296DA8
Certificate serial:       412BD8788894114D4CED80675D294BB03B8C1B9B
Authority key identifier: 74:50:D0:9D:30:99:C7:4B:5B:A0:65:04:38:B5:01:68:D9:29:6D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7450D09D3099C74B5BA0650438B50168D9296DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a633030303a3a2f33342d3334203d3e20323636343731.roa
Signing time:             Thu 07 Aug 2025 12:38:07 +0000
ROA not before:           Thu 07 Aug 2025 12:33:07 +0000
ROA not after:            Thu 06 Aug 2026 12:38:07 +0000
asID:                     266471
IP address blocks:        2804:3858:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/7450D09D3099C74B5BA0650438B50168D9296DA8.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/7450D09D3099C74B5BA0650438B50168D9296DA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7450D09D3099C74B5BA0650438B50168D9296DA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 09:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2b:d8:78:88:94:11:4d:4c:ed:80:67:5d:29:4b:b0:3b:8c:1b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7450D09D3099C74B5BA0650438B50168D9296DA8
        Validity
            Not Before: Aug  7 12:33:07 2025 GMT
            Not After : Aug  6 12:38:07 2026 GMT
        Subject: CN=136F34C5E44EE408601DAA17E3FB3AE730A2B7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:32:2b:39:fa:ad:f5:15:b1:c9:d0:f3:51:
                    19:d9:08:e6:b0:8a:53:29:09:a7:56:29:68:39:c2:
                    71:ab:09:ab:13:19:82:04:18:c9:e4:67:98:81:cb:
                    46:9f:44:65:76:f0:c2:85:c1:a6:8f:a5:34:3d:da:
                    36:dd:cf:5a:81:d5:27:2b:dd:e4:22:73:88:48:f2:
                    b7:7f:99:90:9a:b4:39:5d:aa:59:66:7d:3b:62:6e:
                    49:73:a5:a6:0f:b0:52:94:db:7b:a2:46:eb:c2:b5:
                    6e:0d:2d:d9:21:29:8f:48:72:0c:59:0f:78:44:36:
                    f7:b7:86:7a:ce:2d:f3:07:92:1b:3d:4b:b7:05:33:
                    8e:6d:0c:4f:fd:d7:a8:84:b4:e8:5f:c5:b7:d3:23:
                    4a:23:4b:15:54:7c:5a:29:83:38:60:c7:0a:6c:c1:
                    62:6a:e1:85:2c:c9:9c:8c:61:88:d2:32:4d:6b:98:
                    2f:cf:a0:53:6e:42:db:e8:ae:ab:76:af:2a:eb:f7:
                    23:e9:4f:fd:3f:29:0d:7e:66:89:23:86:39:48:55:
                    3a:71:60:2c:53:37:fe:a6:1f:62:7a:66:00:e0:89:
                    99:cd:69:e7:32:4a:58:3a:7d:93:79:34:93:9c:f4:
                    91:62:09:12:0d:20:7e:b3:d1:cf:25:1a:fd:06:f3:
                    51:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6F:34:C5:E4:4E:E4:08:60:1D:AA:17:E3:FB:3A:E7:30:A2:B7:A7
            X509v3 Authority Key Identifier:
                keyid:74:50:D0:9D:30:99:C7:4B:5B:A0:65:04:38:B5:01:68:D9:29:6D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/7450D09D3099C74B5BA0650438B50168D9296DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7450D09D3099C74B5BA0650438B50168D9296DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a633030303a3a2f33342d3334203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3858:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:7d:4f:5f:8f:f0:3d:41:f6:a9:72:6c:07:09:ac:6a:92:e0:
         24:b7:1c:e9:00:9d:3c:53:ac:d3:78:9a:ad:bd:8d:86:1e:d4:
         ab:e0:8c:6e:29:9a:3b:47:6a:93:5f:df:3e:25:7b:9e:5b:e4:
         d6:5c:5c:40:8f:2a:9b:ee:5d:77:69:c1:a3:a2:8d:c6:12:3e:
         cc:cc:0a:2e:9b:bb:79:ae:62:1f:5d:9f:1b:82:19:dc:c2:bc:
         67:04:64:aa:45:12:11:29:27:63:b6:94:18:ba:bf:a4:39:62:
         dc:4a:bd:3b:40:01:68:b6:f1:e9:07:7e:ea:da:c6:5f:70:98:
         95:d0:eb:d7:3b:99:7b:c9:90:64:c3:4b:b8:c2:57:cf:b7:16:
         54:25:f4:d3:54:13:91:77:7b:cf:3b:20:bf:c9:f9:77:38:19:
         68:79:d2:ed:2a:7f:55:8b:10:5c:9e:f8:ff:20:c5:b6:50:79:
         28:d5:29:f6:e8:4d:aa:e2:50:fc:d0:f5:b7:b5:11:3d:89:1e:
         34:aa:a5:da:3c:52:b1:e3:9f:a2:be:3f:e4:d4:5c:18:47:ef:
         89:25:6b:63:83:95:65:51:e0:6a:01:2a:10:f2:cf:c3:41:aa:
         b7:43:7f:59:c1:df:05:55:e1:7c:ae:56:1f:9f:61:db:8d:ea:
         a9:68:5d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 19:42:01 2025 by rpki-client