Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a3a2f33322d3334203d3e203532363936.roa
File:                     323830343a6336303a3a2f33322d3334203d3e203532363936.roa (raw, json)
Hash identifier:          JO424UM9ek3c/dWBTla9KRS0YyaZbk1o/6VI43MKwiY=
Subject key identifier:   3B:CF:DB:A6:7E:5B:00:05:1F:20:25:F0:92:E3:37:63:EE:E8:B4:93
Certificate issuer:       /CN=7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F
Certificate serial:       6725576B80E1B0909B3423851A11A8D7F5D93F19
Authority key identifier: 7C:0F:26:EF:96:D1:08:82:B2:2A:2D:2B:35:D9:68:4D:72:CC:0F:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a3a2f33322d3334203d3e203532363936.roa
Signing time:             Sun 31 Aug 2025 02:44:03 +0000
ROA not before:           Sun 31 Aug 2025 02:39:03 +0000
ROA not after:            Sun 30 Aug 2026 02:44:03 +0000
asID:                     52696
IP address blocks:        2804:c60::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F.crl
                          rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:25:57:6b:80:e1:b0:90:9b:34:23:85:1a:11:a8:d7:f5:d9:3f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F
        Validity
            Not Before: Aug 31 02:39:03 2025 GMT
            Not After : Aug 30 02:44:03 2026 GMT
        Subject: CN=3BCFDBA67E5B00051F2025F092E33763EEE8B493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1b:28:c6:6a:52:64:41:c4:d8:64:74:41:9f:
                    7f:85:3c:dc:86:3d:ed:b6:40:79:17:00:43:07:dd:
                    aa:16:e3:41:b0:ba:6f:35:96:a8:74:18:e6:d1:d5:
                    47:5f:35:b4:a3:18:7f:21:a7:ad:f8:1a:b4:e2:df:
                    0f:8d:5a:d1:c6:0c:18:af:17:37:82:67:f4:28:c9:
                    da:5e:e4:69:4e:90:ec:ac:b1:1b:21:ee:9b:bf:41:
                    f8:5d:41:90:49:43:14:a7:57:54:60:04:36:bf:ba:
                    cb:bd:8b:8d:1d:27:15:8a:64:c2:99:94:d8:ad:95:
                    1d:a0:60:1d:02:a7:31:a2:d6:12:6c:27:71:be:e6:
                    4e:d3:3d:d2:a4:24:91:8e:32:ad:1f:52:c3:7d:81:
                    b2:4f:b7:ec:d5:5b:77:33:9e:d1:f8:d2:d8:9a:47:
                    3e:e2:47:a9:02:52:39:cc:62:7c:24:c8:5e:91:a4:
                    67:a6:b7:e1:91:24:4b:d0:3d:29:a5:c0:a4:11:29:
                    0a:02:1a:4a:68:91:9f:c9:8c:ad:29:50:51:f5:79:
                    58:11:5a:76:54:b8:d5:3f:6a:53:0e:0c:cf:b8:49:
                    46:d0:0e:9e:57:87:25:51:f5:1f:22:39:8b:27:9e:
                    d1:62:95:58:e6:f5:98:35:34:d7:ce:7f:cf:2d:b8:
                    26:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CF:DB:A6:7E:5B:00:05:1F:20:25:F0:92:E3:37:63:EE:E8:B4:93
            X509v3 Authority Key Identifier:
                keyid:7C:0F:26:EF:96:D1:08:82:B2:2A:2D:2B:35:D9:68:4D:72:CC:0F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a3a2f33322d3334203d3e203532363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:d9:5f:d3:c0:50:22:d8:bf:52:73:bc:6c:ee:ed:8c:f1:d1:
         09:9a:06:1d:c6:8e:4c:61:a7:27:f6:35:ea:f9:77:bb:60:f6:
         59:f7:42:bb:01:fb:f3:15:3f:8f:bc:2a:73:f5:ff:7a:f3:38:
         60:b8:2f:14:69:fb:f7:16:c5:00:30:d6:22:a9:d1:a3:1d:55:
         f8:a8:f6:c0:3e:1d:07:d7:01:77:4a:a2:0c:2c:c1:f9:e9:13:
         82:de:39:8e:0a:57:1a:c5:ba:19:87:52:0e:d3:8b:65:a8:8e:
         1f:fa:09:73:42:77:88:7d:73:01:df:e1:1c:cd:4a:e6:1a:2e:
         68:48:e6:ca:b7:4c:54:c4:f8:9b:85:c6:07:b8:b0:a1:84:2f:
         c9:bd:ff:03:3c:66:29:03:1b:d1:87:0d:8e:2b:70:93:94:5e:
         6b:09:34:72:46:80:b3:e9:7d:7d:cd:16:74:cb:ae:92:60:d8:
         2a:ad:fd:9a:47:9e:ae:9c:e0:1e:f6:cb:a9:01:f1:7b:fa:b2:
         3f:2c:02:4e:87:b7:13:1d:ee:89:fd:69:92:c8:79:f5:19:cf:
         b8:5b:46:ff:01:5f:21:23:4c:1b:43:b2:aa:f4:8b:67:05:05:
         69:de:48:c9:4a:13:a5:a9:33:5d:c8:d3:ac:4c:c2:0f:de:68:
         c5:63:fa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:49:36 2025 by rpki-client