Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/323830343a3762303a3a2f33322d313238203d3e20323632343533.roa
File:                     323830343a3762303a3a2f33322d313238203d3e20323632343533.roa (raw, json)
Hash identifier:          gr2u/oI9boQwwcAjZcUOU8d5yrSlwex50xc/uUnWyPQ=
Subject key identifier:   A7:9A:29:8C:23:10:6D:69:06:63:7B:50:22:B1:49:F8:3A:1E:2A:B8
Certificate issuer:       /CN=25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB
Certificate serial:       030407591409297CDD2DA47176F2EA74AB764592
Authority key identifier: 25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/323830343a3762303a3a2f33322d313238203d3e20323632343533.roa
Signing time:             Wed 27 Aug 2025 17:47:50 +0000
ROA not before:           Wed 27 Aug 2025 17:42:50 +0000
ROA not after:            Wed 26 Aug 2026 17:47:50 +0000
asID:                     262453
IP address blocks:        2804:7b0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl
                          rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:04:07:59:14:09:29:7c:dd:2d:a4:71:76:f2:ea:74:ab:76:45:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB
        Validity
            Not Before: Aug 27 17:42:50 2025 GMT
            Not After : Aug 26 17:47:50 2026 GMT
        Subject: CN=A79A298C23106D6906637B5022B149F83A1E2AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:ab:d1:2e:3e:93:cf:1a:c1:21:f2:21:b8:
                    57:5b:cc:0d:2e:9a:90:15:46:e0:25:9b:4e:3c:25:
                    b2:ec:3a:22:74:6f:ba:43:03:d8:70:df:97:03:d4:
                    b9:70:c8:e6:0a:ce:f4:a8:26:9a:89:72:9d:fc:b0:
                    1d:d6:75:da:99:c6:11:79:89:3d:53:b1:22:02:a2:
                    46:55:7b:bd:dc:6b:a1:ff:25:e5:f2:47:84:f4:44:
                    a1:47:28:c8:1d:39:cd:8d:fb:f0:a4:ef:ed:19:f8:
                    91:52:8b:57:af:6f:3a:65:07:39:cb:0d:a0:a6:45:
                    d1:c1:e6:52:0b:02:e2:9f:03:84:f4:c6:ba:90:b7:
                    24:0d:cf:b9:6f:50:82:79:ab:fb:ef:d8:aa:0a:28:
                    a3:8b:2f:b0:3e:7f:7e:62:ec:48:d3:a2:f1:bc:ea:
                    a6:1c:1d:60:5d:35:c0:4f:5e:68:ab:ae:7d:e7:c7:
                    c1:92:26:49:a2:8c:62:af:5e:e0:6e:26:53:6d:3c:
                    37:df:69:b5:7a:c4:8e:f0:32:f9:ae:1c:8b:d8:3d:
                    89:75:08:08:0e:3f:c9:9d:a3:d5:00:bf:79:1e:dc:
                    d9:8d:80:77:aa:f8:f7:d2:03:d5:43:e0:e9:58:cd:
                    20:db:48:27:15:24:10:73:2d:47:fd:b3:cb:c4:d1:
                    88:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9A:29:8C:23:10:6D:69:06:63:7B:50:22:B1:49:F8:3A:1E:2A:B8
            X509v3 Authority Key Identifier:
                keyid:25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/323830343a3762303a3a2f33322d313238203d3e20323632343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:4d:c7:cf:3a:fb:2c:45:38:36:18:db:79:b3:6f:b7:69:97:
         28:1c:76:bc:f9:6a:59:51:1b:3b:0c:a9:21:d2:97:98:a0:2d:
         6c:d6:13:07:56:96:2d:a7:8e:a4:19:1f:95:00:9a:de:b5:7d:
         86:42:9f:40:c8:b8:28:77:bd:36:5f:62:36:11:f4:cb:7d:fd:
         fd:af:63:3f:7b:8a:e0:37:2e:59:2e:4b:a5:6c:66:20:46:1f:
         29:76:21:6b:f7:b8:cb:9a:ec:2f:86:09:38:07:6b:a4:00:d3:
         5a:ec:12:65:2b:09:77:9a:f7:3f:40:a9:45:df:57:e4:2b:2c:
         5e:b2:b4:72:c7:83:ef:b8:d6:ed:35:6b:62:14:4e:94:87:f5:
         66:43:fb:eb:61:ca:66:26:15:b6:63:52:dd:47:f8:67:8d:fe:
         c2:04:71:20:d2:f9:31:14:a9:51:93:16:cd:a0:87:2f:6a:b6:
         ea:50:ba:33:62:cf:d7:ae:93:38:b4:40:6f:93:77:06:b9:65:
         d6:4f:5f:f5:61:08:f0:5b:db:37:d5:74:3a:88:9c:01:31:b1:
         3d:81:ec:d2:87:cb:bf:ce:02:d0:d5:6b:17:35:5b:f2:9e:6e:
         56:e8:bc:2c:fb:04:96:34:3f:77:28:cf:e5:6f:83:10:0e:89:
         f9:72:58:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:50:07 2025 by rpki-client