Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a343030303a3a2f33342d3334203d3e20323731363837.roa
File:                     323830343a376636633a343030303a3a2f33342d3334203d3e20323731363837.roa (raw, json)
Hash identifier:          tri3/7GvRBfQ7KGqYx0Lx9eq9Kk8E4QgmR/EG/AAqTw=
Subject key identifier:   6A:F6:29:62:F1:FF:65:AA:15:CC:38:67:1E:88:81:B4:A6:E7:64:6C
Certificate issuer:       /CN=4C379380DB61C2A0DA301945FE3BE33A330017FE
Certificate serial:       69D5742D3F81C68DE12AAB5407F12234306807F0
Authority key identifier: 4C:37:93:80:DB:61:C2:A0:DA:30:19:45:FE:3B:E3:3A:33:00:17:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a343030303a3a2f33342d3334203d3e20323731363837.roa
Signing time:             Fri 08 Aug 2025 14:13:35 +0000
ROA not before:           Fri 08 Aug 2025 14:08:35 +0000
ROA not after:            Fri 07 Aug 2026 14:13:35 +0000
asID:                     271687
IP address blocks:        2804:7f6c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.crl
                          rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 00:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d5:74:2d:3f:81:c6:8d:e1:2a:ab:54:07:f1:22:34:30:68:07:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C379380DB61C2A0DA301945FE3BE33A330017FE
        Validity
            Not Before: Aug  8 14:08:35 2025 GMT
            Not After : Aug  7 14:13:35 2026 GMT
        Subject: CN=6AF62962F1FF65AA15CC38671E8881B4A6E7646C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:59:91:48:99:10:1d:33:24:e6:ee:1c:19:
                    23:97:fe:c6:53:be:52:da:cc:5d:56:be:18:3b:f3:
                    b1:b4:84:8e:4d:3e:a0:95:83:b9:ac:d0:5f:c1:7e:
                    fb:da:98:fb:13:9f:90:49:ac:9b:08:7e:57:50:8f:
                    f9:4b:4d:0c:5b:e3:83:74:0a:13:a2:8a:24:69:67:
                    67:cc:b2:fb:2b:dc:e8:43:40:fe:9d:f8:06:6a:37:
                    4b:13:54:95:d6:22:92:71:e5:6e:5d:49:98:1f:05:
                    f6:31:c8:d8:28:f1:7e:a5:67:4d:77:83:81:58:7d:
                    24:45:97:20:81:6c:ef:41:e7:78:a4:0a:70:32:a6:
                    9a:00:e2:12:8f:c0:33:19:b9:15:c6:1c:5a:35:d9:
                    ca:03:1c:2b:75:ae:53:52:35:c2:c2:5d:a5:ab:34:
                    26:5b:ac:9e:6f:df:96:d4:51:0d:82:47:a5:4b:01:
                    6b:49:95:2e:5e:1b:c5:26:93:03:6b:77:43:09:8c:
                    63:78:29:c4:99:8b:94:f1:70:00:50:f7:24:a3:7e:
                    f1:a4:24:ae:8b:c4:33:7a:48:d7:0c:c2:3e:13:42:
                    71:9c:19:f2:a4:b4:36:a3:d6:9c:30:39:8b:b9:56:
                    4b:c5:4c:69:6c:3a:fb:c5:e5:c3:e3:15:6d:0e:81:
                    87:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F6:29:62:F1:FF:65:AA:15:CC:38:67:1E:88:81:B4:A6:E7:64:6C
            X509v3 Authority Key Identifier:
                keyid:4C:37:93:80:DB:61:C2:A0:DA:30:19:45:FE:3B:E3:3A:33:00:17:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a343030303a3a2f33342d3334203d3e20323731363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f6c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         08:c9:ac:a7:d8:17:80:7e:68:f8:3d:28:2f:cb:4d:b6:6a:e5:
         97:79:e2:99:d7:43:45:d7:b9:53:a4:3b:84:63:60:16:d5:21:
         9a:a9:39:26:04:28:2e:02:44:92:2a:7b:9f:27:a7:90:11:61:
         6e:55:80:d1:b8:53:da:1d:60:c7:fd:ef:ca:c3:f9:d3:f5:4b:
         1c:1a:a4:9b:7b:e0:30:82:be:a7:a0:57:1e:79:ce:45:45:1f:
         e8:aa:bd:b4:78:6f:9c:64:30:9c:96:fd:fe:61:d6:e9:08:f5:
         df:a5:04:44:0b:fa:57:a7:22:01:d3:5b:97:04:4d:a0:fc:ba:
         59:d2:3a:33:91:8b:ea:93:99:d3:f6:31:42:be:28:02:68:ce:
         35:56:7d:a3:6d:00:1e:f1:0f:c9:4b:e5:f3:51:ea:96:c7:d3:
         1a:1f:47:46:b2:c7:94:7e:70:33:e8:98:64:02:af:bc:16:09:
         b5:8a:8a:d5:9c:50:c8:d4:be:bb:2f:f1:36:6d:0c:1e:7a:e6:
         a1:fb:e8:6f:c8:04:ea:e2:44:a1:23:b8:b0:59:18:b2:1d:0c:
         d7:67:c2:67:03:39:cf:72:91:95:9f:22:eb:6f:18:c4:25:44:
         0b:50:2e:bd:d2:52:48:e4:ca:0a:ab:b8:7d:81:e9:b9:92:2c:
         55:08:81:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:40 2025 by rpki-client