Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a383030303a3a2f33342d3334203d3e20323731363837.roa
File:                     323830343a376636633a383030303a3a2f33342d3334203d3e20323731363837.roa (raw, json)
Hash identifier:          1m7cPoeXKT+gyv6UiK1MMmDdeTBdf5lVuykHMPZsTtE=
Subject key identifier:   75:BA:BB:F3:0A:77:D6:7E:70:CB:58:3C:3C:D8:EC:8E:D3:B4:96:2D
Certificate issuer:       /CN=4C379380DB61C2A0DA301945FE3BE33A330017FE
Certificate serial:       3BD23EF423F04D41EC65649B9191AB41AA69E5DE
Authority key identifier: 4C:37:93:80:DB:61:C2:A0:DA:30:19:45:FE:3B:E3:3A:33:00:17:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a383030303a3a2f33342d3334203d3e20323731363837.roa
Signing time:             Fri 08 Aug 2025 14:13:40 +0000
ROA not before:           Fri 08 Aug 2025 14:08:40 +0000
ROA not after:            Fri 07 Aug 2026 14:13:40 +0000
asID:                     271687
IP address blocks:        2804:7f6c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.crl
                          rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 00:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d2:3e:f4:23:f0:4d:41:ec:65:64:9b:91:91:ab:41:aa:69:e5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C379380DB61C2A0DA301945FE3BE33A330017FE
        Validity
            Not Before: Aug  8 14:08:40 2025 GMT
            Not After : Aug  7 14:13:40 2026 GMT
        Subject: CN=75BABBF30A77D67E70CB583C3CD8EC8ED3B4962D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2c:a6:a6:ef:32:16:2f:77:d4:5a:0f:f6:eb:
                    1f:bf:28:c3:fa:fa:8b:f1:3b:70:7a:b5:76:9e:fc:
                    da:25:97:1c:a3:64:cd:b9:2b:54:39:ab:cd:f7:34:
                    ef:3c:2e:36:45:77:c9:3d:b5:b3:c1:31:43:9d:d2:
                    e1:03:45:d3:fb:f1:61:2f:bf:26:7c:19:9b:da:79:
                    e5:82:33:56:8f:14:80:a5:90:50:0e:69:ce:35:b6:
                    46:9d:4f:70:5c:99:b7:26:26:a9:56:32:93:91:11:
                    56:23:f8:48:39:87:0a:ac:e8:fb:02:c0:b6:74:61:
                    fd:9f:46:7a:19:0f:78:30:4f:37:48:01:91:c8:7f:
                    24:5b:8a:97:35:3e:3f:b6:db:3b:cc:23:9f:95:3f:
                    38:be:cb:dc:88:a4:59:a7:42:9e:e8:f1:cd:d9:1f:
                    75:4d:16:c3:10:7f:05:62:4b:ff:8b:07:72:28:c6:
                    c9:04:9d:5e:4a:c9:80:3f:31:66:1b:2a:e1:66:d1:
                    a8:99:1f:30:ab:7d:6a:2f:1b:99:d6:7e:bf:18:f3:
                    9e:9d:49:e6:6d:b4:d0:69:43:96:b2:ad:41:42:5b:
                    1f:1d:17:ff:c3:47:26:10:85:7a:03:7f:6b:cd:83:
                    4f:23:5e:a1:bb:43:9b:40:26:16:9b:26:7f:64:35:
                    ef:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BA:BB:F3:0A:77:D6:7E:70:CB:58:3C:3C:D8:EC:8E:D3:B4:96:2D
            X509v3 Authority Key Identifier:
                keyid:4C:37:93:80:DB:61:C2:A0:DA:30:19:45:FE:3B:E3:3A:33:00:17:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a383030303a3a2f33342d3334203d3e20323731363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f6c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         80:b2:b0:7c:e0:54:df:d9:dc:ba:41:47:f9:b8:d6:a2:24:e1:
         a2:d9:37:3f:9f:fd:eb:13:0b:ad:fb:3d:b4:6f:47:a2:cb:31:
         0d:b8:36:7d:74:ae:77:25:ce:10:6a:d6:0c:c5:d0:ee:1f:7d:
         c0:8e:50:b6:b7:7a:6d:48:f3:d6:93:8a:6d:f1:41:c8:26:f9:
         3b:3f:f2:7d:0d:ce:81:bb:ba:31:82:fb:e5:09:9e:c0:9d:3b:
         64:3a:a3:b5:61:1b:31:97:d2:4d:78:21:e5:d0:b8:2a:af:6f:
         5f:a8:db:5b:59:47:33:6e:dc:4a:47:a9:d3:36:5f:a2:27:a3:
         9e:3a:23:7a:58:10:6d:97:ee:7c:cf:ee:b5:d7:e1:ca:e6:c6:
         4a:eb:77:11:db:ef:6c:fd:e9:86:f2:01:3f:19:3e:40:1e:2f:
         e1:9f:b2:e5:4d:e3:cf:e2:01:81:71:e9:fb:cd:4d:20:a6:71:
         f6:31:03:85:b6:20:df:77:66:52:4e:a5:0e:26:37:f2:09:9c:
         99:ad:4b:42:7f:ae:a1:f3:48:1c:c4:2b:30:84:53:c4:30:5d:
         f4:7c:4f:44:b5:90:03:e8:e1:42:e6:56:43:0a:a7:11:7b:65:
         fb:c7:8d:b9:31:b4:46:9e:70:8f:b8:d2:dd:66:21:33:66:d0:
         c0:df:ab:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:29 2025 by rpki-client