Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a633030303a3a2f33342d3334203d3e20323731363837.roa
File:                     323830343a376636633a633030303a3a2f33342d3334203d3e20323731363837.roa (raw, json)
Hash identifier:          U42rBI5D4GHnFWsCCV58dNf5nWOA+xYxjHbtE+KzUsw=
Subject key identifier:   E2:87:C2:51:66:DC:41:9A:7D:77:FA:81:74:63:0C:C3:C2:E1:8E:EE
Certificate issuer:       /CN=4C379380DB61C2A0DA301945FE3BE33A330017FE
Certificate serial:       02B00B0727BD9433C1A09648C8F551DAF172BBFE
Authority key identifier: 4C:37:93:80:DB:61:C2:A0:DA:30:19:45:FE:3B:E3:3A:33:00:17:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a633030303a3a2f33342d3334203d3e20323731363837.roa
Signing time:             Fri 08 Aug 2025 14:13:37 +0000
ROA not before:           Fri 08 Aug 2025 14:08:37 +0000
ROA not after:            Fri 07 Aug 2026 14:13:37 +0000
asID:                     271687
IP address blocks:        2804:7f6c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.crl
                          rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 00:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b0:0b:07:27:bd:94:33:c1:a0:96:48:c8:f5:51:da:f1:72:bb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C379380DB61C2A0DA301945FE3BE33A330017FE
        Validity
            Not Before: Aug  8 14:08:37 2025 GMT
            Not After : Aug  7 14:13:37 2026 GMT
        Subject: CN=E287C25166DC419A7D77FA8174630CC3C2E18EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:7e:d4:81:68:18:35:fc:87:70:9a:d8:72:
                    4a:a8:29:bd:eb:d2:f2:7b:ad:7a:9c:9f:e0:31:ff:
                    16:4a:7b:d6:c5:ad:ef:c9:20:59:1c:6e:b3:d3:0a:
                    cb:1b:0c:48:18:1f:c3:e0:1f:c0:54:2b:43:5c:f8:
                    34:0c:44:05:72:39:7b:14:bf:74:a8:18:71:d9:8b:
                    e7:41:21:84:51:9f:50:90:c9:15:b7:b9:9b:9e:13:
                    c1:f9:5b:8f:91:2a:fa:13:84:0a:2d:b6:49:be:a1:
                    d2:8a:72:8e:1d:26:2c:53:b9:83:76:4a:27:20:5e:
                    fb:cf:6d:15:d1:4f:33:b4:57:d8:f9:cb:bb:a5:47:
                    e1:d7:b0:e7:a5:9b:99:35:2c:22:d1:00:b9:8c:bd:
                    70:5c:03:df:5d:2a:4a:67:58:6a:18:7a:b3:77:f6:
                    15:44:01:a0:27:95:89:26:af:5c:d6:b2:0e:ac:bc:
                    f4:73:cd:b9:1c:45:bd:e0:5f:5a:8f:6a:96:d5:7b:
                    1a:a3:ab:89:45:9d:98:f1:1e:6d:c6:5a:83:94:cd:
                    10:d7:14:29:91:c9:43:f6:52:d2:73:fe:92:4c:91:
                    2e:f4:7a:cc:e0:3a:76:bf:6b:6d:2c:7b:bf:19:89:
                    8d:ea:0b:2e:c5:78:16:a2:dd:95:64:87:a5:be:52:
                    13:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:87:C2:51:66:DC:41:9A:7D:77:FA:81:74:63:0C:C3:C2:E1:8E:EE
            X509v3 Authority Key Identifier:
                keyid:4C:37:93:80:DB:61:C2:A0:DA:30:19:45:FE:3B:E3:3A:33:00:17:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a633030303a3a2f33342d3334203d3e20323731363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f6c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         97:e1:1b:e8:10:a8:fe:2d:b0:d9:3b:da:23:a3:45:7e:d8:8b:
         a4:98:cf:41:cd:b2:e3:2e:23:5d:93:d6:7d:d9:23:c0:03:8c:
         6c:a9:b3:ab:ea:4c:fa:67:92:43:83:13:26:0c:9f:e4:b8:08:
         2b:29:49:c2:a9:05:0b:0c:fd:3b:02:0a:19:ff:89:a0:49:da:
         21:57:1c:b0:fa:85:e1:0f:0c:21:d0:f8:3e:5f:5f:5f:b0:ba:
         77:87:53:0e:1d:7f:1a:37:1f:70:77:d7:73:e1:1b:b3:74:74:
         86:eb:dd:55:a2:f9:fb:87:51:d7:e7:cc:76:cb:d6:fb:ee:e1:
         d1:41:95:28:f1:b4:3c:7a:25:c8:dc:d1:a0:9f:34:a8:fc:f7:
         4c:cd:a6:25:e7:e5:52:e1:6f:14:51:8d:32:14:15:1a:23:16:
         53:d8:bc:e7:85:b7:dc:14:95:5d:24:6a:22:9d:78:05:98:fc:
         62:49:31:89:37:7f:a1:0e:1f:7e:68:89:e8:03:55:1f:ca:6f:
         90:b9:69:5c:58:30:22:cd:31:7a:0c:3f:0a:b8:e2:37:d5:5a:
         41:ca:2c:4b:9b:44:56:eb:01:26:04:66:77:64:01:2b:21:fe:
         32:94:e8:46:0f:8b:6c:62:1f:42:0d:6f:64:d7:3e:c6:f3:fa:
         0f:03:3d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:58 2025 by rpki-client