Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/323830343a326134303a3a2f33322d3332203d3e20323634303637.roa
File:                     323830343a326134303a3a2f33322d3332203d3e20323634303637.roa (raw, json)
Hash identifier:          38YZAr7HJD26G73/bUGnS9JzFXHTeg0XVJPl1ncDUZc=
Subject key identifier:   81:A1:94:41:47:E4:90:02:F9:93:B0:D9:DE:FF:85:9D:86:4E:C1:31
Certificate issuer:       /CN=608E3468464471A407DA37B93E7EAA2E8A3F6EE4
Certificate serial:       3142A2AA42AF585DB8C70A66014BEE88F631FBD5
Authority key identifier: 60:8E:34:68:46:44:71:A4:07:DA:37:B9:3E:7E:AA:2E:8A:3F:6E:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/323830343a326134303a3a2f33322d3332203d3e20323634303637.roa
Signing time:             Wed 09 Jul 2025 12:44:05 +0000
ROA not before:           Wed 09 Jul 2025 12:39:05 +0000
ROA not after:            Wed 08 Jul 2026 12:44:05 +0000
asID:                     264067
IP address blocks:        2804:2a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl
                          rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 06:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:42:a2:aa:42:af:58:5d:b8:c7:0a:66:01:4b:ee:88:f6:31:fb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608E3468464471A407DA37B93E7EAA2E8A3F6EE4
        Validity
            Not Before: Jul  9 12:39:05 2025 GMT
            Not After : Jul  8 12:44:05 2026 GMT
        Subject: CN=81A1944147E49002F993B0D9DEFF859D864EC131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:8a:c9:5b:6f:76:44:df:76:d3:bb:f1:07:
                    d7:42:60:a4:4d:47:fd:57:bc:cb:46:e9:be:d8:42:
                    b4:d0:0c:3b:4c:c8:13:57:9a:5c:33:5b:e3:19:af:
                    64:13:e0:fe:17:07:6f:e6:87:3e:8b:11:ad:b8:a7:
                    ee:54:b8:10:eb:a1:ad:5e:dc:da:b8:e0:86:e4:37:
                    8b:4f:aa:12:01:83:33:0b:10:79:35:1e:e0:b1:ab:
                    a6:dd:2b:ef:22:aa:ef:1c:59:bb:26:8f:59:3b:9d:
                    f2:18:7f:6a:34:0a:ce:cf:e7:0d:65:d8:b3:c0:31:
                    d7:84:55:d7:3b:76:c4:85:69:88:4b:7c:fb:dc:6f:
                    00:52:67:60:59:92:58:cf:34:b3:3a:b6:54:99:66:
                    b3:c7:b6:15:7e:49:2b:e5:dd:4c:86:e1:ee:e1:7f:
                    40:db:3d:33:bc:8c:d8:d9:87:6e:b9:72:72:f2:c4:
                    29:67:ec:70:be:99:e6:af:25:7d:5c:f9:4c:7a:2a:
                    b8:bc:b7:34:51:43:b1:48:55:b8:76:c4:2c:c3:68:
                    fc:2d:6b:0c:7c:e7:13:2c:9d:9b:14:d8:fc:ad:9f:
                    99:00:1a:eb:e6:52:1c:48:72:08:12:0a:b9:c6:e7:
                    0c:c5:5b:1a:e7:66:42:0d:36:b6:4b:2f:e3:72:fa:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A1:94:41:47:E4:90:02:F9:93:B0:D9:DE:FF:85:9D:86:4E:C1:31
            X509v3 Authority Key Identifier:
                keyid:60:8E:34:68:46:44:71:A4:07:DA:37:B9:3E:7E:AA:2E:8A:3F:6E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/323830343a326134303a3a2f33322d3332203d3e20323634303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:4c:1f:99:06:42:d3:47:3b:21:64:7f:6a:9e:a6:f2:0e:24:
         45:0f:4e:20:da:26:d8:7d:e3:8f:a8:97:2f:f2:b6:41:85:d4:
         12:b5:f0:09:02:72:16:f9:08:8d:4a:14:56:31:04:da:ff:10:
         73:8f:46:de:0d:45:bc:fb:fb:e0:99:5f:e6:3a:5e:ab:7f:d6:
         66:de:74:af:c3:81:4f:44:3d:1d:e3:4b:9b:1d:9f:dd:8f:50:
         e6:15:ff:36:bc:a6:9d:95:33:93:4f:2a:d9:c3:09:47:31:24:
         6b:dd:6e:ad:9c:43:e9:0a:77:fb:33:2d:fc:7c:c4:a3:55:bb:
         b5:3f:f1:f9:04:a9:51:20:84:93:86:54:38:1f:4b:fa:5d:5d:
         47:14:3d:84:bf:b0:ec:f9:58:50:1c:1a:ed:ba:e1:77:d3:36:
         43:0e:bf:d1:39:8f:02:26:da:b8:ff:86:6b:2c:13:02:fe:c6:
         b7:c1:60:44:04:fd:02:d9:eb:ab:92:7a:db:58:b8:4c:df:5a:
         c5:4b:e7:ab:fd:40:d2:c7:02:de:65:74:93:3a:cb:47:53:8e:
         e3:e6:27:59:2b:b4:ba:d2:fe:db:57:10:0a:7b:a2:7a:81:58:
         fe:b0:c4:3e:54:54:85:48:d8:71:bb:6c:53:c8:e1:68:42:2a:
         4d:50:77:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:54:17 2025 by rpki-client