Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/323830343a316433303a3a2f33322d3334203d3e20323634333533.roa
File:                     323830343a316433303a3a2f33322d3334203d3e20323634333533.roa (raw, json)
Hash identifier:          1wxtTCj3CNX3PkOgqpWEjswPSaD8y+wB6nt5m8xB4KM=
Subject key identifier:   CA:BE:26:74:54:A0:92:39:D7:44:C7:58:14:41:4E:99:FB:2B:C7:E5
Certificate issuer:       /CN=6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D
Certificate serial:       6667B766CC9D42E6AD33BD5D95623DA121B40EDD
Authority key identifier: 6D:39:85:2A:3C:6A:B4:CF:15:9D:D7:D1:50:BB:AD:5D:44:E3:D8:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/323830343a316433303a3a2f33322d3334203d3e20323634333533.roa
Signing time:             Mon 21 Jul 2025 22:08:05 +0000
ROA not before:           Mon 21 Jul 2025 22:03:05 +0000
ROA not after:            Mon 20 Jul 2026 22:08:05 +0000
asID:                     264353
IP address blocks:        2804:1d30::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl
                          rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 22:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:67:b7:66:cc:9d:42:e6:ad:33:bd:5d:95:62:3d:a1:21:b4:0e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D
        Validity
            Not Before: Jul 21 22:03:05 2025 GMT
            Not After : Jul 20 22:08:05 2026 GMT
        Subject: CN=CABE267454A09239D744C75814414E99FB2BC7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:71:31:3f:63:bf:c4:3e:d2:59:2d:10:d2:
                    25:38:95:c3:b1:2b:24:7a:05:8e:2b:d8:9b:1d:6d:
                    03:48:b5:64:81:62:a0:fe:24:76:15:82:4b:1d:3c:
                    23:90:08:1b:4f:77:a0:c7:77:be:fb:80:1a:01:0a:
                    8b:04:06:06:69:9e:dc:e3:fb:04:a1:6a:85:87:24:
                    e9:f7:4e:54:75:dc:48:37:62:e3:ae:f9:8a:15:3a:
                    68:f4:c1:0c:a6:24:1a:b7:30:9a:18:6d:0f:19:fa:
                    47:90:b3:7c:8e:e4:ce:8a:11:52:9e:ba:b4:9d:91:
                    bc:f8:b9:ef:bb:aa:c9:70:b4:2f:ca:75:f5:0d:ca:
                    57:0a:0e:5e:e7:e7:ee:75:90:b9:c2:15:05:cb:36:
                    ef:e7:42:9d:05:ea:2b:47:31:35:fe:ba:d4:04:51:
                    d2:7b:5e:d8:b3:38:e5:0f:e8:08:cb:fe:12:ac:55:
                    4d:92:0f:5a:87:04:67:52:25:7e:ee:50:91:bf:44:
                    41:13:b6:6b:2c:29:b5:55:49:ac:82:0e:d1:c8:2f:
                    d8:bc:30:a2:70:5d:6f:42:0d:7c:77:ca:e9:02:93:
                    d3:c3:1d:8f:67:1c:21:43:ca:c3:0a:2e:9b:fc:48:
                    cd:13:b2:e4:87:f5:8e:0a:7d:92:b9:bf:b4:c3:27:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BE:26:74:54:A0:92:39:D7:44:C7:58:14:41:4E:99:FB:2B:C7:E5
            X509v3 Authority Key Identifier:
                keyid:6D:39:85:2A:3C:6A:B4:CF:15:9D:D7:D1:50:BB:AD:5D:44:E3:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/323830343a316433303a3a2f33322d3334203d3e20323634333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d30::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:5c:85:0b:26:80:cd:ba:72:a5:91:a5:2e:b3:32:de:5f:14:
         68:78:74:5e:15:cb:ba:01:c4:21:b9:2b:19:92:fa:2e:c0:7b:
         3d:17:85:92:78:6d:70:c5:18:0d:a9:6e:10:63:57:ee:1a:ee:
         fa:88:c4:da:41:22:6f:21:66:28:f8:2a:14:6a:42:23:f2:20:
         dd:67:e1:e1:66:21:21:1b:5f:0c:77:74:72:c6:a2:2b:b5:26:
         ae:af:6f:a1:39:8e:0e:82:4b:e0:5c:ec:fa:59:90:4b:ed:c3:
         75:f9:08:d2:0b:93:28:b4:1b:f8:64:f0:08:75:b5:b5:ba:88:
         8e:b1:79:39:18:c4:d2:55:ed:08:9e:9d:67:4a:74:ae:a5:a8:
         a7:8e:fa:6a:33:42:99:8b:ed:8f:6d:bb:8b:4b:11:84:06:94:
         86:1d:6d:ea:b3:a8:5a:83:f0:06:c6:09:98:fc:30:f5:ff:4a:
         a7:5f:52:57:6a:ce:46:07:bf:c6:9f:28:c6:86:7f:2b:53:29:
         2c:32:8e:3e:18:dd:ec:c7:36:02:8d:13:38:50:f1:36:9d:02:
         90:bb:35:79:3b:16:cc:ca:73:7d:f0:7a:68:1b:f8:6f:7f:7c:
         5c:86:b6:08:9f:a1:4e:51:86:dc:1e:d7:65:0b:6f:27:8b:7d:
         5b:0a:ee:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:50:13 2025 by rpki-client