Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa
File:                     323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa (raw, json)
Hash identifier:          2Gp4yCPlfzwBFqMfG75vKSfVi1qR5c1yyT7dGcLefOE=
Subject key identifier:   74:20:0D:85:82:B6:5A:30:6A:29:65:AA:D1:72:40:AD:98:B5:24:64
Certificate issuer:       /CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
Certificate serial:       03738B7D46F3D242957F0595B11E834A260BBF8F
Authority key identifier: 1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa
Signing time:             Tue 29 Jul 2025 15:17:09 +0000
ROA not before:           Tue 29 Jul 2025 15:12:09 +0000
ROA not after:            Tue 28 Jul 2026 15:17:09 +0000
asID:                     265384
IP address blocks:        2804:3340:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 13:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:73:8b:7d:46:f3:d2:42:95:7f:05:95:b1:1e:83:4a:26:0b:bf:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
        Validity
            Not Before: Jul 29 15:12:09 2025 GMT
            Not After : Jul 28 15:17:09 2026 GMT
        Subject: CN=74200D8582B65A306A2965AAD17240AD98B52464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:bf:2a:b3:8f:94:a8:4c:52:a6:99:80:f3:
                    0f:b9:b2:84:f0:6f:4b:79:f6:00:84:df:a2:bf:30:
                    ae:f5:11:fb:05:28:37:a3:46:64:c1:05:16:23:dc:
                    60:d8:4a:db:11:a0:25:12:0e:41:b8:d8:8d:0a:02:
                    56:60:08:10:03:50:4d:c9:eb:c6:49:e3:1a:5f:78:
                    fe:70:d8:f0:80:1a:32:42:9d:b0:a9:1a:a7:b4:ea:
                    33:e3:4a:c2:6f:a4:77:4a:87:e8:57:f4:1d:d1:4d:
                    20:8e:3f:86:59:63:c4:6c:0f:09:48:fe:04:c0:3b:
                    1a:71:dd:48:91:33:91:ea:5e:95:ca:65:50:e9:de:
                    1a:b1:46:da:3c:77:c3:dc:98:63:6a:03:31:5c:a8:
                    d2:0c:e8:cb:fb:fa:12:61:e3:ab:9d:93:f7:3d:4f:
                    08:30:88:02:9b:23:81:58:8e:af:16:3f:ee:cd:02:
                    8f:44:34:9d:b4:2a:46:35:e1:55:84:2f:b3:d3:ba:
                    b5:45:a3:af:89:a9:e7:1a:bf:c8:37:b1:03:e9:a7:
                    ae:0d:0b:cc:94:01:f5:6e:58:4f:b7:e7:f2:e1:e4:
                    12:2f:2e:e4:d7:11:42:b1:d8:27:a6:21:21:a3:41:
                    44:be:f5:0c:2e:19:82:9b:8f:0a:93:01:55:9d:f3:
                    6d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:20:0D:85:82:B6:5A:30:6A:29:65:AA:D1:72:40:AD:98:B5:24:64
            X509v3 Authority Key Identifier:
                keyid:1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3340:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:3d:5b:30:ef:82:de:17:82:18:14:f8:74:b3:f5:65:b6:1f:
         1b:68:d0:45:9e:f1:a1:df:23:95:00:c5:c1:09:47:74:47:b2:
         9a:51:8e:00:b1:41:d8:a5:81:97:69:27:4e:6e:a8:78:d5:2c:
         a5:51:e6:59:cf:1b:76:12:ae:3e:15:dd:2e:02:da:f0:69:53:
         a8:60:45:a2:fc:4c:30:b5:76:a2:7e:a1:1b:52:75:e3:ce:85:
         88:ef:fc:ad:90:51:bf:e8:e4:53:df:dc:87:c0:96:ca:23:b7:
         09:31:05:70:30:f3:39:dc:85:67:26:fb:ce:94:6b:02:d3:68:
         37:69:6c:f0:0e:d6:da:43:5c:cd:ca:35:c8:a6:a8:2d:b1:7c:
         3b:06:61:35:3c:96:95:61:4e:92:ed:67:ba:68:64:65:1d:97:
         22:3c:fe:68:e1:75:d6:34:61:b8:9d:d6:c8:f0:f9:f2:58:4f:
         65:c0:ac:bc:34:40:45:d6:96:33:75:1f:e6:fe:8e:e6:93:82:
         b1:9e:73:f1:bf:83:43:a1:2a:48:13:bb:46:d9:9b:fa:22:2b:
         05:1d:0a:a3:13:9d:fc:0a:7e:83:33:5b:b1:ba:2b:d3:46:3b:
         8c:45:6e:54:7a:47:a1:55:1b:bb:43:a3:14:d5:91:90:84:3f:
         bf:e1:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:47:20 2025 by rpki-client