Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/323830343a373837633a3a2f33322d3332203d3e20323731323435.roa
File:                     323830343a373837633a3a2f33322d3332203d3e20323731323435.roa (raw, json)
Hash identifier:          gWzHOj7RpUvvubTZm4O3BfvOn4wzZ5t6kx8zYlUUHnc=
Subject key identifier:   44:3A:D5:C8:66:D0:B4:44:4E:18:2E:8E:9A:F1:B1:35:F8:31:04:BB
Certificate issuer:       /CN=ED33640A82E7F8F1250ABE59F8C020031AE986A3
Certificate serial:       36960B9D2EAFB9BA23A1FBB87D73A7EE20A97882
Authority key identifier: ED:33:64:0A:82:E7:F8:F1:25:0A:BE:59:F8:C0:20:03:1A:E9:86:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/323830343a373837633a3a2f33322d3332203d3e20323731323435.roa
Signing time:             Thu 31 Jul 2025 13:37:05 +0000
ROA not before:           Thu 31 Jul 2025 13:32:05 +0000
ROA not after:            Thu 30 Jul 2026 13:37:05 +0000
asID:                     271245
IP address blocks:        2804:787c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.crl
                          rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 09:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:96:0b:9d:2e:af:b9:ba:23:a1:fb:b8:7d:73:a7:ee:20:a9:78:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED33640A82E7F8F1250ABE59F8C020031AE986A3
        Validity
            Not Before: Jul 31 13:32:05 2025 GMT
            Not After : Jul 30 13:37:05 2026 GMT
        Subject: CN=443AD5C866D0B4444E182E8E9AF1B135F83104BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:d7:81:47:71:b3:0a:aa:8e:9f:5e:7d:e4:
                    18:4f:89:e0:15:59:d3:37:c7:53:3e:34:d4:26:3b:
                    5f:9c:dd:39:b1:32:22:cc:97:01:25:62:15:fa:96:
                    74:a6:88:e9:28:62:59:be:f8:8b:86:e9:5c:da:48:
                    29:5d:13:d8:41:99:e2:f3:8b:4f:72:98:fd:4f:a6:
                    5a:df:bf:08:1e:b8:3f:41:df:6c:b8:57:28:8c:7f:
                    27:4a:88:40:fd:a3:ec:ed:5e:8c:d2:79:cf:63:b3:
                    57:51:28:9b:39:2c:f6:34:45:71:f7:d4:18:29:bf:
                    be:70:7b:c1:13:8c:e5:0a:6e:51:f5:1d:c8:88:2a:
                    82:ef:c0:fe:d2:87:f6:a3:5f:89:9f:56:91:ea:66:
                    81:d9:0b:43:11:4f:fc:84:53:10:73:c5:b3:c0:cf:
                    35:9f:49:2c:b4:19:f4:7e:78:5f:e2:c5:b8:6f:e8:
                    06:27:d4:ff:d9:7c:15:5c:25:4c:11:ab:29:cc:f7:
                    aa:9d:aa:0a:ca:ad:99:c0:4c:fe:00:c1:6f:d5:61:
                    ef:55:77:5b:89:ab:f6:b4:12:90:4b:e1:6d:ea:31:
                    9a:46:b0:00:f7:d7:c5:7c:3c:c1:d2:12:c1:88:de:
                    5b:9a:1d:50:22:37:1e:94:1e:5f:7a:4e:cf:43:9d:
                    b9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3A:D5:C8:66:D0:B4:44:4E:18:2E:8E:9A:F1:B1:35:F8:31:04:BB
            X509v3 Authority Key Identifier:
                keyid:ED:33:64:0A:82:E7:F8:F1:25:0A:BE:59:F8:C0:20:03:1A:E9:86:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/323830343a373837633a3a2f33322d3332203d3e20323731323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:787c::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:24:f9:a4:c0:b5:d3:a6:e2:0e:f4:1a:52:5f:52:49:6f:6f:
         08:c2:b2:f7:f6:bf:94:a2:c9:5b:73:da:62:f5:a7:10:92:41:
         b6:79:d3:2d:ec:3b:dd:0e:61:ea:e4:2f:6f:c4:2c:90:03:66:
         4e:ed:55:13:b4:0d:1c:43:2f:4e:02:46:11:be:1e:13:62:77:
         2b:92:fb:36:c9:4a:35:e5:f4:0e:e3:35:6e:de:89:12:09:7a:
         22:c4:b9:bb:a8:4a:03:5c:e1:27:fd:99:63:31:71:d2:be:85:
         ae:8f:3f:c7:48:92:a4:a6:27:90:21:4e:37:ef:f2:3a:b9:49:
         52:d3:e9:ac:91:5c:f9:5f:66:01:30:da:08:39:5b:a8:19:50:
         df:bf:d0:27:11:12:27:37:9f:2f:e0:40:a5:26:b1:e5:71:63:
         01:e0:a3:fd:6b:2a:35:f2:ca:74:88:ef:df:28:3b:2b:e9:2b:
         42:00:26:9b:11:ea:33:80:55:f5:47:75:b5:27:81:34:f7:61:
         c7:77:6c:eb:28:53:0d:68:f5:ca:7d:8d:f6:a0:4e:8b:07:74:
         5f:72:fe:66:7b:a6:3e:6a:08:c7:72:26:d8:79:d5:35:68:29:
         de:78:40:b7:31:fe:d2:d9:65:0e:14:bf:c5:73:98:53:48:b3:
         f2:73:3d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:35:18 2025 by rpki-client