Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a383030303a3a2f33352d3335203d3e20323639303938.roa
File:                     323830343a356636633a383030303a3a2f33352d3335203d3e20323639303938.roa (raw, json)
Hash identifier:          TEu9qYEh/MeHfHo0BF6C0X5jXeum1r+dyBaVDVr+h6E=
Subject key identifier:   62:D3:F4:07:74:1C:C6:66:DE:F7:F3:F2:54:12:7A:62:64:FC:7B:89
Certificate issuer:       /CN=73777C12CA4BD8733B75D3010D997C91E776937F
Certificate serial:       740A08C6FA99FDE7629F7B52835AA61002650D46
Authority key identifier: 73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a383030303a3a2f33352d3335203d3e20323639303938.roa
Signing time:             Fri 11 Jul 2025 20:05:41 +0000
ROA not before:           Fri 11 Jul 2025 20:00:41 +0000
ROA not after:            Fri 10 Jul 2026 20:05:41 +0000
asID:                     269098
IP address blocks:        2804:5f6c:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl
                          rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 08:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0a:08:c6:fa:99:fd:e7:62:9f:7b:52:83:5a:a6:10:02:65:0d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73777C12CA4BD8733B75D3010D997C91E776937F
        Validity
            Not Before: Jul 11 20:00:41 2025 GMT
            Not After : Jul 10 20:05:41 2026 GMT
        Subject: CN=62D3F407741CC666DEF7F3F254127A6264FC7B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:a1:bc:ca:fa:cd:12:de:92:54:ff:a0:d7:
                    88:81:ca:cc:40:55:e2:3c:4e:2c:bd:ed:e2:00:36:
                    c8:5a:ca:69:6b:2a:4d:9e:16:14:e8:86:18:f1:3c:
                    ae:73:c6:b5:40:f0:94:97:fe:ba:f1:04:77:00:f8:
                    12:c7:ec:b3:c1:37:71:66:dd:c9:db:d2:48:51:22:
                    e3:8e:85:dc:78:92:05:7a:8e:1d:bc:33:93:91:1c:
                    59:b8:f3:6b:5b:5a:46:6d:9f:d4:69:0a:db:18:62:
                    11:13:2e:d5:ec:e4:da:ea:cf:30:25:ff:01:15:d0:
                    5e:c8:12:16:a1:f9:8e:1f:6d:8e:e5:1e:65:e4:1a:
                    c3:7f:eb:1c:75:f8:12:2f:01:6a:43:bb:28:12:7a:
                    23:07:c9:97:f5:ee:d1:a5:56:7a:3c:55:df:05:a2:
                    b0:73:85:77:59:e6:0e:25:4d:1c:15:51:c6:e5:a9:
                    88:e3:90:68:79:f3:76:6d:b1:33:1a:f7:a7:84:77:
                    38:8e:5f:35:0c:16:5b:8f:98:86:21:06:3d:67:bf:
                    d5:34:60:9e:96:19:cf:b8:f3:ac:0c:50:fb:5d:69:
                    75:56:03:c5:b4:32:50:d9:2c:e7:74:6b:97:4a:ce:
                    b9:f7:f6:d6:e2:9e:27:df:14:64:36:16:30:0c:61:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D3:F4:07:74:1C:C6:66:DE:F7:F3:F2:54:12:7A:62:64:FC:7B:89
            X509v3 Authority Key Identifier:
                keyid:73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a383030303a3a2f33352d3335203d3e20323639303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f6c:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1b:8d:af:11:c7:fb:fd:00:24:af:b9:c6:42:ba:1f:26:9d:a3:
         54:9e:3b:32:b8:f4:18:40:47:f8:0f:51:e2:dd:9f:a9:11:56:
         86:e6:f5:fa:b9:67:af:80:21:19:d1:f8:12:fb:73:51:31:77:
         19:5a:1d:df:30:a7:1e:ea:fe:15:85:4c:40:8a:f3:1c:33:95:
         dd:8c:dd:ce:52:41:b5:5b:db:2a:6e:da:b8:1e:bf:41:b3:af:
         01:01:9c:59:75:1b:da:8e:6b:63:54:01:ec:79:89:87:c8:b0:
         e8:3b:43:c9:e6:88:90:99:b5:89:2b:87:ba:28:4a:c2:71:bd:
         5c:8b:17:af:66:5b:7e:c3:10:cc:35:94:bf:af:19:2a:e7:1b:
         41:69:1d:13:9b:00:a5:b5:c3:81:30:2a:8f:f8:3e:fc:43:b3:
         d4:5a:af:90:2a:33:23:99:72:22:39:90:50:38:75:4a:7d:41:
         94:be:c9:a3:1e:33:d6:9a:33:6b:62:23:2f:62:99:73:d6:c8:
         46:fd:a5:85:77:0c:44:7c:bd:12:4e:03:ed:f9:12:c8:71:6f:
         73:b1:e9:e6:20:ce:5b:f8:e6:fc:c9:f0:83:4f:79:34:6e:47:
         84:83:39:cf:14:d2:0a:24:5e:2b:2f:69:65:3c:84:9c:c7:4d:
         a4:3b:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:36 2025 by rpki-client