Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a633030303a3a2f33352d3335203d3e20323639303938.roa
File:                     323830343a356636633a633030303a3a2f33352d3335203d3e20323639303938.roa (raw, json)
Hash identifier:          YECzetHaOBzYwYMB1Y2IuFKXt2MyeboW1J1vHsEfC2M=
Subject key identifier:   7E:7C:A1:D1:E2:C7:BF:3C:61:48:44:EA:36:63:18:9E:D2:3B:FD:90
Certificate issuer:       /CN=73777C12CA4BD8733B75D3010D997C91E776937F
Certificate serial:       03D9D0B6E3877E059458A687B124F799E2F46743
Authority key identifier: 73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a633030303a3a2f33352d3335203d3e20323639303938.roa
Signing time:             Fri 11 Jul 2025 20:05:59 +0000
ROA not before:           Fri 11 Jul 2025 20:00:59 +0000
ROA not after:            Fri 10 Jul 2026 20:05:59 +0000
asID:                     269098
IP address blocks:        2804:5f6c:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl
                          rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 08:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d9:d0:b6:e3:87:7e:05:94:58:a6:87:b1:24:f7:99:e2:f4:67:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73777C12CA4BD8733B75D3010D997C91E776937F
        Validity
            Not Before: Jul 11 20:00:59 2025 GMT
            Not After : Jul 10 20:05:59 2026 GMT
        Subject: CN=7E7CA1D1E2C7BF3C614844EA3663189ED23BFD90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:db:48:4f:b5:88:97:98:ed:10:39:e2:07:
                    a6:5a:9f:53:37:a8:ce:7f:e2:f8:f6:32:9f:91:5f:
                    cb:36:32:d1:c5:e3:e9:e4:28:dc:70:28:30:35:ed:
                    98:38:73:97:20:dc:ad:38:49:98:b8:1b:5b:50:bb:
                    5a:fb:e1:03:c6:28:40:92:79:60:cf:86:29:8c:e8:
                    2b:72:85:ef:2c:6f:ad:af:00:17:aa:cd:16:a9:61:
                    50:7b:ca:b0:97:3f:38:43:59:3c:f0:43:b7:74:64:
                    73:f8:8b:f4:89:09:0a:87:e3:73:28:5b:8e:99:23:
                    49:8c:e9:34:f4:f7:77:05:f1:b9:ba:bf:0e:b5:f9:
                    75:62:5a:26:26:95:21:a5:57:b2:18:f4:13:0c:09:
                    7e:06:f9:53:27:0d:c7:7d:cc:89:38:6d:d5:cc:cc:
                    9c:b1:87:45:e5:5e:97:80:6b:ba:78:6a:89:8b:ac:
                    43:9f:d2:d0:05:7a:e5:75:4e:81:3c:fb:00:e9:05:
                    83:41:25:16:f6:dd:29:3a:ba:eb:83:9d:b9:a7:b2:
                    11:73:e6:95:2d:10:ad:20:d0:71:40:eb:ce:b8:6a:
                    27:47:16:cc:67:c2:6a:4f:1c:2f:10:30:6e:43:9c:
                    a2:91:07:65:b1:eb:7b:3d:e4:a5:06:43:fa:5c:fc:
                    f0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7C:A1:D1:E2:C7:BF:3C:61:48:44:EA:36:63:18:9E:D2:3B:FD:90
            X509v3 Authority Key Identifier:
                keyid:73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a633030303a3a2f33352d3335203d3e20323639303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f6c:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b6:d9:39:f4:88:e8:c8:b2:f5:5f:c0:37:be:4a:fe:64:2c:e7:
         26:76:52:09:57:31:13:45:b5:db:f7:a1:03:90:65:b4:06:e9:
         19:3e:3b:25:b2:ed:ad:61:e1:62:87:96:82:8a:1a:2f:b1:67:
         41:31:8d:ac:c1:f6:04:18:75:67:26:0f:f5:dd:ce:3a:e9:1e:
         66:46:5a:85:d9:ea:f1:58:a4:93:88:d4:e6:86:13:08:17:22:
         79:98:17:13:99:12:88:b8:e8:1b:52:9a:73:d3:5c:21:92:96:
         bb:c4:0a:26:97:e8:3b:54:24:f6:f3:6a:14:e4:3e:21:fa:ff:
         ab:48:52:bc:3a:16:c3:37:73:ba:c9:51:2a:14:52:61:c0:b9:
         8e:b2:9c:7d:86:5b:0a:66:8a:0f:b9:58:d9:f0:6d:8a:4c:0a:
         98:69:cb:39:0c:56:8a:de:bc:a7:72:75:f1:ae:cd:44:4c:07:
         e7:1b:69:29:73:92:42:92:66:da:b3:dc:19:91:33:b5:31:b2:
         e4:c3:64:a8:5f:20:16:0e:5d:0b:03:22:21:1e:02:8a:fa:07:
         60:63:0a:65:72:0e:93:d0:50:18:10:5b:48:fe:7c:ec:7d:e0:
         34:8a:fd:1b:0a:aa:1b:6f:f0:04:b1:39:2e:1a:2c:37:00:4a:
         b9:cb:21:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:31:27 2025 by rpki-client