Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a653030303a3a2f33352d3335203d3e20323639303938.roa
File:                     323830343a356636633a653030303a3a2f33352d3335203d3e20323639303938.roa (raw, json)
Hash identifier:          VyXJC2FmwWMhlJt0PaMezxdveOq8Uuo8F8ieRKQlNk4=
Subject key identifier:   7B:EF:1C:92:F2:49:BF:DC:53:5C:0A:22:02:3A:A5:35:00:4D:8C:78
Certificate issuer:       /CN=73777C12CA4BD8733B75D3010D997C91E776937F
Certificate serial:       24C8A5B732B5A661913109428FAF3CA37DB8C045
Authority key identifier: 73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a653030303a3a2f33352d3335203d3e20323639303938.roa
Signing time:             Fri 11 Jul 2025 20:06:07 +0000
ROA not before:           Fri 11 Jul 2025 20:01:07 +0000
ROA not after:            Fri 10 Jul 2026 20:06:07 +0000
asID:                     269098
IP address blocks:        2804:5f6c:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl
                          rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 08:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c8:a5:b7:32:b5:a6:61:91:31:09:42:8f:af:3c:a3:7d:b8:c0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73777C12CA4BD8733B75D3010D997C91E776937F
        Validity
            Not Before: Jul 11 20:01:07 2025 GMT
            Not After : Jul 10 20:06:07 2026 GMT
        Subject: CN=7BEF1C92F249BFDC535C0A22023AA535004D8C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:25:c8:96:01:2b:3d:05:c7:03:e2:98:55:
                    14:fb:02:d5:58:35:d4:21:22:ce:95:bc:dd:ef:ad:
                    a5:48:ce:de:ec:56:46:df:63:2e:8a:59:08:4a:39:
                    9a:e4:9d:ef:4c:ab:3f:48:2a:1e:22:6d:b4:af:26:
                    63:3d:f1:1a:1d:c2:cc:ab:30:4a:30:77:f1:f7:66:
                    18:85:3e:d3:d6:f9:0e:ea:3a:4e:59:f0:a2:ae:f6:
                    da:3c:e7:44:88:10:f1:2a:65:c9:8c:d4:9e:43:78:
                    88:ca:fc:86:15:4e:35:3c:44:41:2d:90:a7:d8:1b:
                    55:86:00:6a:31:f0:ba:b6:f5:5c:37:18:d4:41:3c:
                    95:ae:f0:73:51:31:fc:eb:6f:d2:de:18:c9:6e:f1:
                    aa:cc:73:82:de:04:fd:e2:f3:c9:dc:9f:e7:46:d5:
                    09:5c:b6:d9:fe:8d:aa:42:8e:2e:59:aa:a0:c2:37:
                    73:25:37:a6:fe:54:57:bb:bc:87:95:de:3e:4e:eb:
                    bf:8a:6e:a8:52:1f:ac:4c:ef:b2:a4:5e:c6:bb:d5:
                    a9:14:fa:78:23:59:f8:a5:c2:70:0d:03:74:a2:94:
                    31:ec:e1:b6:d7:9a:f8:79:ad:8c:ce:13:d0:13:57:
                    5e:5d:72:08:4d:dc:8c:51:ec:1c:dd:aa:7d:e7:53:
                    a7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EF:1C:92:F2:49:BF:DC:53:5C:0A:22:02:3A:A5:35:00:4D:8C:78
            X509v3 Authority Key Identifier:
                keyid:73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a653030303a3a2f33352d3335203d3e20323639303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f6c:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5e:67:3b:71:19:10:a8:26:b4:cc:40:c5:87:39:56:4e:b0:68:
         28:80:0b:ac:1e:3a:0f:8f:78:40:6a:bc:d1:23:82:87:e2:cd:
         2f:91:f4:d8:5d:3f:1f:0b:5c:67:9b:4e:b9:63:4c:ca:ce:5d:
         22:dd:36:8d:ae:a4:ad:be:2a:87:33:b8:0f:63:a4:4a:f3:4e:
         21:7d:87:8f:be:43:a5:76:ba:6e:27:e3:33:80:c6:a8:94:a7:
         8a:b1:8c:35:44:b9:bb:b5:7e:b3:60:fc:46:00:26:48:79:cd:
         19:34:e3:90:00:0c:7d:e7:81:1e:4b:4b:bf:0f:fa:cf:fe:d3:
         43:e7:a4:66:5e:92:82:55:28:cf:18:6f:71:b7:40:33:bb:df:
         bd:76:50:af:3f:09:f1:bb:53:85:6c:55:d8:fd:d8:34:0f:ca:
         eb:a4:a3:f6:44:18:4c:57:18:c5:b0:70:9d:e7:99:23:ed:b5:
         04:23:eb:80:11:ee:f7:d7:f5:ad:34:dd:5f:55:86:9a:04:da:
         c8:08:20:a6:fc:91:bf:3b:12:67:2a:38:81:31:eb:5a:26:c4:
         f7:83:8f:38:68:f8:b7:18:92:d4:08:da:27:a3:17:9c:ec:a4:
         b8:f1:c6:12:ed:4e:1f:30:b3:77:9d:ca:d2:0f:33:48:3b:b5:
         8d:5e:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:16:03 2025 by rpki-client