Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/323830343a393435633a31323a3a2f34382d3438203d3e203631363234.roa
File:                     323830343a393435633a31323a3a2f34382d3438203d3e203631363234.roa (raw, json)
Hash identifier:          STkPyccVeUxaO9xk5tWcF3qQMhapGN9zyhQKh5ySEZ0=
Subject key identifier:   71:27:AD:55:73:5A:1E:20:EB:18:E4:A6:E7:20:C6:0F:1B:A1:B5:C1
Certificate issuer:       /CN=3A039835A68C92594BA889BF185A560E86C0CFD1
Certificate serial:       0748F5C870438385EC4F1EBA0BE8D96AA21033E6
Authority key identifier: 3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/323830343a393435633a31323a3a2f34382d3438203d3e203631363234.roa
Signing time:             Wed 09 Jul 2025 01:53:31 +0000
ROA not before:           Wed 09 Jul 2025 01:48:31 +0000
ROA not after:            Wed 08 Jul 2026 01:53:31 +0000
asID:                     61624
IP address blocks:        2804:945c:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl
                          rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 06:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:48:f5:c8:70:43:83:85:ec:4f:1e:ba:0b:e8:d9:6a:a2:10:33:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A039835A68C92594BA889BF185A560E86C0CFD1
        Validity
            Not Before: Jul  9 01:48:31 2025 GMT
            Not After : Jul  8 01:53:31 2026 GMT
        Subject: CN=7127AD55735A1E20EB18E4A6E720C60F1BA1B5C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0d:e3:f9:8e:44:60:fc:97:5d:e9:a7:12:99:
                    3a:c5:a0:db:35:fa:cd:a5:e9:d3:86:80:55:12:6a:
                    21:32:35:d9:23:a5:37:61:f3:66:7f:18:0d:67:04:
                    bb:de:71:c3:22:0f:75:6e:74:7a:e2:1c:31:13:05:
                    81:93:95:e6:46:26:fc:b0:aa:b3:d4:8a:b2:12:fe:
                    e5:d2:7d:07:99:4c:fe:de:77:c6:b5:75:d1:d7:38:
                    8b:6a:98:04:44:bc:9f:f6:c5:09:a2:a5:d8:6e:0d:
                    a9:a6:01:1f:de:ed:95:01:f8:7a:6c:1c:a4:aa:83:
                    9b:fd:67:fa:71:d6:82:a2:e0:5a:8d:39:27:62:fe:
                    a3:00:f6:a8:4b:b6:cf:9e:96:de:ab:6e:1f:e0:b9:
                    86:3d:7b:b2:3d:c7:7c:e0:d8:b6:24:cd:74:43:ec:
                    c5:1a:a0:42:fd:2d:a3:f5:ae:05:34:86:84:3a:29:
                    db:99:ea:d2:cd:1b:f3:e5:31:ee:54:4c:b2:24:53:
                    f4:69:ff:a6:e3:f6:6a:a8:48:41:e8:f9:9d:15:bd:
                    5e:9d:57:ae:bb:fb:0d:f7:97:52:f7:0e:8c:f8:b2:
                    39:ad:20:4c:7a:38:39:dd:23:47:bb:6f:fa:2b:fa:
                    6e:32:99:ab:3d:d7:f3:40:df:82:b8:80:ea:39:02:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:27:AD:55:73:5A:1E:20:EB:18:E4:A6:E7:20:C6:0F:1B:A1:B5:C1
            X509v3 Authority Key Identifier:
                keyid:3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/323830343a393435633a31323a3a2f34382d3438203d3e203631363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:945c:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:ee:4d:63:8c:6a:bf:44:01:90:77:bd:1b:36:be:83:c0:04:
         56:f6:1d:af:ba:07:4b:13:01:e0:a1:8b:e2:2e:b7:2f:14:ec:
         df:32:86:fb:e0:9b:92:8d:40:80:b3:7f:c2:34:53:4b:e3:af:
         d4:1d:7f:5c:e4:34:08:1c:87:f3:b0:93:f5:ca:03:16:bb:58:
         bf:76:af:cb:7b:aa:32:09:f2:a8:fa:c8:56:82:df:d0:9b:3a:
         1a:f2:5c:e9:4e:89:0b:e7:93:21:f0:09:ed:12:0d:0a:6f:35:
         55:df:74:02:52:59:ba:34:5d:60:f4:ce:53:f7:91:34:8b:7a:
         0c:9e:1f:82:37:47:ef:ea:dd:96:1f:aa:4a:a0:f8:59:ef:98:
         1f:73:3a:03:85:ae:fa:2d:83:0a:5d:0f:a3:43:4a:93:6e:54:
         c7:7b:ab:c9:ca:0a:b9:43:61:ea:54:1d:5d:7a:56:4f:21:3f:
         8d:51:aa:8f:24:d0:f3:bd:6b:fa:b5:40:a8:c8:d7:d4:4c:38:
         38:c5:0e:6c:31:c6:77:eb:c2:f8:8b:eb:93:b7:3c:b5:26:bf:
         de:8f:15:7d:6f:74:ec:05:a2:83:73:4e:03:3a:ba:52:a3:3a:
         8e:f5:99:e8:b1:41:9c:9e:7d:19:3f:e9:76:96:1d:58:b1:e5:
         8e:3b:e4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:08:17 2025 by rpki-client