Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633031363a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a633031363a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          bpW1mdMMfXnn7eIZgJaUf6CVolHZ8j16BQ4eYhCqwuE=
Subject key identifier:   0A:DF:9E:F5:62:65:BC:6B:96:01:49:08:27:CA:77:E1:9D:D1:8B:95
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       7B673F61FC94D7ED9F07AABA2E1ED6FB0D4A253E
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633031363a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Tue 29 Jul 2025 16:50:52 +0000
ROA not before:           Tue 29 Jul 2025 16:45:52 +0000
ROA not after:            Tue 28 Jul 2026 16:50:52 +0000
asID:                     264996
IP address blocks:        2804:3124:c016::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 23:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:67:3f:61:fc:94:d7:ed:9f:07:aa:ba:2e:1e:d6:fb:0d:4a:25:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Jul 29 16:45:52 2025 GMT
            Not After : Jul 28 16:50:52 2026 GMT
        Subject: CN=0ADF9EF56265BC6B9601490827CA77E19DD18B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f4:8e:db:bd:74:bc:ed:b8:d5:ae:6d:af:dd:
                    0e:28:87:36:4d:25:11:bf:93:65:5f:d9:b1:ab:be:
                    33:95:04:80:de:f4:18:41:d6:60:08:44:26:71:ff:
                    9b:d0:6a:80:bc:90:f6:96:af:56:9a:22:84:88:6a:
                    11:0c:fb:3d:d9:90:c4:93:9e:bc:e6:65:66:e3:3a:
                    f3:27:ca:48:6a:ed:fb:f6:3a:96:7b:4c:34:c3:86:
                    5e:6f:fd:a6:69:56:ac:6e:44:b0:b0:48:45:94:69:
                    ad:1e:91:b2:49:56:ad:44:63:e2:bb:88:5e:de:12:
                    94:e7:16:46:ff:1f:08:a0:6d:ff:56:92:c6:2b:ce:
                    ee:00:11:ce:11:88:10:2d:fa:f8:8e:89:62:5a:c9:
                    79:34:85:89:cb:ea:40:ea:ba:4e:74:5d:d7:06:84:
                    79:89:3c:d3:99:47:12:88:0a:42:8d:b0:ae:ac:3e:
                    de:45:63:c1:07:27:ba:c0:7e:e0:6d:09:06:9c:40:
                    31:93:71:ec:79:8f:7a:0b:22:c6:49:0c:6e:2c:6d:
                    1e:65:77:d5:c3:a2:cc:d8:9c:df:01:ec:8b:48:98:
                    5b:77:a7:cd:00:94:fa:88:b8:f8:44:3e:42:48:90:
                    86:3a:69:87:4f:9d:4a:66:64:80:33:dd:f9:71:f4:
                    48:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DF:9E:F5:62:65:BC:6B:96:01:49:08:27:CA:77:E1:9D:D1:8B:95
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633031363a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:c016::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:d2:c2:36:b7:85:d2:fc:91:ae:6c:51:ef:ca:ea:78:36:b5:
         2b:90:77:eb:50:d2:11:f9:d7:6b:c8:5e:38:fb:08:0d:71:75:
         7a:5c:5f:03:da:5b:e9:63:ab:d1:66:1b:1c:9c:5a:5b:29:4c:
         46:84:eb:4b:fa:82:ee:aa:ec:dc:a1:26:ac:c8:55:4e:70:35:
         29:28:b7:53:4a:4d:c5:cc:4d:c1:b8:1f:37:8a:b3:3b:9a:cc:
         e9:d4:5d:d1:8a:6c:ea:dd:19:a1:dc:10:c2:d8:9f:29:96:f0:
         e4:66:8e:13:29:4e:a9:44:d9:74:09:97:8b:79:ee:80:d4:9f:
         12:47:ae:7d:a1:61:ba:8b:04:6e:11:1e:33:7c:d0:f9:cc:d3:
         69:eb:4a:e6:29:7e:a3:de:be:8d:89:aa:ae:49:77:7e:4f:bb:
         62:f1:d3:fc:94:38:c4:13:27:2e:9f:42:79:54:b7:02:07:6a:
         28:ce:db:5d:0d:d6:03:3f:a6:48:d4:1d:60:7b:d9:19:b9:cf:
         d9:df:40:e2:a6:7b:3b:09:7e:c1:8d:2b:18:28:f1:fb:a0:4c:
         72:27:10:33:29:3e:7d:84:98:5d:43:1a:62:c9:77:a7:31:e9:
         7f:3f:eb:eb:9f:83:6c:1e:93:4b:0c:5e:6e:8e:15:24:57:62:
         81:b5:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:11:46 2025 by rpki-client