Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a3a2f33322d3438203d3e20323638343437.roa
File:                     323830343a353135633a3a2f33322d3438203d3e20323638343437.roa (raw, json)
Hash identifier:          Eu9vP+8fCt+7HGgYFrE8azIGF2MvNQgDLQkrzHh6Ze8=
Subject key identifier:   F2:F1:7B:7B:4B:1A:86:9B:28:BA:7F:D9:D4:01:09:97:4E:C9:0C:06
Certificate issuer:       /CN=8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31
Certificate serial:       34B783D7F43153213A0223157B0828CAB8F3C98F
Authority key identifier: 8B:D6:92:C4:16:F4:48:93:15:B5:DD:0C:CD:F9:6F:DB:7B:A0:EE:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a3a2f33322d3438203d3e20323638343437.roa
Signing time:             Tue 29 Jul 2025 14:42:03 +0000
ROA not before:           Tue 29 Jul 2025 14:37:03 +0000
ROA not after:            Tue 28 Jul 2026 14:42:03 +0000
asID:                     268447
IP address blocks:        2804:515c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.crl
                          rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 06:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b7:83:d7:f4:31:53:21:3a:02:23:15:7b:08:28:ca:b8:f3:c9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31
        Validity
            Not Before: Jul 29 14:37:03 2025 GMT
            Not After : Jul 28 14:42:03 2026 GMT
        Subject: CN=F2F17B7B4B1A869B28BA7FD9D40109974EC90C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:e6:ec:79:eb:dc:98:62:20:a5:8f:d0:05:
                    5b:80:67:b0:c5:05:17:d1:24:db:32:1e:cc:79:db:
                    71:9c:de:74:bf:e0:95:69:9d:20:12:fa:90:f1:d9:
                    52:1a:ea:d5:92:3c:c9:32:97:a2:e3:7c:8f:7b:ce:
                    76:b1:c1:40:f9:65:40:b3:03:0d:0a:6a:9a:ae:ac:
                    8e:00:60:a1:9c:d1:8b:3f:d8:e0:18:1f:4e:6f:d5:
                    ce:19:47:67:7c:b9:e9:70:cc:b6:94:71:ee:7c:22:
                    9c:a5:4a:bf:0c:ff:cf:f5:d8:62:3f:0e:db:0a:f2:
                    09:5d:76:fa:0d:bf:88:e9:3b:9d:c1:cb:bd:2b:3d:
                    6f:92:e1:7e:75:f0:d9:91:d0:eb:31:03:cf:a0:62:
                    27:06:d7:9b:8b:10:cd:83:59:94:e3:cd:89:05:65:
                    fa:39:1c:4a:72:a2:ea:fb:21:40:b5:4c:b6:bf:41:
                    1b:ce:94:08:50:de:55:aa:73:95:6b:c0:d9:64:e2:
                    7c:d5:2d:f9:4c:c0:14:86:55:0c:0a:74:2e:d1:a4:
                    2b:26:ba:0f:a4:e7:db:3c:bc:af:96:6a:b2:80:23:
                    ab:06:0f:52:79:39:e2:67:f5:ac:18:44:13:d3:57:
                    12:e3:51:da:19:d1:6c:a8:70:47:f3:31:df:7b:2b:
                    92:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F1:7B:7B:4B:1A:86:9B:28:BA:7F:D9:D4:01:09:97:4E:C9:0C:06
            X509v3 Authority Key Identifier:
                keyid:8B:D6:92:C4:16:F4:48:93:15:B5:DD:0C:CD:F9:6F:DB:7B:A0:EE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a3a2f33322d3438203d3e20323638343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:515c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:2c:e2:35:b9:24:ae:c7:fe:ed:6d:06:4f:b3:e0:f9:1e:27:
         1a:34:1f:ff:01:32:b4:f5:3a:04:d7:31:37:85:b6:97:1b:34:
         5a:dc:9b:88:ff:75:df:d7:a1:83:27:f7:67:d6:9c:85:7f:dc:
         0e:ab:0d:a3:1e:48:94:b2:80:51:57:49:de:6f:f4:03:2a:0a:
         f8:27:f4:66:06:b0:65:86:db:8c:22:65:0c:3b:8d:59:e5:c6:
         2c:e4:d2:4a:88:8a:a3:4c:d6:e7:47:05:34:e2:81:ce:3b:cd:
         84:b7:73:69:38:bd:c1:12:5c:c3:e4:20:4c:68:a8:da:63:3e:
         7f:94:b5:67:85:e1:c2:b7:ab:0d:a5:6d:c8:78:43:3b:6a:2d:
         42:3a:d6:07:45:92:2d:d2:5f:44:56:5e:78:d8:5c:5c:a4:44:
         9e:19:52:c8:81:b3:d8:5b:d8:b9:34:13:49:9c:76:e8:93:2a:
         e2:24:5c:b8:67:ec:04:81:de:07:66:2e:83:1d:8d:93:28:88:
         38:7f:53:87:ef:8f:ed:e6:b8:2b:2f:46:cc:2b:9a:83:3f:74:
         46:c7:6a:fa:b1:f1:16:ca:08:69:8d:08:26:18:82:32:35:9b:
         46:4d:7a:5c:68:8c:52:ee:ca:96:de:db:15:e9:35:28:9c:a3:
         17:28:fb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:42:43 2025 by rpki-client