Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a666663303a3a2f34332d3433203d3e20323633343237.roa
File:                     323830343a313139633a666663303a3a2f34332d3433203d3e20323633343237.roa (raw, json)
Hash identifier:          hHtcl6JPgNUR8FSlZxoffvSJJxHYpe4Yw9JWrhEMKNg=
Subject key identifier:   C3:B7:09:B4:C4:6A:A6:CF:DE:74:99:A4:21:1F:68:B4:FD:ED:C1:DD
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       30ACF4F8434A451C0416C98533904022CFF9AA73
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a666663303a3a2f34332d3433203d3e20323633343237.roa
Signing time:             Tue 22 Jul 2025 20:54:38 +0000
ROA not before:           Tue 22 Jul 2025 20:49:38 +0000
ROA not after:            Tue 21 Jul 2026 20:54:38 +0000
asID:                     263427
IP address blocks:        2804:119c:ffc0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 12:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ac:f4:f8:43:4a:45:1c:04:16:c9:85:33:90:40:22:cf:f9:aa:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jul 22 20:49:38 2025 GMT
            Not After : Jul 21 20:54:38 2026 GMT
        Subject: CN=C3B709B4C46AA6CFDE7499A4211F68B4FDEDC1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:30:99:b8:9c:59:46:20:55:5c:a3:66:ca:
                    99:c7:53:78:b6:2e:81:2b:2f:a3:87:4c:ef:e4:be:
                    3b:51:b8:8e:35:42:19:01:81:11:4f:52:8c:9a:89:
                    e5:bc:1f:e8:30:c0:28:7e:70:eb:de:f7:c2:6b:0a:
                    90:6e:82:47:d9:4a:2f:db:f0:e7:1c:24:14:47:a4:
                    2c:26:e5:b3:57:48:78:d5:fc:d2:18:f1:f2:1d:14:
                    82:c8:92:b3:4b:24:2f:e4:1e:26:59:b8:3f:6b:c9:
                    b9:bb:d3:7e:26:79:8f:d2:d8:24:6a:2d:a9:0e:f3:
                    14:b1:34:95:bc:75:df:5f:88:0d:5e:f5:48:eb:9e:
                    9c:9b:e4:54:c7:d0:69:df:f1:a0:fe:91:a3:c5:d6:
                    8c:36:c4:8d:66:03:f6:a9:fc:f2:74:b4:c7:b5:d2:
                    48:b6:45:40:68:b8:48:3d:ad:77:37:63:26:f6:a3:
                    55:37:be:4d:31:aa:5c:ea:5d:68:8e:25:e0:cf:3f:
                    0a:2e:87:c3:cd:19:74:8a:f8:b8:c1:de:dd:0d:55:
                    db:96:ae:7b:d9:e3:bf:30:17:2b:0e:53:12:3d:88:
                    1d:a7:64:0a:8c:5d:a8:e8:a0:e0:3d:bc:73:be:3b:
                    f1:83:01:74:f4:ae:e2:8e:b3:a5:88:92:81:b2:c9:
                    04:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B7:09:B4:C4:6A:A6:CF:DE:74:99:A4:21:1F:68:B4:FD:ED:C1:DD
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a666663303a3a2f34332d3433203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:119c:ffc0::/43

    Signature Algorithm: sha256WithRSAEncryption
         7c:24:5b:be:cb:df:35:f5:60:44:77:5b:ac:d1:bd:6e:c7:0a:
         ae:ca:b4:69:6b:31:b9:9b:db:dd:4e:c2:27:27:82:53:b8:6d:
         1d:83:f3:c6:c8:77:b4:10:a8:d7:5e:39:1b:8a:67:8b:f1:3e:
         2e:66:46:a7:75:9c:62:a6:93:d1:47:71:2d:6f:ab:bd:3d:ba:
         bf:1a:28:cc:7e:51:66:8d:79:82:f7:c5:c7:ec:87:4b:e0:82:
         7e:8e:78:56:ad:9b:d5:a0:c6:f9:46:69:de:0b:c6:4a:14:4f:
         09:c7:dd:de:25:e9:18:6d:f1:cd:0b:f7:b7:07:db:18:1a:e7:
         c9:0c:93:15:0a:e3:02:cd:e6:fa:6a:7d:e1:65:7d:27:2f:76:
         11:73:ce:9d:6c:63:d7:e8:e1:23:e0:41:21:08:55:8c:d2:45:
         39:83:8e:3a:5c:1d:f9:df:e5:53:54:18:12:ab:05:56:9d:61:
         a3:a4:6a:1c:4b:f2:df:43:ed:0e:5e:eb:7a:f5:b2:d4:7f:09:
         8d:c1:6e:af:57:96:02:4f:9e:e5:4c:a3:e5:a1:81:7c:62:cf:
         60:75:3c:e6:f3:a5:e5:cd:8a:17:8d:a0:3a:d2:57:a4:25:22:
         bb:70:fa:72:83:14:26:5e:77:73:6f:e7:e9:04:39:4b:f0:15:
         d7:8a:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:38:30 2025 by rpki-client