Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/323830343a326239303a3a2f33322d3334203d3e20323635313630.roa
File:                     323830343a326239303a3a2f33322d3334203d3e20323635313630.roa (raw, json)
Hash identifier:          0oNukx8HuBYZ6l7icFJh/SpAqbvRQZ6hkehumokbHKM=
Subject key identifier:   75:62:B2:AF:65:72:A8:49:F9:F0:EE:73:40:C4:C7:58:27:6F:FB:0F
Certificate issuer:       /CN=370FA9228625D3C77362513863E11FFB1C798BEE
Certificate serial:       206DDEFD9C073B6014AB20C7D53C32334F064525
Authority key identifier: 37:0F:A9:22:86:25:D3:C7:73:62:51:38:63:E1:1F:FB:1C:79:8B:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/370FA9228625D3C77362513863E11FFB1C798BEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/323830343a326239303a3a2f33322d3334203d3e20323635313630.roa
Signing time:             Sat 26 Jul 2025 14:19:28 +0000
ROA not before:           Sat 26 Jul 2025 14:14:28 +0000
ROA not after:            Sat 25 Jul 2026 14:19:28 +0000
asID:                     265160
IP address blocks:        2804:2b90::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/370FA9228625D3C77362513863E11FFB1C798BEE.crl
                          rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/370FA9228625D3C77362513863E11FFB1C798BEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/370FA9228625D3C77362513863E11FFB1C798BEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 21:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6d:de:fd:9c:07:3b:60:14:ab:20:c7:d5:3c:32:33:4f:06:45:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370FA9228625D3C77362513863E11FFB1C798BEE
        Validity
            Not Before: Jul 26 14:14:28 2025 GMT
            Not After : Jul 25 14:19:28 2026 GMT
        Subject: CN=7562B2AF6572A849F9F0EE7340C4C758276FFB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:f1:bc:e3:83:fc:a1:9f:b8:47:a6:c5:d2:
                    aa:9e:d3:94:ff:a1:5c:bf:06:d5:76:cf:37:2f:5f:
                    79:ed:4b:b2:62:3e:9a:6b:a1:fc:a8:2e:f6:39:16:
                    13:c5:5c:b4:b9:62:44:e6:21:41:00:b7:cd:b5:dc:
                    86:27:69:b6:3e:44:95:bd:19:19:b5:d8:80:7d:53:
                    36:62:6a:09:4c:85:70:ae:01:17:37:27:e9:29:c7:
                    d1:ef:7f:f9:23:04:4e:ee:b3:c7:e3:d2:8c:b9:01:
                    c1:ee:94:5a:58:05:4a:3e:11:79:01:ff:0b:b0:59:
                    e0:a1:13:79:89:e5:b1:05:53:a3:37:e3:6d:eb:c4:
                    f9:a9:51:88:eb:e8:64:06:fa:9d:ad:3b:08:25:42:
                    ee:da:30:7c:8a:15:01:ea:85:48:4a:6f:f6:08:1e:
                    08:e9:20:ba:e2:a9:e4:0d:c6:48:7a:9c:4c:82:c5:
                    77:2f:6e:43:6e:34:4c:d4:57:0b:a5:10:2a:3e:b8:
                    a7:1d:a2:f7:c1:7b:f3:5c:32:c3:51:48:bc:74:86:
                    08:ba:c5:a7:31:6d:47:ed:eb:4f:0d:f6:00:b5:50:
                    e4:af:47:6b:58:7e:54:aa:2a:53:e0:b0:b0:40:30:
                    a1:4f:0c:65:6c:7d:e2:1f:45:bb:37:fc:95:5c:25:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:62:B2:AF:65:72:A8:49:F9:F0:EE:73:40:C4:C7:58:27:6F:FB:0F
            X509v3 Authority Key Identifier:
                keyid:37:0F:A9:22:86:25:D3:C7:73:62:51:38:63:E1:1F:FB:1C:79:8B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/370FA9228625D3C77362513863E11FFB1C798BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/370FA9228625D3C77362513863E11FFB1C798BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/323830343a326239303a3a2f33322d3334203d3e20323635313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b90::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:e2:68:4f:63:40:28:bb:47:7c:1e:3f:e6:a8:0a:27:61:01:
         fb:68:61:f9:dc:a5:a7:cb:77:14:25:25:21:57:45:91:f3:6e:
         99:17:3f:10:49:de:b0:97:27:8f:20:29:81:b6:6f:b3:2f:24:
         6f:91:f2:98:37:a0:ae:31:65:ea:05:3d:d0:ed:5a:cc:77:9a:
         24:c1:08:00:0f:17:14:37:fe:1e:86:ac:16:e0:e9:eb:7f:ff:
         d7:64:5d:eb:bd:cd:b9:36:4f:d1:19:2a:b1:9d:6a:76:9f:7a:
         34:99:f5:42:26:17:3b:ea:3e:f5:c1:3a:f6:f6:da:0e:2f:2b:
         a4:fd:40:bf:e3:dd:5a:76:ea:14:d7:45:27:d4:b4:90:b4:5d:
         1c:f2:e6:4c:f0:e7:2d:a5:52:b5:bb:f9:85:be:ee:55:03:18:
         78:12:d5:4d:fa:28:68:5f:6a:74:cd:3a:a8:98:04:d9:b0:78:
         29:fb:66:f6:a6:e3:36:62:2d:10:b7:85:88:52:45:5c:c6:50:
         a5:c4:9f:53:80:80:64:d0:f1:af:cf:cc:e7:83:cc:43:e6:ae:
         65:b1:71:32:48:ee:d3:b1:a1:d5:af:80:c3:43:05:fa:1b:da:
         5e:10:58:29:12:6e:a7:f5:e5:df:97:05:2b:d6:e6:75:2a:ba:
         6b:ce:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:56:51 2025 by rpki-client