Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/323830343a376231303a3a2f33322d3438203d3e20323731343038.roa
File:                     323830343a376231303a3a2f33322d3438203d3e20323731343038.roa (raw, json)
Hash identifier:          lF2EHqMyqFVsllI5wYEwtxQqPWqwzSg5VQblOQAyZ64=
Subject key identifier:   BE:B3:10:BE:FD:E4:A1:AE:F4:97:1A:AC:2C:86:34:BD:E2:42:4D:FD
Certificate issuer:       /CN=08D5984462574247A2A9C04FCE2546B029D12882
Certificate serial:       5E794191DB3826363784666A9226DA3E4EA7C8B2
Authority key identifier: 08:D5:98:44:62:57:42:47:A2:A9:C0:4F:CE:25:46:B0:29:D1:28:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D5984462574247A2A9C04FCE2546B029D12882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/323830343a376231303a3a2f33322d3438203d3e20323731343038.roa
Signing time:             Tue 12 Aug 2025 17:22:19 +0000
ROA not before:           Tue 12 Aug 2025 17:17:19 +0000
ROA not after:            Tue 11 Aug 2026 17:22:19 +0000
asID:                     271408
IP address blocks:        2804:7b10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/08D5984462574247A2A9C04FCE2546B029D12882.crl
                          rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/08D5984462574247A2A9C04FCE2546B029D12882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D5984462574247A2A9C04FCE2546B029D12882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 13:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:79:41:91:db:38:26:36:37:84:66:6a:92:26:da:3e:4e:a7:c8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D5984462574247A2A9C04FCE2546B029D12882
        Validity
            Not Before: Aug 12 17:17:19 2025 GMT
            Not After : Aug 11 17:22:19 2026 GMT
        Subject: CN=BEB310BEFDE4A1AEF4971AAC2C8634BDE2424DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:36:fc:b6:97:cc:aa:69:6b:cf:e9:3f:93:
                    c5:74:d7:e5:9e:f1:71:b9:46:5e:1f:f8:77:4a:89:
                    f7:d2:68:fe:df:b0:84:01:91:be:30:6c:79:df:14:
                    ee:92:c9:91:6a:ac:df:9f:e7:6e:22:68:6a:47:5c:
                    de:48:96:64:6d:a0:b8:3c:40:ba:a4:e9:d1:25:b3:
                    6a:2c:05:d1:61:ce:41:84:41:d2:48:5d:a4:05:21:
                    17:43:83:e0:a3:17:a2:b6:0f:55:d6:55:5f:78:58:
                    d4:b7:03:cc:61:7c:b3:8e:3f:42:a9:9f:74:85:38:
                    16:18:f1:6d:69:e6:f5:68:5a:b3:8e:dd:4e:17:c7:
                    fe:82:25:87:da:18:b3:40:e7:03:a6:0a:e9:68:90:
                    b3:18:ff:12:c9:17:ae:d1:f3:d3:70:89:ff:39:74:
                    ee:32:14:06:2f:81:18:1e:13:8b:f2:30:ed:ce:4b:
                    ff:5b:c2:84:4c:bb:f3:d4:b7:5d:bd:00:18:0d:46:
                    be:4e:10:b8:5b:ea:9c:f7:31:25:8d:f2:dc:30:01:
                    2d:4f:c1:46:29:b6:72:dc:36:0d:57:21:67:87:f2:
                    8e:6e:a0:4c:e0:26:cb:fd:03:83:40:ea:8d:a3:41:
                    a1:15:00:72:03:6a:a6:63:76:2e:d0:e7:cf:42:09:
                    f4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B3:10:BE:FD:E4:A1:AE:F4:97:1A:AC:2C:86:34:BD:E2:42:4D:FD
            X509v3 Authority Key Identifier:
                keyid:08:D5:98:44:62:57:42:47:A2:A9:C0:4F:CE:25:46:B0:29:D1:28:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/08D5984462574247A2A9C04FCE2546B029D12882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D5984462574247A2A9C04FCE2546B029D12882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/323830343a376231303a3a2f33322d3438203d3e20323731343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:55:d4:1c:a6:d4:a4:f0:29:85:4b:46:f0:e7:de:1b:df:
         50:25:63:eb:5d:6d:d7:0b:ac:0d:01:33:45:a4:58:73:9d:72:
         46:90:f9:f4:13:60:93:5a:1b:a0:76:9e:c0:5d:92:72:65:99:
         5a:84:29:14:78:e1:0f:cb:a5:8e:50:8a:6b:1c:dc:14:58:9a:
         db:d3:5b:37:6d:fa:9d:ef:ac:3b:0c:82:b7:41:75:63:6c:7f:
         3d:ff:28:1e:1b:e4:38:a8:db:e2:6a:11:7d:37:b8:5b:a1:32:
         a6:c2:0a:8e:51:af:53:4e:22:5e:55:df:f6:a5:1d:55:58:dc:
         ec:cc:dd:e9:53:d1:c8:b4:c0:e9:ea:1c:a3:78:4b:1d:55:fb:
         27:ff:c4:43:dc:a9:d1:0f:79:0b:18:f9:c5:f8:7c:bb:23:43:
         1e:d6:84:b5:6e:98:80:96:f9:32:37:23:4c:b6:7c:14:f2:c3:
         8d:b2:56:9c:cc:61:41:dd:8d:52:8a:10:e3:5c:ce:ba:d6:4c:
         a4:61:94:22:0e:cd:3f:08:c3:5b:f6:ea:9c:45:4f:29:17:11:
         54:75:74:31:86:31:6c:14:11:f8:fa:ff:7a:08:0e:a4:da:0d:
         03:d4:e7:02:36:49:7d:7e:d2:18:d5:a1:26:c0:68:3c:24:d0:
         72:6a:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 22:02:48 2025 by rpki-client