Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/323830343a343438303a3a2f33322d313238203d3e20323637363336.roa
File:                     323830343a343438303a3a2f33322d313238203d3e20323637363336.roa (raw, json)
Hash identifier:          mJ3QZH7Z6my412QjAH/eV2XOSlASrD5904DLus6BZew=
Subject key identifier:   5E:0C:00:4F:F0:75:9A:B0:EF:E9:1A:A5:57:FB:8F:34:80:EB:0F:9E
Certificate issuer:       /CN=C78CE336C930F842B785A0994F6A61DB9677A05B
Certificate serial:       5DA7E33F8DFFA42AA28119E70EB417E067A6EB1B
Authority key identifier: C7:8C:E3:36:C9:30:F8:42:B7:85:A0:99:4F:6A:61:DB:96:77:A0:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C78CE336C930F842B785A0994F6A61DB9677A05B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/323830343a343438303a3a2f33322d313238203d3e20323637363336.roa
Signing time:             Thu 31 Jul 2025 16:24:11 +0000
ROA not before:           Thu 31 Jul 2025 16:19:11 +0000
ROA not after:            Thu 30 Jul 2026 16:24:11 +0000
asID:                     267636
IP address blocks:        2804:4480::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/C78CE336C930F842B785A0994F6A61DB9677A05B.crl
                          rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/C78CE336C930F842B785A0994F6A61DB9677A05B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C78CE336C930F842B785A0994F6A61DB9677A05B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a7:e3:3f:8d:ff:a4:2a:a2:81:19:e7:0e:b4:17:e0:67:a6:eb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C78CE336C930F842B785A0994F6A61DB9677A05B
        Validity
            Not Before: Jul 31 16:19:11 2025 GMT
            Not After : Jul 30 16:24:11 2026 GMT
        Subject: CN=5E0C004FF0759AB0EFE91AA557FB8F3480EB0F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:48:00:4a:e7:74:44:94:44:70:cf:b6:9a:42:
                    30:d9:bc:a1:9a:08:4d:45:3c:f1:e1:1c:36:b4:92:
                    43:c5:34:42:f5:aa:28:09:5d:5f:e9:0e:d5:bf:8f:
                    a3:94:e7:8f:2c:71:ab:d0:33:c4:b6:91:18:21:f3:
                    2b:6a:83:34:94:ee:60:9c:f0:73:6f:f5:f7:f3:2d:
                    d1:56:ee:1b:bc:de:2b:da:85:7a:7b:65:81:83:6b:
                    64:73:e5:14:53:c0:a5:1f:ea:7b:b8:3a:ec:25:7b:
                    5f:d0:7b:be:1a:62:04:96:42:70:f9:92:69:ed:6e:
                    7f:d3:a1:6d:71:43:c2:40:ad:84:da:c3:c9:71:31:
                    1f:38:85:0e:3f:dc:64:26:22:de:6c:a8:d7:12:b5:
                    be:f9:b3:5b:6f:c7:41:46:14:4f:21:3d:66:b0:0f:
                    39:a3:6d:e6:1c:cd:3e:dc:5d:95:0d:9c:38:93:b5:
                    d3:97:56:19:36:a2:c8:ee:bd:ee:50:8e:83:25:26:
                    e2:54:c7:57:88:6e:6e:66:93:51:f5:61:a8:4b:11:
                    f7:af:07:04:b0:4a:80:1d:12:df:fe:af:e1:e5:bc:
                    ad:16:87:4a:03:15:3f:99:31:7e:34:f9:b3:be:d6:
                    3e:dd:4e:7a:fd:2d:bc:c5:f0:d1:f5:ba:a6:c8:b8:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0C:00:4F:F0:75:9A:B0:EF:E9:1A:A5:57:FB:8F:34:80:EB:0F:9E
            X509v3 Authority Key Identifier:
                keyid:C7:8C:E3:36:C9:30:F8:42:B7:85:A0:99:4F:6A:61:DB:96:77:A0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/C78CE336C930F842B785A0994F6A61DB9677A05B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C78CE336C930F842B785A0994F6A61DB9677A05B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/323830343a343438303a3a2f33322d313238203d3e20323637363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4480::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:3a:7f:fd:32:10:c3:a0:36:67:60:c7:cb:12:ac:c3:2b:f6:
         a6:d9:dc:91:68:d3:8e:f1:5b:7d:56:49:5d:99:c8:5b:18:01:
         cb:af:b8:b3:06:1b:f1:22:f5:ab:6f:6f:ee:d8:b2:c6:95:6f:
         5c:8b:1c:7c:38:c7:fe:2f:67:32:b9:b9:18:da:d3:41:cb:14:
         27:91:d4:1d:7e:f9:ed:4b:c7:2d:64:ff:48:4c:a7:ef:7a:2a:
         08:2f:2e:f1:c8:be:18:5f:fc:22:f1:52:76:7b:7a:cc:26:82:
         6c:d4:79:21:d0:07:60:12:02:13:d0:14:b5:fb:48:d1:38:07:
         f5:3b:60:8b:a1:79:95:07:eb:4c:1c:f9:cd:0c:5b:51:b3:7b:
         87:44:70:78:28:d6:8f:45:4a:00:39:18:9f:cf:95:cc:6d:c5:
         02:f7:c7:fb:9d:8f:35:e5:8d:b2:d9:88:0d:6a:6f:4f:76:3c:
         a0:14:f5:70:f1:ce:51:81:89:23:3a:08:b8:44:6b:85:2a:bb:
         e4:f7:03:53:37:8d:9d:0f:57:49:cf:85:a6:32:5a:2d:d4:32:
         59:ea:8d:87:8b:d8:fa:46:87:a8:14:de:c0:1d:25:5f:61:fe:
         16:fd:80:b9:37:91:f2:e9:d7:56:a8:d5:29:91:19:fe:25:10:
         61:be:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:48 2025 by rpki-client