Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a343030303a3a2f33342d3334203d3e20323636323735.roa
File:                     323830343a333533383a343030303a3a2f33342d3334203d3e20323636323735.roa (raw, json)
Hash identifier:          RiFNFOZgmPt4Nzm0dxnYhwHLyrJ8iCu2jDynrqqt0fk=
Subject key identifier:   FA:65:67:3B:3B:89:6B:87:21:19:5E:D0:21:F7:4D:BE:72:6F:B9:AC
Certificate issuer:       /CN=AA45B680FFBECE275B39CC323B49EB226DCABAD6
Certificate serial:       613F30E5416492381A1D48533BC2E37F9A8D592B
Authority key identifier: AA:45:B6:80:FF:BE:CE:27:5B:39:CC:32:3B:49:EB:22:6D:CA:BA:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA45B680FFBECE275B39CC323B49EB226DCABAD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a343030303a3a2f33342d3334203d3e20323636323735.roa
Signing time:             Thu 31 Jul 2025 20:03:18 +0000
ROA not before:           Thu 31 Jul 2025 19:58:18 +0000
ROA not after:            Thu 30 Jul 2026 20:03:18 +0000
asID:                     266275
IP address blocks:        2804:3538:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/AA45B680FFBECE275B39CC323B49EB226DCABAD6.crl
                          rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/AA45B680FFBECE275B39CC323B49EB226DCABAD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA45B680FFBECE275B39CC323B49EB226DCABAD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 09:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3f:30:e5:41:64:92:38:1a:1d:48:53:3b:c2:e3:7f:9a:8d:59:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA45B680FFBECE275B39CC323B49EB226DCABAD6
        Validity
            Not Before: Jul 31 19:58:18 2025 GMT
            Not After : Jul 30 20:03:18 2026 GMT
        Subject: CN=FA65673B3B896B8721195ED021F74DBE726FB9AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:b7:6b:0b:17:8d:70:b6:21:59:5b:dc:71:
                    45:63:9c:c2:e9:2c:d6:38:ff:d2:67:ff:27:77:11:
                    d2:75:c1:c2:d5:03:28:ae:27:eb:dd:68:a9:b0:96:
                    7d:d0:8f:e6:b0:89:81:97:d6:f5:e1:1a:c3:6c:41:
                    48:46:93:95:27:29:3e:2f:78:6d:5c:c4:78:b1:71:
                    32:7e:1f:34:a7:15:d9:1f:c3:0c:62:e5:32:1d:f5:
                    4e:f9:58:54:21:bf:83:7a:4d:88:6f:8a:bb:23:e8:
                    9e:bc:df:f6:8a:37:62:d6:f5:37:bc:cc:73:b0:49:
                    48:8f:16:2f:e6:66:4b:50:62:7f:7d:75:0b:8f:4f:
                    4e:99:b3:de:e3:ab:4e:51:4b:49:39:f7:a5:57:ec:
                    5a:03:7a:54:ca:0c:13:e1:34:66:ea:8b:1f:e4:7b:
                    b1:cb:e6:d8:d2:11:1a:d7:38:e7:1e:d7:a3:94:4c:
                    2a:fc:ac:3b:05:a5:8c:e9:b8:39:df:e6:b9:fa:c5:
                    7f:3f:0e:3a:d6:e3:6c:70:9b:04:31:c4:d1:c2:ad:
                    c7:24:ee:ac:b7:a1:d8:54:de:90:1a:01:72:37:86:
                    24:93:85:ce:8b:60:32:82:ed:a4:9a:be:2e:5e:d7:
                    f3:f5:0a:ce:9e:3e:ef:2a:b2:01:a8:18:e2:12:a9:
                    ee:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:65:67:3B:3B:89:6B:87:21:19:5E:D0:21:F7:4D:BE:72:6F:B9:AC
            X509v3 Authority Key Identifier:
                keyid:AA:45:B6:80:FF:BE:CE:27:5B:39:CC:32:3B:49:EB:22:6D:CA:BA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/AA45B680FFBECE275B39CC323B49EB226DCABAD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA45B680FFBECE275B39CC323B49EB226DCABAD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a343030303a3a2f33342d3334203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3538:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:e4:77:b0:c9:82:b6:c6:15:65:ed:10:e6:c6:6e:20:89:ca:
         41:b3:a5:e1:e4:10:5a:c1:4c:3e:f1:af:ff:58:60:45:3b:7d:
         e1:40:6a:57:36:2b:15:e4:db:6e:7e:e7:fc:56:53:af:a1:3a:
         1f:20:74:bd:e5:db:0c:80:e1:9d:08:77:26:d1:11:38:67:37:
         9f:72:ff:08:40:9a:39:3d:d7:30:dd:2e:ae:62:05:bf:b3:d7:
         75:0c:4a:e5:9d:42:51:64:bd:36:3d:3c:d9:8b:73:ec:fa:de:
         68:da:20:64:ca:4a:4a:67:dd:f1:35:7c:f0:76:56:ef:69:49:
         3d:8a:b5:e1:4d:78:41:a5:45:4d:0e:a1:e8:f7:67:a9:88:4f:
         ac:06:5d:28:b8:27:5c:c2:c0:ee:74:d3:14:2f:54:0a:53:a6:
         cc:d7:e3:11:06:d0:86:28:ab:e8:d4:72:8f:dd:15:db:3f:aa:
         5a:66:ed:69:3c:e0:f9:90:25:89:4a:2e:49:4d:ba:10:e0:22:
         cf:95:bc:9b:4f:2d:96:9f:c8:f2:2e:11:29:07:01:a2:bb:71:
         58:69:64:09:90:60:5a:e5:35:65:5d:28:58:99:a2:22:11:76:
         a6:48:95:21:6d:3c:62:92:50:24:9c:de:7f:bd:c8:db:0b:99:
         f4:b5:9e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:25 2025 by rpki-client