Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/323830343a343739383a3a2f33322d313238203d3e20323637303634.roa
File:                     323830343a343739383a3a2f33322d313238203d3e20323637303634.roa (raw, json)
Hash identifier:          /DFqZtK8pcbJpNfMcmW86/HL6yQhNfKgR1+Vx7V3qvk=
Subject key identifier:   AA:0E:DC:47:25:51:7F:B9:E9:7F:EE:1A:FC:49:D7:5D:F0:D5:F4:4F
Certificate issuer:       /CN=A238987D0DCDD2E9A9A971D52BB6651198981252
Certificate serial:       6C5D2B7FDC20021290379111E134514D4BC8F566
Authority key identifier: A2:38:98:7D:0D:CD:D2:E9:A9:A9:71:D5:2B:B6:65:11:98:98:12:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A238987D0DCDD2E9A9A971D52BB6651198981252.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/323830343a343739383a3a2f33322d313238203d3e20323637303634.roa
Signing time:             Fri 25 Jul 2025 23:00:38 +0000
ROA not before:           Fri 25 Jul 2025 22:55:38 +0000
ROA not after:            Fri 24 Jul 2026 23:00:38 +0000
asID:                     267064
IP address blocks:        2804:4798::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.crl
                          rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A238987D0DCDD2E9A9A971D52BB6651198981252.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 01:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5d:2b:7f:dc:20:02:12:90:37:91:11:e1:34:51:4d:4b:c8:f5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A238987D0DCDD2E9A9A971D52BB6651198981252
        Validity
            Not Before: Jul 25 22:55:38 2025 GMT
            Not After : Jul 24 23:00:38 2026 GMT
        Subject: CN=AA0EDC4725517FB9E97FEE1AFC49D75DF0D5F44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:de:6d:77:71:28:88:6e:23:a8:bb:4f:1c:
                    a4:cc:4a:40:ca:44:b6:ec:b3:b9:53:cc:f6:39:8f:
                    28:e8:f0:e9:3a:28:dc:80:df:26:dd:87:b6:2f:bf:
                    01:d8:0f:97:4e:5a:91:0b:76:28:e7:bc:d9:22:89:
                    ea:cc:18:57:0b:88:9b:c4:f0:87:08:22:d4:5a:23:
                    73:72:20:da:cf:87:3a:4d:8a:a6:d4:38:33:b4:ce:
                    e8:48:56:76:ae:c1:ae:40:c8:55:e7:63:93:37:8c:
                    da:f7:89:a7:33:ef:ac:08:49:ff:62:08:80:40:71:
                    7c:8f:f2:0b:33:ae:fa:dc:23:44:32:b3:22:bd:fd:
                    8c:d2:4a:f1:71:f5:cb:d0:2a:d0:f2:a5:20:f1:04:
                    ed:43:78:2a:68:84:5c:62:5a:14:5d:cf:b6:73:e2:
                    33:11:ce:a9:53:d5:ac:db:bc:a2:7e:74:4e:d2:63:
                    3e:1e:5c:37:b1:55:9b:29:5e:ad:b0:77:4f:b9:68:
                    16:a4:67:95:1a:2c:22:59:55:97:92:f5:54:24:bb:
                    eb:fc:ab:7b:9d:97:7b:80:b9:d2:a2:48:ce:32:e0:
                    46:27:ab:5d:66:61:62:a5:2d:23:31:09:5f:d9:86:
                    ce:a6:13:71:7b:b0:85:69:d0:19:ea:31:7f:e8:3e:
                    86:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0E:DC:47:25:51:7F:B9:E9:7F:EE:1A:FC:49:D7:5D:F0:D5:F4:4F
            X509v3 Authority Key Identifier:
                keyid:A2:38:98:7D:0D:CD:D2:E9:A9:A9:71:D5:2B:B6:65:11:98:98:12:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A238987D0DCDD2E9A9A971D52BB6651198981252.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/323830343a343739383a3a2f33322d313238203d3e20323637303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4798::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:e8:8f:d1:bc:d8:9f:a6:7d:84:d9:7d:d7:e1:40:74:8a:66:
         a0:3d:15:8b:80:04:68:df:17:33:5c:ff:94:33:84:9a:2f:48:
         c3:c4:aa:70:3d:a8:33:08:ec:06:39:2f:d2:8c:30:a1:e3:eb:
         b8:8b:86:09:41:de:77:90:17:c0:51:80:1c:5f:d4:cb:32:ae:
         69:15:f8:23:ca:fe:fc:8f:e5:ff:c0:0a:8e:5d:c1:9a:2f:ea:
         8e:bb:9a:f2:c2:32:79:16:e6:30:ba:83:54:e5:e5:3c:66:07:
         04:e2:13:76:42:74:f1:8f:5a:31:69:94:c1:b1:e4:a5:ac:23:
         6a:9d:e0:28:35:64:4f:2a:7b:29:02:09:80:4e:74:d6:0b:8e:
         43:7c:20:b0:90:6b:25:61:16:7f:32:a0:20:48:84:8c:76:e7:
         22:7c:39:4f:09:cd:0a:31:7c:da:a6:81:cd:98:be:ff:4e:b3:
         54:be:ad:fd:45:63:68:be:17:e8:8a:0e:a9:98:aa:a3:1f:f7:
         e6:25:c7:ac:d2:a6:f9:7f:a5:2a:fd:f2:f2:64:27:b3:01:ae:
         fb:d5:77:e2:22:58:ff:da:b1:7d:19:31:b1:66:7b:ff:a9:5a:
         1f:88:19:25:be:b3:8c:0d:11:f0:c0:60:ba:0a:bc:bf:84:41:
         54:c7:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:55 2025 by rpki-client