Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a34363a3a2f34382d3438203d3e20323634343039.roa
File:                     323830343a316532303a34363a3a2f34382d3438203d3e20323634343039.roa (raw, json)
Hash identifier:          rKM44ylfUBFtGUdygGMoIFsZWbkYDdnc8rK70navHyM=
Subject key identifier:   F4:F0:AE:81:F7:FB:9B:8D:C8:90:BA:4F:11:DD:3F:D7:12:E3:FA:62
Certificate issuer:       /CN=1067154D7B30C41A8514DBD5BE78C166941715B0
Certificate serial:       06567F2E01379511B5467F95603950F7531B06A2
Authority key identifier: 10:67:15:4D:7B:30:C4:1A:85:14:DB:D5:BE:78:C1:66:94:17:15:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1067154D7B30C41A8514DBD5BE78C166941715B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a34363a3a2f34382d3438203d3e20323634343039.roa
Signing time:             Thu 31 Jul 2025 14:49:22 +0000
ROA not before:           Thu 31 Jul 2025 14:44:22 +0000
ROA not after:            Thu 30 Jul 2026 14:49:22 +0000
asID:                     264409
IP address blocks:        2804:1e20:46::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.crl
                          rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1067154D7B30C41A8514DBD5BE78C166941715B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:56:7f:2e:01:37:95:11:b5:46:7f:95:60:39:50:f7:53:1b:06:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1067154D7B30C41A8514DBD5BE78C166941715B0
        Validity
            Not Before: Jul 31 14:44:22 2025 GMT
            Not After : Jul 30 14:49:22 2026 GMT
        Subject: CN=F4F0AE81F7FB9B8DC890BA4F11DD3FD712E3FA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:53:72:99:a8:24:c0:55:ea:b3:1e:fb:b3:
                    7f:97:ba:f4:b8:52:67:2e:8d:45:1b:43:5e:7a:c8:
                    77:8d:87:60:6f:bf:cb:35:36:8f:7a:bf:c1:40:f9:
                    c7:e3:15:8b:26:ad:d0:65:83:7d:23:23:fb:97:36:
                    55:b1:5a:1e:b2:66:17:03:dd:e8:17:e3:93:9d:13:
                    d9:88:1d:a9:91:0c:44:39:fe:3b:fa:a6:61:e3:63:
                    38:73:0a:2c:40:3b:47:cd:ba:19:9c:77:7b:b6:0a:
                    9c:5c:55:39:6a:a8:4c:48:6e:a4:66:40:3b:8d:8d:
                    51:b6:88:ac:e2:21:74:e7:72:7b:a8:20:97:0a:2d:
                    ca:45:a8:9b:62:82:18:84:86:42:2e:9c:df:82:0c:
                    9c:dc:3f:30:90:f3:6f:72:99:50:2b:d9:02:78:c5:
                    cc:f7:a4:19:bf:fd:69:40:6c:20:7b:54:43:68:a8:
                    88:21:ef:63:8c:af:17:6c:78:bb:a6:e9:79:ce:31:
                    d1:8f:0e:8a:44:13:ad:22:cb:d6:3c:a0:f4:7c:22:
                    9d:96:13:c4:23:87:4c:40:0a:f8:4d:f2:8e:c7:e3:
                    bd:77:fa:35:a2:69:fa:fd:67:d8:ed:cc:7c:df:86:
                    54:71:dd:2a:14:ad:06:f2:98:31:99:a6:ed:c3:bd:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F0:AE:81:F7:FB:9B:8D:C8:90:BA:4F:11:DD:3F:D7:12:E3:FA:62
            X509v3 Authority Key Identifier:
                keyid:10:67:15:4D:7B:30:C4:1A:85:14:DB:D5:BE:78:C1:66:94:17:15:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1067154D7B30C41A8514DBD5BE78C166941715B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a34363a3a2f34382d3438203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e20:46::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:59:13:ef:e3:ae:46:63:a7:0a:87:84:7f:83:15:89:e1:8d:
         9e:0a:2f:89:da:8c:75:e4:48:16:24:95:0d:26:f8:5d:5a:09:
         dc:1d:64:35:8b:3b:a5:96:94:94:74:55:db:ed:cf:3e:01:a6:
         7b:b7:ef:b8:05:5a:ac:f2:54:1f:a6:c9:4c:b8:1d:1c:33:3e:
         53:ea:b8:d9:b0:ad:9a:6c:52:88:6e:9f:29:78:f2:79:4d:80:
         a3:67:a0:52:3c:1b:cb:0f:69:18:29:e9:3f:3b:23:e8:71:db:
         04:d1:bb:14:e3:b6:6e:41:f6:3b:77:3b:25:65:17:2b:2d:52:
         81:6c:46:ae:30:aa:f6:4a:f4:29:ae:b3:3b:19:98:d2:8b:0d:
         e2:54:ac:d4:c8:c2:f8:1a:93:5c:ea:a0:f9:ba:c0:65:00:3a:
         97:79:7d:c9:1c:ab:be:f6:c3:58:19:0c:60:f2:27:07:25:47:
         59:b5:ce:0a:4e:d8:7b:04:32:db:06:09:08:65:0c:02:6c:3e:
         88:4e:8b:8b:6c:a4:58:ca:b2:8d:e0:18:8c:34:db:3a:03:ce:
         05:ec:d6:e1:bb:05:23:8b:04:b1:0d:7a:c2:3c:2e:cb:8e:c9:
         fe:c2:e8:bb:d8:1a:28:cb:17:ef:96:2f:f5:cd:08:0a:05:6f:
         35:97:08:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:29:51 2025 by rpki-client