Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a333830303a3a2f33372d3337203d3e20323636353531.roa
File:                     323830343a336463303a333830303a3a2f33372d3337203d3e20323636353531.roa (raw, json)
Hash identifier:          mw2c0h2cHTp8RrM/QPENJDuY2uKjm1pLanzCTxhgJ1E=
Subject key identifier:   13:9B:5F:6C:33:63:35:C5:62:8B:C1:82:EB:CF:19:47:4A:0A:A6:AE
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       1740753BA088BFBE1338D07DAEC4901F1DDED825
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a333830303a3a2f33372d3337203d3e20323636353531.roa
Signing time:             Thu 17 Jul 2025 18:00:00 +0000
ROA not before:           Thu 17 Jul 2025 17:55:00 +0000
ROA not after:            Thu 16 Jul 2026 18:00:00 +0000
asID:                     266551
IP address blocks:        2804:3dc0:3800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 10:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:40:75:3b:a0:88:bf:be:13:38:d0:7d:ae:c4:90:1f:1d:de:d8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Jul 17 17:55:00 2025 GMT
            Not After : Jul 16 18:00:00 2026 GMT
        Subject: CN=139B5F6C336335C5628BC182EBCF19474A0AA6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:57:56:c3:f4:af:38:60:76:da:24:f6:ff:
                    54:5a:bf:5b:c8:aa:c4:27:bb:b1:11:61:ef:2c:b0:
                    29:4b:6b:b7:1b:9d:f2:24:69:1d:9b:c5:86:e6:ed:
                    2e:c9:e2:13:f8:ec:bc:d5:4d:42:bc:9e:aa:33:e8:
                    91:d8:ea:46:71:30:76:c0:1e:84:a4:1f:22:1e:45:
                    f4:83:45:60:99:5d:66:4c:7e:44:93:22:b1:80:2b:
                    a6:1b:ef:7e:7e:f5:dc:e6:8d:24:02:e9:71:6e:ff:
                    85:f7:1b:d2:56:1d:0a:48:8f:5d:24:0b:5a:b9:d0:
                    74:53:ff:f2:0d:fe:c2:ec:1b:0f:f0:fa:ac:2d:bc:
                    01:22:ae:f7:5f:cf:a6:c2:ea:59:50:fe:2e:05:d2:
                    75:38:bb:7b:38:d1:9b:81:50:9f:2b:23:df:58:26:
                    26:51:32:15:18:2b:2c:96:82:26:34:ff:68:db:3a:
                    a2:d2:c8:55:f2:ac:04:9b:e7:4b:cd:fd:98:3b:80:
                    75:17:fb:05:15:13:e9:db:07:a2:2a:22:1e:6c:d1:
                    6d:dd:7b:4f:15:31:9f:c2:0f:9c:f2:fc:5b:98:52:
                    c6:3e:91:7d:2b:08:68:54:db:a2:34:e4:f2:99:bb:
                    61:08:c3:b8:ed:6d:ca:da:6a:11:9a:a5:54:65:00:
                    dd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9B:5F:6C:33:63:35:C5:62:8B:C1:82:EB:CF:19:47:4A:0A:A6:AE
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a333830303a3a2f33372d3337203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:3800::/37

    Signature Algorithm: sha256WithRSAEncryption
         aa:54:08:75:f2:df:82:0f:07:47:43:70:b4:f1:44:56:52:f8:
         56:34:0e:7f:5d:66:96:86:6a:7f:26:f5:57:e2:15:3d:7e:a7:
         d3:d8:d9:bf:93:17:6c:90:49:01:2e:a0:41:a2:53:1c:15:5a:
         21:58:e1:90:5f:04:dd:dd:7f:0b:f1:06:82:82:f8:7c:b4:8a:
         17:11:dd:da:c2:f3:34:11:4a:13:aa:56:45:d8:11:17:65:72:
         5d:c5:82:75:91:fb:86:86:70:ff:c6:60:e5:f3:6a:0e:54:46:
         6f:32:c3:11:fa:c9:84:6e:85:ee:c1:eb:93:e7:88:83:7d:41:
         2e:87:f0:11:bb:9e:c8:30:50:d0:a4:05:75:af:df:13:af:14:
         f1:1d:06:a9:37:24:66:03:03:ac:d6:49:e2:88:1b:0b:85:81:
         25:6d:39:25:48:3f:59:30:dd:47:da:59:5a:86:a1:67:d1:78:
         c1:b9:15:12:5e:d3:97:31:34:83:d4:be:85:18:60:0f:cf:f4:
         21:35:dd:6f:9f:91:dc:ae:88:1a:5c:b3:08:56:86:6c:35:22:
         e8:e6:1a:b5:8c:1b:4b:d8:c5:2c:84:00:db:90:78:e0:d1:00:
         ea:6a:0d:78:d1:a1:c7:3d:34:76:9b:50:32:9b:ac:71:4d:ff:
         5a:3b:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:20:09 2025 by rpki-client