Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a613030303a3a2f33362d3336203d3e20323636353531.roa
File:                     323830343a336463303a613030303a3a2f33362d3336203d3e20323636353531.roa (raw, json)
Hash identifier:          BK34PgWvKHXV22lsnbZ/t4ZAuOVIvr3imbqyYkVNThE=
Subject key identifier:   32:DB:2D:89:84:16:B6:20:98:51:7E:A7:B1:B1:A9:1B:2C:1D:6C:46
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       EB9CE7F19EE11DD41C23422B16336C534FDD47
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a613030303a3a2f33362d3336203d3e20323636353531.roa
Signing time:             Thu 17 Jul 2025 18:00:01 +0000
ROA not before:           Thu 17 Jul 2025 17:55:01 +0000
ROA not after:            Thu 16 Jul 2026 18:00:01 +0000
asID:                     266551
IP address blocks:        2804:3dc0:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 10:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            eb:9c:e7:f1:9e:e1:1d:d4:1c:23:42:2b:16:33:6c:53:4f:dd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Jul 17 17:55:01 2025 GMT
            Not After : Jul 16 18:00:01 2026 GMT
        Subject: CN=32DB2D898416B62098517EA7B1B1A91B2C1D6C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:0c:85:8b:da:0d:7a:10:2f:37:b5:29:84:
                    d3:28:66:06:31:ea:b4:6f:51:5a:4e:83:34:df:a8:
                    9b:1d:9a:bf:cd:87:ce:5c:be:de:bc:10:54:ca:1e:
                    17:11:fc:b4:9a:21:bf:3c:90:95:fd:18:b0:a2:44:
                    eb:5d:c3:9b:61:36:a1:36:db:b4:dd:4a:ae:bc:19:
                    17:75:fb:3f:d6:00:38:df:df:ea:16:22:b0:64:3c:
                    26:47:c9:3e:06:67:5e:04:65:36:98:4b:00:41:7d:
                    1c:83:01:0a:be:bf:4e:24:83:96:d5:dd:24:92:1b:
                    c0:53:49:c2:32:69:a4:8d:e7:b1:7d:92:66:59:6f:
                    a8:68:cc:67:bf:1d:0e:58:17:57:e1:f4:c1:5b:e9:
                    9c:70:25:27:c3:a1:90:cd:19:7b:0e:2a:2c:66:22:
                    21:70:8a:36:e2:30:64:e7:9f:9d:43:78:d0:fd:71:
                    8c:59:12:cc:e9:0d:20:af:c0:30:15:d1:c0:6c:e8:
                    f3:8e:35:21:33:6d:57:57:37:de:7d:50:de:4d:f1:
                    bf:4b:90:82:4e:b0:54:2f:db:8e:87:83:61:90:c4:
                    4e:53:6b:7a:e3:6d:9f:6d:1e:5e:ff:cc:91:71:0d:
                    f4:c0:5b:8c:1c:2b:a8:28:36:74:c4:3f:13:cd:19:
                    82:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DB:2D:89:84:16:B6:20:98:51:7E:A7:B1:B1:A9:1B:2C:1D:6C:46
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a613030303a3a2f33362d3336203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1a:9b:87:ac:82:78:6d:4a:9f:03:b2:8f:9c:4a:82:48:32:a5:
         86:fe:b5:3a:b6:37:f9:63:c6:04:d4:3b:a0:35:88:16:6a:60:
         19:5e:11:f0:e2:e6:5f:cd:99:16:e8:ab:75:f0:ee:42:be:64:
         aa:b7:41:85:59:65:d9:6a:f4:1d:46:7e:23:b9:ef:ee:6e:9a:
         02:89:83:6d:32:9d:4b:70:c9:9a:9b:a5:a4:25:dc:a7:70:78:
         52:19:f6:6e:26:f3:50:fe:3a:1d:ea:35:0e:ad:66:a9:a9:56:
         00:f0:2d:dc:f1:39:3c:90:0e:30:ed:3a:f4:80:11:2a:f9:9a:
         cd:0b:5f:34:a7:d3:3b:11:b5:9f:88:2d:89:18:f4:78:c6:b0:
         15:7b:b1:43:48:7f:85:95:64:eb:63:e3:69:38:8f:41:23:a2:
         19:ac:5c:75:4a:e0:48:19:8f:52:62:ee:b2:65:a3:13:03:94:
         46:e6:47:e6:32:f9:9c:f3:a5:11:47:22:f8:33:82:b8:72:bc:
         67:36:29:d6:c5:69:1e:df:b5:37:03:9f:f5:d6:a2:21:7e:d2:
         2c:b8:ee:8d:10:1b:6b:04:a7:60:89:f1:9d:9c:56:be:87:5e:
         6d:49:b3:eb:18:ab:b4:e6:fe:ea:e6:22:84:65:4a:76:b8:f8:
         73:92:2b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:28:08 2025 by rpki-client