Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643830303a3a2f33372d3337203d3e20323636353531.roa
File:                     323830343a336463303a643830303a3a2f33372d3337203d3e20323636353531.roa (raw, json)
Hash identifier:          f31buA9r0bGYye1pS5gzUnDigiLpfJr0iOakQReEj5w=
Subject key identifier:   79:83:4E:70:20:EC:FD:50:7C:65:6F:CD:36:27:0C:7D:E3:15:8C:AA
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       1CB0CADBD746A352135D878551F0E7AA2BFA6D5F
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643830303a3a2f33372d3337203d3e20323636353531.roa
Signing time:             Thu 17 Jul 2025 18:00:01 +0000
ROA not before:           Thu 17 Jul 2025 17:55:01 +0000
ROA not after:            Thu 16 Jul 2026 18:00:01 +0000
asID:                     266551
IP address blocks:        2804:3dc0:d800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b0:ca:db:d7:46:a3:52:13:5d:87:85:51:f0:e7:aa:2b:fa:6d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Jul 17 17:55:01 2025 GMT
            Not After : Jul 16 18:00:01 2026 GMT
        Subject: CN=79834E7020ECFD507C656FCD36270C7DE3158CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:53:ef:14:90:b9:0c:af:18:00:0c:6b:dd:
                    a8:a1:73:df:59:e8:36:3e:cc:e4:89:b4:c3:3c:48:
                    15:55:05:ec:82:89:b0:09:7d:b1:37:e3:4d:9b:fb:
                    f7:73:71:3b:45:d4:0f:1e:6e:15:68:18:bd:bf:2a:
                    b1:6a:31:51:1e:66:39:7e:39:fb:56:22:13:97:b6:
                    ac:d5:63:8f:9c:fc:80:98:dd:ec:96:1f:63:41:a2:
                    4c:d0:38:25:19:9d:15:f0:c3:9d:dc:a9:60:61:36:
                    a6:ee:8e:b8:4a:ef:3b:11:57:b1:59:1a:45:cb:b4:
                    98:50:f0:37:a1:c7:03:5b:c0:28:5e:ef:67:bd:75:
                    40:2d:f0:75:9c:e0:f5:6a:43:b9:c9:43:ad:15:dc:
                    63:3f:50:6c:46:43:74:3d:3b:ed:35:73:55:ce:f2:
                    a1:cd:93:6e:b9:9a:da:ff:59:75:4e:a5:21:85:99:
                    2e:06:6c:da:82:2e:9a:db:9e:37:a3:3e:e3:1b:8e:
                    90:83:7b:be:d4:d4:d1:19:8f:c5:0a:58:dd:bf:fc:
                    a5:c4:93:ad:e8:d6:89:a8:55:d0:88:81:d8:26:cd:
                    c0:a8:5a:a6:0f:51:78:b3:16:e3:06:e1:2a:e1:89:
                    d8:00:36:78:6a:3e:70:fc:d6:1d:68:53:b2:fe:e2:
                    94:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:83:4E:70:20:EC:FD:50:7C:65:6F:CD:36:27:0C:7D:E3:15:8C:AA
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643830303a3a2f33372d3337203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:d800::/37

    Signature Algorithm: sha256WithRSAEncryption
         2c:f0:e5:50:82:2d:3c:6a:19:e5:75:8f:f2:ae:41:be:ea:7f:
         a2:33:b6:01:0f:a9:2c:e1:ce:40:4e:c0:23:d1:6f:94:8f:00:
         d1:b5:4d:4e:c2:4e:23:4a:0b:f1:ad:5f:e0:e4:7f:2f:64:8c:
         bd:09:8f:ea:25:f6:be:5e:23:a8:07:e1:cb:80:d3:68:0b:b2:
         5c:c1:93:c2:f5:b0:c5:39:9f:e3:87:92:8c:7e:3e:56:6b:47:
         48:bf:83:ad:95:64:e3:5c:bb:ab:94:17:9f:cb:1f:fa:28:8b:
         ea:29:f6:bf:88:46:e9:95:5f:67:18:e3:2c:e8:10:c6:ba:cc:
         c7:d8:a1:2e:72:50:b8:3a:b0:7c:53:41:d4:9e:05:47:6f:15:
         92:5a:87:f4:bd:c1:52:bf:c7:ca:2a:3d:4b:56:d5:e1:c4:4b:
         8f:20:32:15:0b:8c:70:c8:6c:75:57:62:ca:b4:57:5f:93:33:
         fe:1b:33:6b:02:ff:cb:fb:e3:57:cc:ba:06:d9:c1:7d:97:19:
         01:68:26:fb:af:96:df:0d:04:b5:43:07:36:4c:ee:e6:b9:0b:
         81:b6:e0:1e:07:da:da:a8:b1:03:2e:8a:96:91:7d:3a:67:42:
         6b:6c:4c:c0:22:cc:0f:d1:2c:7f:a7:00:00:4b:0d:f8:16:43:
         92:07:12:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:05 2025 by rpki-client