Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a333030303a3a2f33362d3336203d3e203631363839.roa
File:                     323830343a316430343a333030303a3a2f33362d3336203d3e203631363839.roa (raw, json)
Hash identifier:          6a8yy0r6CK4l1TXNUQzM3zb9CahYHSvBK2E5lFfmAcA=
Subject key identifier:   B3:D0:C3:FD:5C:B6:B4:53:46:5B:B5:74:BF:4B:2E:A5:5F:2C:55:F2
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       7E584FBED4239C36C0EAF4CFD9268DCB92927B21
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a333030303a3a2f33362d3336203d3e203631363839.roa
Signing time:             Fri 25 Jul 2025 20:48:56 +0000
ROA not before:           Fri 25 Jul 2025 20:43:56 +0000
ROA not after:            Fri 24 Jul 2026 20:48:56 +0000
asID:                     61689
IP address blocks:        2804:1d04:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 19:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:58:4f:be:d4:23:9c:36:c0:ea:f4:cf:d9:26:8d:cb:92:92:7b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Jul 25 20:43:56 2025 GMT
            Not After : Jul 24 20:48:56 2026 GMT
        Subject: CN=B3D0C3FD5CB6B453465BB574BF4B2EA55F2C55F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d0:60:30:1d:31:b6:bb:90:cb:77:4f:70:c4:
                    19:b5:f5:66:1d:b9:22:5d:90:5d:97:1c:76:65:83:
                    2a:fe:b8:35:9e:57:38:bf:a1:99:6a:75:d7:2c:17:
                    d8:e4:4a:48:4e:ef:70:da:98:00:f2:b4:3d:56:91:
                    59:32:ef:81:22:f5:3c:fb:3e:0d:74:f0:3f:b6:7e:
                    f3:6f:66:f5:e5:4b:ab:c3:84:f1:43:ea:2e:1f:1d:
                    41:12:3d:e8:cd:6e:57:8e:ad:86:dc:fc:47:d1:87:
                    cf:ea:74:63:a2:6f:85:0b:e3:93:04:ed:fa:e5:25:
                    f2:7f:90:03:60:b5:14:d4:43:1c:67:cc:2f:08:df:
                    34:36:e0:d8:33:f1:b2:c6:db:33:52:2f:ea:62:b6:
                    47:b7:34:7d:41:ce:84:f7:e5:41:0a:5b:be:d0:b9:
                    51:70:4b:b8:73:2c:28:1b:fd:a6:75:cf:8b:24:71:
                    f1:3a:96:1c:23:0d:e4:a4:73:e8:c2:47:47:12:9d:
                    50:8e:11:06:1a:57:89:d5:fa:aa:9b:0b:e8:cc:73:
                    f9:4e:09:12:58:cf:0d:e3:56:f2:6b:a1:1e:d0:c5:
                    52:bc:76:08:df:be:59:4f:29:ea:00:11:bb:fc:d6:
                    41:3a:7a:dd:70:60:64:e0:71:32:30:97:c1:6b:fa:
                    a1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D0:C3:FD:5C:B6:B4:53:46:5B:B5:74:BF:4B:2E:A5:5F:2C:55:F2
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a333030303a3a2f33362d3336203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d04:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:07:84:bc:b3:72:0c:04:1a:d4:e1:dd:2b:24:ab:aa:30:51:
         98:52:2b:21:2d:e6:78:32:27:8b:f0:a9:ad:c7:d6:b1:d7:04:
         ae:5f:bf:50:e5:e4:d2:f3:f4:f8:80:62:28:d9:7a:3d:f9:49:
         d2:db:a1:85:32:b7:fd:59:74:74:e2:d3:9a:54:e5:04:ff:6f:
         9e:f3:ae:79:3d:fc:d3:59:d5:81:d3:66:58:09:da:27:01:c9:
         7f:ff:a4:4a:62:7a:01:93:e2:52:a0:0b:5f:5a:58:36:a7:08:
         85:77:0f:16:f2:3f:d5:c4:66:a0:e2:a1:9a:a7:91:73:85:e1:
         fb:a2:fa:38:e7:89:b7:bb:2f:b8:d6:7c:21:ad:a6:c1:0f:e8:
         c1:b8:45:75:e7:6f:4b:32:f7:5f:77:14:90:86:d7:ee:3e:5e:
         33:0e:e0:71:6b:68:a5:ab:e8:5e:b2:ac:c4:97:6b:50:01:62:
         f5:96:0a:a9:5a:f9:87:6c:87:e0:e5:a0:b0:28:38:cd:ca:60:
         61:d7:b1:58:c1:77:27:aa:c6:3d:58:71:eb:04:26:e1:62:64:
         b7:7d:84:d7:81:7b:77:9a:97:54:52:c6:97:02:1d:11:7b:41:
         43:c2:05:1f:74:bf:cb:54:bc:77:d9:fd:8e:85:34:b3:28:fa:
         eb:2e:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:48:09 2025 by rpki-client