Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/323830343a323162343a3a2f33322d3438203d3e20323634353638.roa
File:                     323830343a323162343a3a2f33322d3438203d3e20323634353638.roa (raw, json)
Hash identifier:          lrxqEYMYFeTTaCmCvpjT4I2iZRq2/iJavsSJKMGDevI=
Subject key identifier:   02:35:F1:28:59:0E:D5:3F:75:02:F5:E4:1A:75:65:72:6F:1F:8B:84
Certificate issuer:       /CN=FE5057C3CE318CF3863966D33006E15CD948B449
Certificate serial:       3B295B6A2A7F401CCC4945BDCCCB331FA7DD9CFC
Authority key identifier: FE:50:57:C3:CE:31:8C:F3:86:39:66:D3:30:06:E1:5C:D9:48:B4:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5057C3CE318CF3863966D33006E15CD948B449.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/323830343a323162343a3a2f33322d3438203d3e20323634353638.roa
Signing time:             Tue 29 Jul 2025 20:23:40 +0000
ROA not before:           Tue 29 Jul 2025 20:18:40 +0000
ROA not after:            Tue 28 Jul 2026 20:23:40 +0000
asID:                     264568
IP address blocks:        2804:21b4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/FE5057C3CE318CF3863966D33006E15CD948B449.crl
                          rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/FE5057C3CE318CF3863966D33006E15CD948B449.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5057C3CE318CF3863966D33006E15CD948B449.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 19:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:29:5b:6a:2a:7f:40:1c:cc:49:45:bd:cc:cb:33:1f:a7:dd:9c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE5057C3CE318CF3863966D33006E15CD948B449
        Validity
            Not Before: Jul 29 20:18:40 2025 GMT
            Not After : Jul 28 20:23:40 2026 GMT
        Subject: CN=0235F128590ED53F7502F5E41A7565726F1F8B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:6f:8f:d3:9b:6e:6e:42:b3:32:e8:8f:6c:
                    50:aa:29:3c:9b:41:36:cc:83:29:ec:74:50:37:70:
                    08:08:67:e4:80:55:4c:41:c6:9e:0b:1f:39:f5:6f:
                    ee:ab:36:c4:08:35:34:3f:ca:54:7f:c8:cd:43:97:
                    ed:7e:43:ea:6d:7f:7f:39:0a:73:e8:17:c2:24:a5:
                    b1:8d:9c:bb:50:67:30:a8:aa:f5:7e:c0:f2:be:3d:
                    f9:ee:58:39:64:39:22:be:fb:25:e4:e1:b0:9b:2a:
                    8d:b0:40:0c:43:93:c3:d6:e3:f9:66:b6:69:e7:78:
                    d3:63:de:8c:d8:e8:ba:d8:b2:db:77:b7:35:fb:45:
                    21:d6:73:b6:95:55:2b:58:52:31:21:e5:97:58:d1:
                    02:2e:48:fd:95:ab:8a:53:fe:90:af:2a:3d:e4:65:
                    ab:5a:be:fd:28:8f:30:39:fb:49:a7:bf:08:dd:fa:
                    85:ee:37:82:6d:d9:db:ca:08:e9:f6:73:bc:bd:4e:
                    a7:d2:e1:b0:7d:a2:cc:dd:5c:68:ab:a2:de:e8:3b:
                    0f:33:d9:a0:5b:f5:ae:57:7a:74:70:a5:18:5d:40:
                    b7:72:7d:cb:5f:e6:39:5e:1b:92:54:78:7d:40:d0:
                    1e:f2:d7:76:e7:96:48:ac:79:4b:57:d8:51:d6:bb:
                    45:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:35:F1:28:59:0E:D5:3F:75:02:F5:E4:1A:75:65:72:6F:1F:8B:84
            X509v3 Authority Key Identifier:
                keyid:FE:50:57:C3:CE:31:8C:F3:86:39:66:D3:30:06:E1:5C:D9:48:B4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/FE5057C3CE318CF3863966D33006E15CD948B449.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5057C3CE318CF3863966D33006E15CD948B449.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/323830343a323162343a3a2f33322d3438203d3e20323634353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:9c:85:7b:5c:f2:3f:25:c1:04:9a:87:1a:a5:4f:cc:96:7d:
         76:cb:da:80:2e:c1:9c:71:8d:83:b9:e0:76:04:43:73:0a:27:
         de:70:e6:c6:e2:e6:0e:ae:91:d5:7a:d9:57:92:4b:c0:41:61:
         18:36:23:8f:48:14:fa:b3:98:6a:5e:c9:1e:c2:cb:93:c5:19:
         df:1e:9d:a6:a8:b4:6e:dd:30:82:e6:f9:d4:a3:25:7b:9c:2d:
         55:fa:11:f6:16:d4:4d:aa:31:c4:1f:b1:42:eb:f2:d9:36:19:
         d3:5d:f9:3e:e8:b6:2b:c8:65:3a:c6:eb:ba:b9:21:8f:b9:84:
         1d:99:32:da:00:ec:41:4a:b7:4b:fa:5d:8a:c5:34:00:37:14:
         a3:ac:59:32:47:b5:b1:21:fc:5d:eb:99:62:3b:d2:8d:fe:f0:
         fa:86:6d:24:f7:b3:a7:2f:ac:65:33:21:bf:aa:a8:ff:a6:5f:
         1a:54:39:9c:9a:42:ad:e3:43:54:0b:a8:01:96:be:a1:2b:99:
         7c:c2:4e:12:7a:3b:88:50:65:a2:23:2f:72:b2:42:aa:79:fa:
         d1:77:ac:a9:9b:8c:d2:b4:c3:76:3b:76:c3:9e:5f:78:ea:ae:
         21:0c:c6:2e:c7:98:7b:17:61:28:b8:be:a7:6f:5f:64:96:43:
         61:a2:b2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:09:31 2025 by rpki-client