Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/323830343a373364343a3a2f33322d3332203d3e20323730393430.roa
File:                     323830343a373364343a3a2f33322d3332203d3e20323730393430.roa (raw, json)
Hash identifier:          AQi3f1J1etCYnBqeCDOeKdNMCx9iYCCxXYkVIWYrTWw=
Subject key identifier:   49:4E:7C:5A:44:1B:DD:34:F3:1D:74:53:6A:54:EB:0B:06:27:1F:77
Certificate issuer:       /CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
Certificate serial:       058C32226F7D5AB636F6B4F3BAD920AB8A72DF31
Authority key identifier: 72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/323830343a373364343a3a2f33322d3332203d3e20323730393430.roa
Signing time:             Thu 10 Jul 2025 16:40:33 +0000
ROA not before:           Thu 10 Jul 2025 16:35:33 +0000
ROA not after:            Thu 09 Jul 2026 16:40:33 +0000
asID:                     270940
IP address blocks:        2804:73d4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl
                          rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 18:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8c:32:22:6f:7d:5a:b6:36:f6:b4:f3:ba:d9:20:ab:8a:72:df:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
        Validity
            Not Before: Jul 10 16:35:33 2025 GMT
            Not After : Jul  9 16:40:33 2026 GMT
        Subject: CN=494E7C5A441BDD34F31D74536A54EB0B06271F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:c3:3f:d6:aa:a3:1c:69:45:da:37:aa:99:
                    84:0d:af:f1:4d:b0:3a:8f:6a:a4:6e:da:99:fb:73:
                    a7:5b:3e:cf:a7:80:e1:de:f0:68:40:5d:b1:0d:aa:
                    40:50:00:57:24:67:1e:31:3c:99:57:85:4d:e1:41:
                    4d:dd:6c:6c:52:95:4d:f5:27:c4:e8:19:cb:d7:86:
                    32:c8:63:c8:c7:f7:a3:24:1e:5e:e0:fe:a7:dc:e8:
                    67:ff:98:39:3b:a6:84:46:d7:c6:50:6d:fd:58:7d:
                    dc:ed:1c:59:b1:f6:b2:06:6d:24:02:b4:b9:b1:ea:
                    0c:bb:7e:e2:9f:9b:f5:ce:43:7b:21:a0:37:0e:1c:
                    bf:ca:0e:b5:8d:99:5a:b3:aa:56:e5:f4:23:86:51:
                    46:b3:ed:62:04:df:75:1b:a7:23:0b:6a:52:5b:ed:
                    02:ff:28:21:4a:db:67:d1:22:76:e1:8b:ba:ba:47:
                    7c:9c:12:01:00:6a:0b:18:5b:56:36:98:4b:34:31:
                    78:71:90:14:2f:fe:ac:a2:e9:c2:13:53:6d:68:14:
                    5a:a6:3b:90:84:24:f6:b2:1e:71:bd:10:29:19:99:
                    d1:ff:41:fd:fb:62:d5:b1:3f:2a:83:ef:f6:a9:5a:
                    5a:13:b6:24:b4:df:76:ad:9d:f9:89:da:25:9b:63:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4E:7C:5A:44:1B:DD:34:F3:1D:74:53:6A:54:EB:0B:06:27:1F:77
            X509v3 Authority Key Identifier:
                keyid:72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/323830343a373364343a3a2f33322d3332203d3e20323730393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:bc:75:e7:84:76:a3:df:8d:23:4b:9c:2c:cb:b8:08:01:e2:
         68:35:2a:59:a6:a9:70:9f:9b:94:df:13:72:4e:fb:a8:98:fb:
         1c:7e:8f:c5:44:80:24:4a:de:2e:9a:99:4b:c8:be:44:a4:6b:
         0a:55:b0:49:7f:6d:6d:e4:a0:53:f4:a6:9e:59:a3:94:f1:f0:
         78:53:ec:e1:e8:cd:07:03:e0:84:e2:1b:03:ce:85:06:7b:c5:
         dc:8b:7b:f5:1a:63:29:e0:bb:6f:1b:cf:40:a5:68:19:21:e6:
         aa:5c:85:93:a9:54:b4:7b:a1:03:5e:3d:0f:9e:cf:c8:75:81:
         cf:c9:67:09:3c:fa:e6:4b:db:e2:c9:40:d5:fe:a0:31:5b:8b:
         dc:d1:1d:1b:55:87:e8:11:21:ef:4a:8c:87:cb:c5:bc:12:ad:
         83:18:75:02:10:90:60:51:e0:2f:e5:d1:b1:d4:2c:18:2a:54:
         9e:fd:f1:6a:b5:e7:95:50:ef:41:94:34:66:93:4a:08:62:4e:
         65:ff:de:39:85:c1:30:7c:0d:3a:05:7f:26:bd:ed:3e:84:4a:
         f0:2c:30:e0:de:6e:ca:97:96:0d:9c:eb:af:93:d3:d3:a8:bd:
         1c:84:f6:f8:58:23:f1:b9:7c:dd:d2:da:fc:b9:f9:27:ad:8a:
         13:be:d6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:31 2025 by rpki-client