Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/323830343a383532303a3a2f33322d3334203d3e20323732353539.roa
File:                     323830343a383532303a3a2f33322d3334203d3e20323732353539.roa (raw, json)
Hash identifier:          62LOMhvbmOJdbTGkjcygK0r0w7DTO+g8VM0cQfmxQ4g=
Subject key identifier:   AC:60:0F:CC:AB:BA:D5:58:51:23:D3:DC:0C:B3:17:D3:D4:80:43:29
Certificate issuer:       /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Certificate serial:       71D432E0FB812E8F9B6FD4633D2FCC4918C925CD
Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/323830343a383532303a3a2f33322d3334203d3e20323732353539.roa
Signing time:             Fri 25 Jul 2025 14:13:39 +0000
ROA not before:           Fri 25 Jul 2025 14:08:39 +0000
ROA not after:            Fri 24 Jul 2026 14:13:39 +0000
asID:                     272559
IP address blocks:        2804:8520::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
                          rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 00:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d4:32:e0:fb:81:2e:8f:9b:6f:d4:63:3d:2f:cc:49:18:c9:25:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
        Validity
            Not Before: Jul 25 14:08:39 2025 GMT
            Not After : Jul 24 14:13:39 2026 GMT
        Subject: CN=AC600FCCABBAD5585123D3DC0CB317D3D4804329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:15:4d:2a:28:31:ee:5b:ae:1c:2e:31:19:66:
                    b8:ba:98:73:01:da:8b:5a:ca:3c:21:3b:2e:fb:9a:
                    04:19:49:92:dc:1c:f1:97:bc:1b:65:bd:68:6a:11:
                    c0:86:4f:15:f9:a5:43:5f:3b:f3:7b:73:9b:24:a4:
                    c7:68:7e:68:2f:69:ff:43:e2:4e:7d:3c:18:c1:bb:
                    b1:56:fa:ee:35:16:94:49:c2:4f:83:a3:a6:fd:71:
                    7e:7e:58:98:39:f9:10:86:1a:9e:5f:91:d6:30:4f:
                    74:33:cb:fb:2a:12:87:81:db:8f:e4:c1:4d:28:90:
                    bd:55:5d:a0:0d:69:25:d5:eb:ad:53:d6:58:a6:e4:
                    9e:dd:cf:57:21:11:b5:c0:13:7d:25:3e:35:69:a6:
                    15:71:65:fa:62:03:1a:b5:a5:90:59:8a:58:00:5c:
                    5c:74:13:21:69:ab:1f:46:b4:20:4b:62:39:1b:80:
                    31:7c:60:16:a2:59:29:fb:89:48:23:54:1e:5f:34:
                    89:69:6e:68:2e:0c:34:61:6b:80:c3:a9:02:59:f2:
                    bb:e9:aa:b6:ab:06:12:2b:21:90:6d:c6:19:0b:ea:
                    f7:52:f4:b8:a7:7d:7a:6e:84:57:09:44:4c:d6:73:
                    60:b0:5d:ba:bf:1b:0b:52:ab:32:6a:23:74:92:f6:
                    25:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:60:0F:CC:AB:BA:D5:58:51:23:D3:DC:0C:B3:17:D3:D4:80:43:29
            X509v3 Authority Key Identifier:
                keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/323830343a383532303a3a2f33322d3334203d3e20323732353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8520::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:ff:52:46:a7:f3:69:8f:d8:57:b9:48:4a:20:b9:9f:80:6b:
         b6:61:35:b3:d7:a7:9f:ca:51:94:66:69:ec:b3:31:29:32:37:
         46:d9:f7:33:44:59:79:a0:88:79:eb:cc:1c:38:30:ea:13:c2:
         97:58:f7:a2:29:91:50:e9:e9:34:e3:c2:74:ec:20:93:ce:73:
         71:a5:e1:5e:3e:6d:30:3b:98:f0:b2:0d:c3:62:88:d2:7c:b8:
         1c:83:b6:59:e4:ab:9d:8d:d1:2a:6f:16:25:26:4b:eb:57:3f:
         1c:a4:87:d0:b9:05:35:b4:a9:93:fd:78:27:f5:eb:f4:b6:f6:
         3a:a2:10:65:25:bb:eb:ab:a8:2f:be:2c:03:89:2d:d5:fa:04:
         68:10:d8:36:d8:61:38:fc:43:e7:80:51:42:59:20:21:e1:cc:
         15:cd:d0:45:42:92:22:91:d0:f5:a6:95:4f:dc:77:78:9e:c5:
         49:91:85:fd:69:31:f2:1d:86:ca:57:05:a4:ff:b9:58:44:e0:
         fe:32:d3:3a:cc:c8:d5:88:33:88:ab:20:98:29:fe:d8:0e:a3:
         c7:b5:87:22:05:70:39:62:7d:ab:11:5c:d0:e8:f2:8d:ad:7c:
         88:79:97:17:e1:03:2a:f6:dc:b8:07:cd:36:29:41:e0:10:69:
         eb:e3:0c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:57 2025 by rpki-client