Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a313030303a3a2f33362d3336203d3e20323637333836.roa
File:                     323830343a346362343a313030303a3a2f33362d3336203d3e20323637333836.roa (raw, json)
Hash identifier:          ht45Kn2Nvrl+53NXwnTlZXpD5kHPPgE+XK97fJz/B04=
Subject key identifier:   1B:13:87:EA:C3:32:79:EC:B3:1D:9B:0E:AE:53:EE:7D:84:60:6D:26
Certificate issuer:       /CN=272EE1B25800F489DD72CC554F5C22037BDA8291
Certificate serial:       44361689E249C7CF9DCBC41A244621EDA5DCE4D0
Authority key identifier: 27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a313030303a3a2f33362d3336203d3e20323637333836.roa
Signing time:             Thu 03 Jul 2025 12:00:34 +0000
ROA not before:           Thu 03 Jul 2025 11:55:34 +0000
ROA not after:            Thu 02 Jul 2026 12:00:34 +0000
asID:                     267386
IP address blocks:        2804:4cb4:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl
                          rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 20:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:36:16:89:e2:49:c7:cf:9d:cb:c4:1a:24:46:21:ed:a5:dc:e4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272EE1B25800F489DD72CC554F5C22037BDA8291
        Validity
            Not Before: Jul  3 11:55:34 2025 GMT
            Not After : Jul  2 12:00:34 2026 GMT
        Subject: CN=1B1387EAC33279ECB31D9B0EAE53EE7D84606D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:0e:43:96:27:f7:65:aa:2c:65:8f:08:68:
                    04:93:02:5a:d0:03:a7:98:2a:e9:90:9c:30:90:9f:
                    09:5e:6f:09:26:e4:e1:c3:ca:91:23:dc:30:53:3f:
                    0b:e4:8d:d6:d1:74:a9:9d:c2:e6:af:b5:ee:96:d9:
                    c4:f3:b5:36:50:4f:08:60:3c:ad:52:2e:02:77:3c:
                    ed:ee:e7:e5:c9:c4:44:17:00:22:e5:aa:b1:0e:72:
                    6a:0b:47:2e:a0:e0:e6:c1:2f:ea:1c:74:a0:45:bd:
                    07:3a:43:78:3c:96:2d:65:e2:4a:fd:b2:bf:60:e7:
                    ba:7f:42:b3:60:80:eb:d0:23:36:71:28:c3:06:4f:
                    be:49:1e:92:bc:ce:dc:b9:0f:09:98:da:0e:09:34:
                    ea:95:09:5f:57:6d:84:ed:84:c9:54:d9:bd:8f:be:
                    fb:eb:87:43:aa:b9:8e:84:4a:af:b7:cd:e9:0e:1c:
                    fa:a0:0c:8f:98:d4:0a:e6:27:93:72:36:cc:a3:4f:
                    ed:d8:d6:92:1c:0f:b0:14:65:5b:46:a3:ac:7c:fc:
                    fd:af:da:bd:03:f7:b8:6e:60:ad:b8:50:57:5e:fd:
                    45:6e:ec:05:f1:3c:4d:f7:ff:25:c1:60:63:9f:2c:
                    69:13:b6:09:e4:0f:7d:1a:b0:27:cf:18:42:3a:c7:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:13:87:EA:C3:32:79:EC:B3:1D:9B:0E:AE:53:EE:7D:84:60:6D:26
            X509v3 Authority Key Identifier:
                keyid:27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a313030303a3a2f33362d3336203d3e20323637333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cb4:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:67:70:a3:45:08:ba:c3:05:d2:77:9d:e6:4f:63:0a:ae:
         f6:c2:9a:d9:38:6e:39:08:da:18:15:17:64:fb:f6:b5:48:2f:
         a6:8e:f1:86:aa:5e:e5:f2:a5:25:60:f3:60:d0:85:78:37:bd:
         b3:b9:79:4e:e4:32:8c:08:1f:18:bb:50:7a:04:3d:ec:9c:f9:
         2b:14:66:98:f8:f6:03:d4:28:1a:d1:7b:56:79:c0:87:94:6d:
         8c:ee:e5:0c:d2:8a:11:bd:06:e0:3e:5a:a4:8d:f0:84:8d:b1:
         33:30:9f:9e:f5:16:70:ad:ef:5f:d3:b0:90:fc:36:d9:6e:9d:
         65:9b:55:09:1a:52:e0:0d:40:c3:c2:34:24:17:4b:6a:53:90:
         95:ec:1a:8d:f3:90:eb:f5:04:66:f4:e9:11:81:f6:be:58:75:
         fb:1c:9e:52:0d:7f:bc:43:56:85:b9:95:72:04:5a:59:c3:82:
         36:0a:8a:79:97:35:1c:54:8a:3f:d6:66:ed:2a:46:90:e4:20:
         5c:af:72:02:a5:2e:23:c5:e0:f6:e1:aa:6d:78:2d:55:6a:db:
         88:b3:38:a5:35:40:1c:2a:4b:b3:f9:60:f5:67:23:6d:7f:d0:
         ee:34:d8:f6:8c:7a:91:5f:a9:da:72:5a:e2:74:2e:c8:34:90:
         f5:49:3f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:27 2025 by rpki-client