Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a323030303a3a2f33362d3336203d3e20323637333836.roa
File:                     323830343a346362343a323030303a3a2f33362d3336203d3e20323637333836.roa (raw, json)
Hash identifier:          ybnV4ahAiZ51Sq7vzH0MqyJLFkTtekHMZuS4v9D/5CA=
Subject key identifier:   78:7C:2D:CA:7B:EF:84:99:DD:FD:AB:3C:83:64:29:6A:4C:7A:59:1F
Certificate issuer:       /CN=272EE1B25800F489DD72CC554F5C22037BDA8291
Certificate serial:       45DEB1B966C1320BFD9380E28D6C4F73A0B36FF2
Authority key identifier: 27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a323030303a3a2f33362d3336203d3e20323637333836.roa
Signing time:             Thu 03 Jul 2025 12:00:33 +0000
ROA not before:           Thu 03 Jul 2025 11:55:33 +0000
ROA not after:            Thu 02 Jul 2026 12:00:33 +0000
asID:                     267386
IP address blocks:        2804:4cb4:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl
                          rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 19:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:de:b1:b9:66:c1:32:0b:fd:93:80:e2:8d:6c:4f:73:a0:b3:6f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272EE1B25800F489DD72CC554F5C22037BDA8291
        Validity
            Not Before: Jul  3 11:55:33 2025 GMT
            Not After : Jul  2 12:00:33 2026 GMT
        Subject: CN=787C2DCA7BEF8499DDFDAB3C8364296A4C7A591F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9d:09:c0:ca:0b:29:66:8d:55:31:a1:d6:47:
                    41:bd:d7:1f:87:df:ae:d5:eb:50:bc:21:f8:65:c2:
                    1c:c2:3b:03:d8:ef:65:47:23:23:ef:fb:07:29:4e:
                    39:8b:63:74:c5:0e:85:26:5c:61:e3:72:4d:ac:8a:
                    23:bd:6c:ea:ca:77:43:65:d7:01:87:22:d5:c8:c4:
                    fa:c7:42:d8:e9:35:60:b3:1e:5b:5f:fc:89:27:f0:
                    cf:15:01:81:d8:61:11:a4:7f:40:96:38:f3:56:12:
                    3b:e9:87:9e:b9:11:f3:fd:10:ad:d9:39:68:e5:53:
                    15:17:99:bb:85:1f:ca:8b:67:73:14:ac:6e:c3:bf:
                    a8:a3:2e:92:67:b5:10:0c:9f:24:05:c5:95:c2:40:
                    bf:50:e0:da:92:7b:c0:48:3b:40:52:79:5e:24:6c:
                    0a:61:96:21:58:08:ff:ae:d3:65:be:d6:3b:5f:52:
                    5c:c6:2e:60:fa:5f:02:17:a4:25:6f:89:2c:12:e8:
                    33:cf:13:2d:65:e6:84:4a:c3:d3:aa:65:76:93:ac:
                    15:ca:3c:cf:99:1b:76:1c:80:52:f2:03:9e:e6:c6:
                    b3:76:07:d8:fc:a4:13:d4:6e:76:cd:7b:d9:d3:0d:
                    f7:95:7e:dd:96:9e:62:0c:53:06:67:fc:ce:64:5a:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7C:2D:CA:7B:EF:84:99:DD:FD:AB:3C:83:64:29:6A:4C:7A:59:1F
            X509v3 Authority Key Identifier:
                keyid:27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a323030303a3a2f33362d3336203d3e20323637333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cb4:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:c7:ae:a0:26:c1:4b:46:4a:84:8e:36:8a:9a:4f:bd:c0:66:
         92:30:d4:9a:ab:08:a0:de:02:5b:91:82:17:06:fc:0d:cf:d5:
         01:8f:a2:54:82:86:48:9d:4e:18:91:37:8d:5b:33:02:8b:76:
         06:e1:e5:64:92:c4:df:3c:af:ae:6d:0c:83:9b:28:9a:91:10:
         a6:18:c5:15:ce:be:bd:c2:6a:30:bd:b2:93:c1:37:c9:0c:90:
         33:1d:80:97:ff:41:e6:a4:ac:6e:73:1c:b9:cd:2f:44:35:02:
         46:90:ed:c4:33:57:c5:37:1e:23:40:2e:cc:58:13:2c:1c:bd:
         53:0e:a7:e9:84:fb:34:40:d0:24:ee:23:b5:13:58:75:60:b8:
         05:1b:a6:40:93:93:ba:d3:cf:ca:c6:13:c9:0b:b3:b8:f8:bc:
         ac:b9:39:04:9d:a7:51:b3:06:64:f3:31:a1:bf:86:76:61:ae:
         3f:81:29:23:f7:8d:4b:b8:f3:ab:31:64:b5:c9:71:ac:51:5c:
         91:81:5a:94:a2:a3:bc:d9:31:48:19:17:67:cd:2a:42:70:30:
         9a:35:80:a6:e4:8b:c4:1b:89:02:fa:df:7f:86:fb:73:75:be:
         59:fb:9d:96:af:7d:eb:c9:30:b2:50:44:f4:54:a6:cd:49:da:
         57:91:4e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:07 2025 by rpki-client