Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a383030303a3a2f33362d3336203d3e20323637333836.roa
File:                     323830343a346362343a383030303a3a2f33362d3336203d3e20323637333836.roa (raw, json)
Hash identifier:          KrKSur+YOYjjQ8K8uL0xuJbgRW0Xw1b/pkbDZfcSN6c=
Subject key identifier:   BE:D4:BF:A2:8D:FB:FC:26:F0:E8:A1:A5:B0:FC:BC:5C:77:81:C2:F2
Certificate issuer:       /CN=272EE1B25800F489DD72CC554F5C22037BDA8291
Certificate serial:       22B3CFCFF229F84CDDA1A704555AE0F305520661
Authority key identifier: 27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a383030303a3a2f33362d3336203d3e20323637333836.roa
Signing time:             Thu 03 Jul 2025 12:00:35 +0000
ROA not before:           Thu 03 Jul 2025 11:55:35 +0000
ROA not after:            Thu 02 Jul 2026 12:00:35 +0000
asID:                     267386
IP address blocks:        2804:4cb4:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl
                          rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 19:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b3:cf:cf:f2:29:f8:4c:dd:a1:a7:04:55:5a:e0:f3:05:52:06:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272EE1B25800F489DD72CC554F5C22037BDA8291
        Validity
            Not Before: Jul  3 11:55:35 2025 GMT
            Not After : Jul  2 12:00:35 2026 GMT
        Subject: CN=BED4BFA28DFBFC26F0E8A1A5B0FCBC5C7781C2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:81:14:59:72:05:d1:a9:fb:16:ea:89:5a:d5:
                    dc:d6:9f:17:ce:8a:d6:47:03:f3:e5:8f:89:a8:44:
                    78:6a:09:e8:a1:64:a7:a8:ae:db:84:7f:ff:fa:a0:
                    bb:b6:b3:e1:6f:a7:d4:c8:56:d8:91:97:50:ce:e8:
                    9d:14:07:2a:71:6a:98:f9:57:29:36:44:f7:e8:7d:
                    a4:ec:b8:1d:bf:d2:07:e6:e6:f4:e4:f3:43:75:83:
                    65:37:d5:ca:a6:64:d2:06:ce:ac:e7:66:a0:85:c1:
                    01:c1:c4:75:a8:3d:92:dc:a1:db:53:d8:bb:56:c2:
                    23:d6:a3:8e:30:25:e4:d6:59:33:d0:32:9d:1f:8b:
                    98:84:f0:19:b5:c7:5d:61:c8:bd:51:66:5f:5e:55:
                    67:43:0b:1d:e6:48:42:20:f7:07:f2:73:86:e9:37:
                    6f:b9:86:ee:e2:7b:e6:84:0e:6d:04:a7:b9:60:b9:
                    7d:8a:bb:44:8f:0c:34:e3:f2:42:7d:9f:85:e3:ae:
                    af:74:03:1c:76:c0:b0:1a:e5:3f:ac:ef:4b:0d:0b:
                    6a:52:a5:7a:e9:c3:97:b4:3d:4c:71:99:e9:5a:1e:
                    32:4d:3b:1d:23:4d:b9:8c:9b:b0:cf:c1:a7:fc:44:
                    86:bb:a2:fe:5f:6a:29:42:e5:a6:2b:eb:42:f2:0e:
                    08:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D4:BF:A2:8D:FB:FC:26:F0:E8:A1:A5:B0:FC:BC:5C:77:81:C2:F2
            X509v3 Authority Key Identifier:
                keyid:27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a383030303a3a2f33362d3336203d3e20323637333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cb4:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         57:0b:69:00:97:b9:47:c3:0f:e8:80:ba:42:14:d8:82:af:12:
         84:79:88:78:65:13:58:11:93:ac:7e:d0:b7:f1:fb:82:fd:ef:
         70:20:02:da:50:34:c6:24:83:1d:c6:09:46:64:fc:a6:ae:a6:
         53:b9:ca:2f:cf:60:be:9c:ec:7e:23:67:df:9c:fd:51:15:3c:
         c5:a5:a5:50:c4:a0:2a:09:23:4e:08:b2:e8:5b:e7:ca:36:bb:
         b8:76:e0:52:42:4d:fc:d3:04:20:51:a6:79:6e:be:f3:11:69:
         7f:94:aa:4f:18:f3:f6:6a:9d:fb:4a:2c:ce:31:62:f2:e7:5f:
         44:2a:6f:e3:c1:7e:50:1f:4a:03:16:a0:b0:45:d0:a7:40:8c:
         bf:3a:8f:ba:cd:55:b0:1d:20:94:9a:81:67:f9:ee:76:46:98:
         d9:78:f8:24:be:2c:e8:dd:fb:47:a1:66:07:d3:aa:ac:52:b9:
         69:a4:39:b8:a6:22:41:77:82:e0:f5:d5:e4:0b:a0:d1:ca:f1:
         eb:56:90:df:2c:1f:09:1c:76:43:d0:cf:bc:19:af:3a:ee:1c:
         ec:8c:e8:fb:b2:01:f1:eb:8c:c8:df:25:59:12:a1:5e:74:7d:
         1d:16:95:ae:d6:8a:f3:17:03:89:a1:01:74:3b:c7:80:d0:d0:
         44:33:90:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:51:59 2025 by rpki-client