Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/323830343a343735383a3a2f33342d3334203d3e20323637303437.roa
File:                     323830343a343735383a3a2f33342d3334203d3e20323637303437.roa (raw, json)
Hash identifier:          w0XeW2B01Eeeq59b4l/x+vS7602cb9MmrTkGV0IpbfY=
Subject key identifier:   4D:8A:E0:FA:AA:05:E8:04:11:F8:5E:F3:BB:25:EA:31:39:4A:4E:CF
Certificate issuer:       /CN=717380C17B82263404536494404A01EF51405E80
Certificate serial:       4F28F67D9073B5EF3E9DED68C31039682EE0E88B
Authority key identifier: 71:73:80:C1:7B:82:26:34:04:53:64:94:40:4A:01:EF:51:40:5E:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717380C17B82263404536494404A01EF51405E80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/323830343a343735383a3a2f33342d3334203d3e20323637303437.roa
Signing time:             Tue 05 Aug 2025 15:46:26 +0000
ROA not before:           Tue 05 Aug 2025 15:41:26 +0000
ROA not after:            Tue 04 Aug 2026 15:46:26 +0000
asID:                     267047
IP address blocks:        2804:4758::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/717380C17B82263404536494404A01EF51405E80.crl
                          rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/717380C17B82263404536494404A01EF51405E80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717380C17B82263404536494404A01EF51405E80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 03:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:28:f6:7d:90:73:b5:ef:3e:9d:ed:68:c3:10:39:68:2e:e0:e8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717380C17B82263404536494404A01EF51405E80
        Validity
            Not Before: Aug  5 15:41:26 2025 GMT
            Not After : Aug  4 15:46:26 2026 GMT
        Subject: CN=4D8AE0FAAA05E80411F85EF3BB25EA31394A4ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:a5:e9:f8:30:c5:d2:ba:e2:81:7d:1b:4c:
                    7d:78:91:68:cc:db:e4:80:33:21:af:3b:38:cc:c3:
                    26:e7:7e:1b:7b:4f:9f:43:d1:e9:6d:ea:ba:f0:bd:
                    65:0d:4a:92:21:9e:ba:ca:d0:14:7e:93:b7:d1:1a:
                    ec:1d:20:7d:2e:54:5f:4e:fc:37:c6:e6:b3:8b:02:
                    e6:c5:d8:64:08:9b:22:f9:6c:18:39:0c:60:dc:79:
                    69:b8:7d:0a:a7:de:1b:e6:c6:e6:70:67:a5:0c:16:
                    68:37:2a:77:d4:52:30:5e:d9:08:2a:66:5a:80:82:
                    ba:1e:3a:4e:86:f5:9d:dc:2f:2e:21:a9:25:20:c5:
                    d1:64:85:26:32:0f:55:fd:b4:d6:22:2f:49:ab:64:
                    0e:63:2d:30:75:0a:35:44:7c:9e:6c:5c:36:ab:ed:
                    a9:2a:12:6b:02:dc:6c:36:9a:a9:5c:7f:79:ed:c0:
                    d1:da:56:a9:9a:71:58:86:b1:77:27:93:8c:eb:dd:
                    c5:57:2b:1b:16:9f:ac:83:3d:10:ee:f5:88:c9:8c:
                    0c:59:c9:e1:a2:4d:cc:46:c8:3f:94:66:58:2c:c4:
                    04:96:9e:0e:16:6c:db:a9:19:1b:72:e7:31:83:26:
                    a8:58:cd:38:b8:a6:bd:74:bf:1c:11:8a:64:3b:b6:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8A:E0:FA:AA:05:E8:04:11:F8:5E:F3:BB:25:EA:31:39:4A:4E:CF
            X509v3 Authority Key Identifier:
                keyid:71:73:80:C1:7B:82:26:34:04:53:64:94:40:4A:01:EF:51:40:5E:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/717380C17B82263404536494404A01EF51405E80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717380C17B82263404536494404A01EF51405E80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/323830343a343735383a3a2f33342d3334203d3e20323637303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4758::/34

    Signature Algorithm: sha256WithRSAEncryption
         85:4d:98:82:28:cd:7a:1b:75:12:59:fc:4d:ca:a5:71:83:b9:
         ec:af:1d:c7:fc:56:20:e6:bc:d3:64:04:9a:cf:90:61:3f:63:
         df:65:f3:df:10:8c:4f:6d:04:47:74:f5:11:56:8f:66:44:84:
         03:97:61:6a:c0:00:c6:7d:f9:fa:12:9e:0d:20:d5:67:36:98:
         f0:93:d1:61:d4:ac:85:19:e4:30:ef:bf:3c:fd:9c:69:c5:72:
         15:91:ad:0b:c2:56:ec:76:0a:0c:32:d6:b2:de:f2:96:ce:65:
         67:69:46:ae:a5:5e:49:25:28:d9:87:d8:7b:05:1a:26:c0:41:
         93:22:d4:77:34:65:4b:80:9c:b5:eb:d0:d2:f0:b0:fd:3e:19:
         94:be:09:c9:58:a4:02:96:d5:6a:e4:71:3b:8b:db:e7:03:4d:
         7c:52:f2:64:f3:a5:80:58:9d:59:70:03:d3:49:35:89:cc:3f:
         76:0d:d9:73:a1:42:3b:b1:b8:33:4f:0d:9d:a2:0e:7b:a1:d1:
         07:b8:e1:1d:8a:fa:31:56:cf:65:6d:8a:1f:97:4a:aa:34:5f:
         fc:c4:5b:04:08:1b:f2:6c:0f:f7:5a:07:bc:92:bf:49:a7:9f:
         40:c2:1f:35:ae:c1:70:f6:f4:dd:69:fa:5f:c4:7a:1d:75:45:
         29:d0:1c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:15 2025 by rpki-client