Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/323830343a316536633a3a2f33322d3634203d3e20323634343238.roa
File:                     323830343a316536633a3a2f33322d3634203d3e20323634343238.roa (raw, json)
Hash identifier:          38i/MkvyaB+hvQJlMl/5fWvUgQBY6arRY6ntFIDIsD8=
Subject key identifier:   5E:17:EB:CA:A6:D1:47:5E:2C:7A:11:8E:77:4A:21:64:01:CA:8C:DA
Certificate issuer:       /CN=46FD62111CFE62986F4EDE8B04CEB71789F3CB20
Certificate serial:       1464A7AC4A7D05FD90C32C39493BBDD0C30198E5
Authority key identifier: 46:FD:62:11:1C:FE:62:98:6F:4E:DE:8B:04:CE:B7:17:89:F3:CB:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/323830343a316536633a3a2f33322d3634203d3e20323634343238.roa
Signing time:             Thu 17 Jul 2025 19:37:08 +0000
ROA not before:           Thu 17 Jul 2025 19:32:08 +0000
ROA not after:            Thu 16 Jul 2026 19:37:08 +0000
asID:                     264428
IP address blocks:        2804:1e6c::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.crl
                          rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 11:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:64:a7:ac:4a:7d:05:fd:90:c3:2c:39:49:3b:bd:d0:c3:01:98:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46FD62111CFE62986F4EDE8B04CEB71789F3CB20
        Validity
            Not Before: Jul 17 19:32:08 2025 GMT
            Not After : Jul 16 19:37:08 2026 GMT
        Subject: CN=5E17EBCAA6D1475E2C7A118E774A216401CA8CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:55:e7:ae:34:cb:45:17:8b:4f:96:79:be:
                    de:ea:98:59:bb:42:f4:a5:c3:bc:1c:62:47:aa:48:
                    63:03:5d:3e:a1:2c:fe:d0:7e:6a:6f:37:b8:6c:26:
                    f3:63:cc:11:2a:02:a6:a4:b4:38:bd:78:c6:16:0f:
                    9a:99:71:c0:3f:4b:f7:04:9e:15:81:4d:72:cb:ea:
                    6f:3f:9f:97:98:4c:32:6d:14:de:10:a1:75:f7:8c:
                    df:e0:91:8e:45:79:0f:6f:49:33:73:c3:0f:93:58:
                    fc:c7:8d:6e:ef:03:dd:f4:00:d2:b5:7b:93:fb:9b:
                    b4:e7:d6:c1:5e:8a:2c:05:9a:53:81:63:65:55:69:
                    fe:c9:3b:ef:c1:9b:a8:81:4a:ae:49:87:bd:bd:85:
                    43:f3:92:3f:2f:71:81:6e:f0:93:02:91:ec:5e:57:
                    2c:20:57:49:4a:2e:b5:aa:c0:44:15:03:04:51:6c:
                    3e:df:87:db:11:87:24:39:d9:20:2a:10:ab:7b:1b:
                    f2:14:ba:b4:41:d4:93:bc:8a:2e:b1:b9:71:b9:9a:
                    8e:1c:16:da:8e:c6:95:5e:23:e9:f8:5b:ba:e3:2a:
                    ac:96:97:74:50:e7:2b:ca:22:32:6b:60:e7:1c:4e:
                    88:07:96:e0:96:99:86:52:c2:7f:c2:ee:e7:c7:cb:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:17:EB:CA:A6:D1:47:5E:2C:7A:11:8E:77:4A:21:64:01:CA:8C:DA
            X509v3 Authority Key Identifier:
                keyid:46:FD:62:11:1C:FE:62:98:6F:4E:DE:8B:04:CE:B7:17:89:F3:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/323830343a316536633a3a2f33322d3634203d3e20323634343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:3a:8f:f1:ac:2f:b1:93:2f:40:a3:4b:75:c8:f2:a4:ed:a2:
         aa:eb:96:47:22:85:f0:b8:cd:14:b1:57:52:40:ef:e2:9e:61:
         fa:10:5e:46:5b:9c:55:8f:7f:3c:fb:8c:9b:8d:10:65:22:4d:
         0f:0b:00:5c:f1:20:f4:8e:cd:72:9a:52:68:c9:45:4b:5c:de:
         0a:49:51:c1:6f:43:b4:1c:07:51:23:25:b7:a4:13:0e:a6:ae:
         ce:94:a0:87:07:d1:3c:f3:48:5d:49:06:4d:26:85:0e:e8:06:
         f2:ce:d0:7c:69:95:ce:31:eb:1f:a3:b6:e9:30:2d:c5:1d:85:
         46:f9:df:75:40:cb:79:4f:34:76:50:48:b8:8e:3e:dc:e9:b6:
         f7:56:89:c2:b8:e1:37:c4:21:ef:16:01:a8:ee:41:4f:02:f8:
         a9:db:20:99:07:2f:60:de:be:59:29:20:0f:cc:c7:bf:47:2a:
         23:72:07:21:c3:fe:a8:0f:3a:51:30:da:a0:51:d8:60:3c:68:
         7e:65:d0:15:58:a5:9b:0a:bd:18:5e:f1:5c:39:8a:ec:b4:a0:
         36:33:a9:e6:f5:50:17:d4:e0:ae:92:86:55:e7:1c:de:d8:d7:
         09:ad:d0:53:4a:75:f8:cd:0a:d6:be:d8:7b:01:1a:61:8a:78:
         c2:f9:d1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:50 2025 by rpki-client