Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/323830343a366132383a3a2f33322d3438203d3e20323730333136.roa
File:                     323830343a366132383a3a2f33322d3438203d3e20323730333136.roa (raw, json)
Hash identifier:          uM7t3CdpbFI7OeW+ScOEPFx4SBbDqHNlaGrAPMxg5UE=
Subject key identifier:   A9:42:D2:AC:25:75:1C:6A:6B:37:CE:EC:6A:5F:14:A2:27:AD:19:5D
Certificate issuer:       /CN=2B70CD0507DEB57B92FF796531C932DEF83009A2
Certificate serial:       1C2B8CE18F432FF61FB98A105095D7A740FB8153
Authority key identifier: 2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/323830343a366132383a3a2f33322d3438203d3e20323730333136.roa
Signing time:             Mon 21 Jul 2025 20:47:52 +0000
ROA not before:           Mon 21 Jul 2025 20:42:52 +0000
ROA not after:            Mon 20 Jul 2026 20:47:52 +0000
asID:                     270316
IP address blocks:        2804:6a28::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl
                          rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 13:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2b:8c:e1:8f:43:2f:f6:1f:b9:8a:10:50:95:d7:a7:40:fb:81:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B70CD0507DEB57B92FF796531C932DEF83009A2
        Validity
            Not Before: Jul 21 20:42:52 2025 GMT
            Not After : Jul 20 20:47:52 2026 GMT
        Subject: CN=A942D2AC25751C6A6B37CEEC6A5F14A227AD195D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:f5:e0:e7:4c:db:e9:2a:3d:ea:96:01:f9:
                    b7:78:db:a9:d2:2e:24:b8:5d:cb:fe:46:7f:85:40:
                    1b:90:0f:60:30:16:ff:cb:cd:62:b1:73:5e:a9:2d:
                    fe:3a:d4:18:d0:b5:ed:8d:26:4a:d6:a5:66:83:58:
                    74:7f:f8:17:a4:5b:88:2c:aa:0c:69:3a:65:e8:f0:
                    16:f8:0a:12:8c:be:81:50:0b:5a:f0:c3:51:0b:2a:
                    15:6a:96:9e:c1:99:d2:13:6b:89:55:85:3d:62:3d:
                    38:9f:9d:20:8d:77:44:18:92:66:a2:79:76:98:54:
                    f5:b4:31:0c:cc:81:0c:39:1f:52:21:aa:ec:20:3f:
                    fc:0b:6e:b5:e9:83:f3:a9:ca:d3:df:b4:f0:8c:ce:
                    ac:c3:d0:a6:40:ba:d4:9f:a6:52:28:c2:86:ac:0f:
                    99:ba:30:55:50:f5:19:45:df:5f:7e:a0:22:30:b0:
                    ba:80:96:a2:24:29:18:f8:cf:fa:b1:4a:08:87:c3:
                    bf:20:d1:7c:67:2b:59:7a:3e:3b:c3:c0:66:31:dd:
                    98:6e:cd:39:13:a9:2c:93:61:5f:54:df:7d:27:57:
                    c5:74:fb:30:ad:e2:0c:9f:4a:25:b6:5f:51:70:d0:
                    d3:92:b7:6f:65:72:eb:d2:2f:74:23:54:58:1d:91:
                    d4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:42:D2:AC:25:75:1C:6A:6B:37:CE:EC:6A:5F:14:A2:27:AD:19:5D
            X509v3 Authority Key Identifier:
                keyid:2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/323830343a366132383a3a2f33322d3438203d3e20323730333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a28::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:77:b2:22:b9:4b:b3:5b:f7:b5:06:88:62:da:02:f5:31:2d:
         60:8d:8f:3e:e7:64:49:89:c0:4d:df:56:98:a3:74:a7:f9:93:
         67:f9:5c:8d:af:5e:1b:7b:bb:70:d2:6c:e5:d9:52:44:b5:72:
         65:a6:22:d4:4d:ef:be:09:80:c9:0b:0d:67:fd:9f:2d:c9:78:
         71:b5:e8:9d:c1:25:9b:86:21:10:40:fe:cd:69:3c:79:b9:8c:
         2d:7b:88:c8:78:67:ce:2d:f3:01:f2:0d:73:e0:1e:84:fd:ef:
         bd:f8:e2:c5:1a:a7:9d:1f:82:8c:5f:90:ae:39:cd:77:de:93:
         ed:6e:02:3b:29:35:f9:59:ed:6e:f8:72:a7:db:ad:37:53:52:
         89:31:20:60:2d:62:41:b6:cc:55:ea:c2:4b:42:74:51:af:93:
         2d:15:8f:88:7b:49:83:8d:ad:cf:c4:19:4e:00:ab:31:aa:24:
         00:d3:80:5a:a0:a4:70:89:fc:0f:09:fa:99:33:94:fd:16:16:
         73:fe:d1:5e:c3:bd:7c:64:bc:9d:1d:e2:07:16:9d:e3:39:22:
         73:f7:25:b9:ae:31:64:da:96:0b:fc:fd:e0:9f:eb:89:0e:65:
         7f:6a:44:bb:4d:f3:16:94:39:eb:a4:45:b5:0d:db:a7:64:92:
         25:84:b5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:50:27 2025 by rpki-client