Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B94A2XbG7XkqzoPZJvT4Pf8tV47EPCGhqFyQ9W3bjuEn/0/323830343a323631303a3a2f33322d3438203d3e20323634333231.roa
File:                     323830343a323631303a3a2f33322d3438203d3e20323634333231.roa (raw, json)
Hash identifier:          fLmFkghSPLL2COxkgtvEFvHChw964jBgu5xhXvto5cc=
Subject key identifier:   20:65:03:31:AD:D9:66:52:85:E0:95:D9:C5:67:CE:63:3A:0F:31:EC
Certificate issuer:       /CN=59E696BAE5160768BDE69392D8DEFB030D173082
Certificate serial:       2E80C3E44F7EBF71CF6F1024457B8FA7B8A4CEDB
Authority key identifier: 59:E6:96:BA:E5:16:07:68:BD:E6:93:92:D8:DE:FB:03:0D:17:30:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E696BAE5160768BDE69392D8DEFB030D173082.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B94A2XbG7XkqzoPZJvT4Pf8tV47EPCGhqFyQ9W3bjuEn/0/323830343a323631303a3a2f33322d3438203d3e20323634333231.roa
Signing time:             Thu 24 Jul 2025 17:43:17 +0000
ROA not before:           Thu 24 Jul 2025 17:38:17 +0000
ROA not after:            Thu 23 Jul 2026 17:43:17 +0000
asID:                     264321
IP address blocks:        2804:2610::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B94A2XbG7XkqzoPZJvT4Pf8tV47EPCGhqFyQ9W3bjuEn/0/59E696BAE5160768BDE69392D8DEFB030D173082.crl
                          rsync://rpki-repo.registro.br/repo/B94A2XbG7XkqzoPZJvT4Pf8tV47EPCGhqFyQ9W3bjuEn/0/59E696BAE5160768BDE69392D8DEFB030D173082.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E696BAE5160768BDE69392D8DEFB030D173082.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 22:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:80:c3:e4:4f:7e:bf:71:cf:6f:10:24:45:7b:8f:a7:b8:a4:ce:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E696BAE5160768BDE69392D8DEFB030D173082
        Validity
            Not Before: Jul 24 17:38:17 2025 GMT
            Not After : Jul 23 17:43:17 2026 GMT
        Subject: CN=20650331ADD9665285E095D9C567CE633A0F31EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:d4:5f:f2:4e:b3:82:5f:f0:f7:df:db:8d:
                    75:a3:ac:3f:0d:8f:9b:f9:19:78:00:8d:67:4a:44:
                    a6:60:18:34:b2:ac:40:9a:df:d6:df:48:27:97:ca:
                    34:ef:9a:85:dc:3f:08:36:e7:dd:30:10:01:10:11:
                    1f:8e:01:3b:4f:70:54:9c:aa:4e:20:7f:cc:33:f8:
                    a2:e1:ac:8b:a9:6a:cd:7b:f8:9a:f8:ac:24:fb:d4:
                    5c:1d:29:20:18:77:19:dd:e2:6e:56:ad:53:fe:12:
                    c8:36:bf:0f:8a:68:86:60:5e:67:e8:6e:2b:e5:ea:
                    49:6b:04:0c:4d:05:95:bd:45:14:35:e8:9f:90:aa:
                    ed:23:0f:dc:37:e1:3c:df:a6:2a:1a:81:a2:44:0b:
                    f1:44:1c:5b:fa:4c:81:52:07:72:e8:7b:7b:f7:ba:
                    82:00:c2:bb:05:06:20:2a:32:0e:05:d7:d9:7d:11:
                    3e:bc:62:e8:3d:9f:52:7b:eb:ce:ef:3e:d3:d9:d7:
                    76:93:91:6b:82:73:c5:5b:8e:f5:3e:ef:4b:dd:a5:
                    f1:46:93:5a:e0:38:c5:0c:28:b1:79:f5:bc:24:c6:
                    91:d7:33:07:71:92:77:e5:94:1f:9b:de:b8:00:d6:
                    ba:a1:08:f7:5c:e5:24:b4:a8:3f:d1:db:22:97:5d:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:65:03:31:AD:D9:66:52:85:E0:95:D9:C5:67:CE:63:3A:0F:31:EC
            X509v3 Authority Key Identifier:
                keyid:59:E6:96:BA:E5:16:07:68:BD:E6:93:92:D8:DE:FB:03:0D:17:30:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B94A2XbG7XkqzoPZJvT4Pf8tV47EPCGhqFyQ9W3bjuEn/0/59E696BAE5160768BDE69392D8DEFB030D173082.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E696BAE5160768BDE69392D8DEFB030D173082.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B94A2XbG7XkqzoPZJvT4Pf8tV47EPCGhqFyQ9W3bjuEn/0/323830343a323631303a3a2f33322d3438203d3e20323634333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2610::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:b1:b3:9c:db:37:b7:1f:22:d8:93:b5:de:fc:92:23:9f:17:
         8d:12:4a:45:55:03:1e:6d:68:2a:57:c8:5e:ab:15:51:98:7c:
         10:a7:c9:da:e0:3c:42:1c:e0:26:71:2b:a4:7d:2e:9b:dd:9c:
         37:05:16:bf:de:58:3e:40:a0:04:ce:38:83:38:03:2a:a4:56:
         f3:96:9f:74:ad:96:d1:70:19:f4:c2:34:3a:28:2a:3f:2d:93:
         49:6a:5d:d6:42:e5:6a:31:97:6c:95:8f:99:ec:6b:68:85:8f:
         20:cc:96:2c:a9:40:c8:27:98:83:9d:f7:0c:a6:2b:91:45:e2:
         9a:1c:dd:43:d4:31:48:f7:95:95:04:27:bd:bb:76:33:73:8d:
         81:69:d9:b7:71:e2:48:45:c1:76:0d:54:a5:db:1e:06:8f:e7:
         2e:1f:6d:d2:f9:5d:8d:c0:58:df:8f:ce:cb:3b:ea:d7:8a:a3:
         f4:fd:a2:19:e2:3b:76:7c:21:ba:4e:22:9c:97:c8:06:d8:35:
         97:82:33:72:3b:88:b3:c8:8e:32:ec:7f:fd:be:c1:2a:36:3e:
         6f:54:f8:72:e3:f3:65:4f:82:07:0e:cc:c2:08:14:46:7a:8d:
         40:5a:e2:dd:f6:7f:79:9c:25:c9:b9:e5:22:3b:9b:60:e8:34:
         eb:da:32:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:10 2025 by rpki-client