Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/323830343a343737383a3a2f33322d3438203d3e20323637303536.roa
File:                     323830343a343737383a3a2f33322d3438203d3e20323637303536.roa (raw, json)
Hash identifier:          TT8AyYbhd3G8tsAdxll8PK4XJdBlSJy+8xzwkJnTiK0=
Subject key identifier:   51:E2:1A:66:EE:5D:13:B4:08:C9:3C:A0:B3:07:E4:5A:9F:E1:4B:EB
Certificate issuer:       /CN=3EA1465E4D3921B276EAB422ACCE68273C80356B
Certificate serial:       58B458081C4A19180A571610E6138FEBFBEAFDE1
Authority key identifier: 3E:A1:46:5E:4D:39:21:B2:76:EA:B4:22:AC:CE:68:27:3C:80:35:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/323830343a343737383a3a2f33322d3438203d3e20323637303536.roa
Signing time:             Mon 11 Aug 2025 14:23:14 +0000
ROA not before:           Mon 11 Aug 2025 14:18:14 +0000
ROA not after:            Mon 10 Aug 2026 14:23:14 +0000
asID:                     267056
IP address blocks:        2804:4778::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.crl
                          rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 03:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b4:58:08:1c:4a:19:18:0a:57:16:10:e6:13:8f:eb:fb:ea:fd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EA1465E4D3921B276EAB422ACCE68273C80356B
        Validity
            Not Before: Aug 11 14:18:14 2025 GMT
            Not After : Aug 10 14:23:14 2026 GMT
        Subject: CN=51E21A66EE5D13B408C93CA0B307E45A9FE14BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:3a:97:21:0c:09:cf:53:4b:b9:52:79:46:
                    83:3b:41:31:11:cd:66:7f:f9:fa:55:e2:27:e5:cf:
                    b3:ef:44:b6:88:dd:aa:a9:13:98:02:62:47:b2:6a:
                    ca:fd:c8:86:4c:48:a8:fc:3b:23:fe:01:1c:85:c4:
                    dc:71:36:2c:95:2f:cd:8e:e0:d1:75:43:53:b3:75:
                    7e:8e:da:74:00:88:ce:1f:62:fd:f6:6d:e2:2a:40:
                    a1:f4:80:d0:6b:2b:55:13:32:76:50:0c:54:ee:00:
                    d9:0c:cc:7c:00:f2:e6:80:0d:c5:2b:34:ef:58:95:
                    89:2d:a1:65:ea:5c:d2:70:7c:0b:04:53:c6:b9:ae:
                    74:42:a1:02:45:b3:0d:66:59:3e:67:56:73:44:eb:
                    50:7b:99:93:df:2d:f3:da:ec:f3:85:aa:33:3b:ea:
                    a1:a7:17:88:41:a1:af:66:bf:ff:4f:52:8e:db:87:
                    7e:f1:29:95:d9:27:4a:38:e1:26:f4:07:a9:96:ea:
                    fb:c6:4d:1b:a2:b2:10:28:ea:dc:65:b6:7d:dd:0e:
                    b4:71:fe:40:f2:1b:9f:89:d3:65:fd:61:80:07:a0:
                    b6:dc:5a:b3:4b:67:be:5c:8f:d0:92:8e:6e:c6:74:
                    15:25:a2:5d:56:3f:e6:31:5b:4d:78:65:75:fe:89:
                    de:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E2:1A:66:EE:5D:13:B4:08:C9:3C:A0:B3:07:E4:5A:9F:E1:4B:EB
            X509v3 Authority Key Identifier:
                keyid:3E:A1:46:5E:4D:39:21:B2:76:EA:B4:22:AC:CE:68:27:3C:80:35:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/323830343a343737383a3a2f33322d3438203d3e20323637303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4778::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:ae:02:a8:5b:34:8c:ee:7e:02:9f:cf:7f:b4:85:23:70:90:
         0f:8b:22:5d:03:a6:d6:8d:af:82:82:4a:93:10:3a:2f:ec:f0:
         83:cc:b2:24:f9:cc:92:69:78:8a:62:49:18:e5:22:20:c4:18:
         af:70:75:aa:6c:48:16:ee:db:a3:3c:a5:eb:aa:8c:1d:e7:83:
         18:92:77:cd:54:fe:a9:af:0e:44:03:71:23:0a:6b:40:14:0a:
         98:6d:41:2a:8d:a2:8d:12:b7:ee:1d:ee:0a:12:d5:cd:26:d5:
         87:12:97:cd:a0:90:1f:f2:00:e8:0d:f5:03:bc:92:7c:e7:c3:
         6b:60:31:8e:08:81:7a:52:59:f0:6c:02:5c:d0:33:1a:6b:68:
         ce:81:ef:e4:d1:a5:be:03:f8:7a:27:d8:80:10:f8:30:41:d4:
         8e:a8:02:2a:8b:b7:91:8d:b7:80:69:43:22:9a:c3:a6:1a:65:
         45:89:27:00:23:3c:42:06:5c:9d:72:6c:89:de:47:b2:1a:67:
         a0:a2:e1:ca:34:09:98:73:9c:d1:63:4c:5b:ef:0a:2c:2c:7b:
         fa:be:ee:d2:c7:0d:d2:df:03:76:d7:9c:0d:86:11:53:9f:8b:
         77:93:fc:8a:93:14:71:f6:32:a1:4c:0d:de:fb:01:08:9c:cd:
         a1:6e:06:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:56:29 2025 by rpki-client