Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a333a3a2f34382d3438203d3e20323730363330.roa
File:                     323830343a366566383a333a3a2f34382d3438203d3e20323730363330.roa (raw, json)
Hash identifier:          FBFQlY3mpA5l4dF67kdZ48Vb/Hhzks4Tvd59kzPb9+w=
Subject key identifier:   AE:00:52:D9:64:87:98:3B:F6:E4:75:D8:47:81:51:37:74:AD:9D:27
Certificate issuer:       /CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
Certificate serial:       794A21DB35E867095CC7ED1729AB61F21A0BCFAB
Authority key identifier: 3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a333a3a2f34382d3438203d3e20323730363330.roa
Signing time:             Wed 16 Jul 2025 21:14:58 +0000
ROA not before:           Wed 16 Jul 2025 21:09:58 +0000
ROA not after:            Wed 15 Jul 2026 21:14:58 +0000
asID:                     270630
IP address blocks:        2804:6ef8:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl
                          rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 21:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4a:21:db:35:e8:67:09:5c:c7:ed:17:29:ab:61:f2:1a:0b:cf:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
        Validity
            Not Before: Jul 16 21:09:58 2025 GMT
            Not After : Jul 15 21:14:58 2026 GMT
        Subject: CN=AE0052D96487983BF6E475D84781513774AD9D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:06:d4:90:2e:41:51:d8:80:8a:23:98:86:
                    39:b1:a9:cd:ec:a0:e0:ff:ec:07:a8:a6:4d:e1:ac:
                    36:aa:43:84:25:13:75:ed:81:ad:dc:14:95:d8:2f:
                    38:75:83:b7:3a:31:e6:7c:ce:77:4a:20:1d:f9:26:
                    27:f0:31:20:60:a9:7b:ff:ae:d4:43:8d:23:09:2f:
                    9c:ad:60:1e:a0:33:2a:8a:df:bc:53:8e:3b:d1:3f:
                    4b:50:4a:c7:1c:8e:e1:d6:5d:b2:ac:e9:3e:34:f0:
                    df:4d:86:e3:a3:aa:10:cf:0d:2e:b3:7f:eb:62:41:
                    5c:0c:d9:a0:76:e2:71:a1:7e:c1:0b:34:36:b6:cf:
                    0f:5b:95:f3:86:16:0b:70:2f:9a:75:f8:37:c5:70:
                    13:24:40:e8:f5:cd:84:1d:15:4a:73:29:77:03:41:
                    d3:f3:c1:58:48:54:7e:76:4b:a2:c6:e0:b4:98:b8:
                    0d:2f:b0:0e:1a:f5:6b:a7:4a:f6:c7:12:4a:92:a5:
                    8d:dd:ce:cb:4e:8b:e7:9d:86:cd:9a:e9:46:0e:eb:
                    2f:dd:0a:70:7d:64:7d:70:46:5c:58:bd:32:9f:78:
                    e3:68:f6:b0:8a:73:dc:6b:2c:ad:c7:69:f8:3b:71:
                    5c:21:97:df:fc:ed:f1:6d:e0:e4:21:6a:35:0f:b6:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:00:52:D9:64:87:98:3B:F6:E4:75:D8:47:81:51:37:74:AD:9D:27
            X509v3 Authority Key Identifier:
                keyid:3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a333a3a2f34382d3438203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef8:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:c7:a9:86:68:7a:4a:c3:67:6b:1b:f7:d8:74:14:8b:81:f5:
         24:62:6d:0a:e3:e6:b5:2b:10:97:07:ea:98:b1:a8:e8:6f:07:
         ad:ce:fa:74:f9:86:33:60:04:ef:eb:38:bf:83:d5:a2:d3:da:
         85:02:0a:bf:20:e7:6c:95:6b:c0:a9:07:b8:fe:05:9b:09:34:
         bb:2d:69:8f:14:4c:01:db:2f:65:4f:e6:c6:f7:a9:38:e9:5c:
         32:48:d6:d4:5f:54:17:7d:de:e1:12:d2:6d:94:f7:f1:b5:59:
         75:50:0a:71:89:65:2e:81:f5:c6:ea:2e:c9:d8:8d:31:f7:75:
         28:06:bc:1f:f9:e3:95:01:9e:20:aa:0d:2f:dd:fe:00:e1:bb:
         37:7a:3a:63:7c:47:c8:d7:f0:13:33:c5:2b:4a:17:73:44:27:
         c4:a8:bd:20:52:c3:f8:80:e5:82:14:59:4c:d4:01:62:0d:69:
         9c:8b:a6:09:58:10:c7:fe:6a:77:b4:68:de:f0:10:93:48:6f:
         36:3b:72:03:30:a4:a5:4c:55:0c:fa:c3:c7:c1:4e:84:4c:d9:
         aa:ce:37:f9:b7:16:37:fd:24:a1:d8:09:0a:fe:84:fc:27:fe:
         3d:e3:1f:7c:2f:b1:71:53:67:69:69:42:6e:a3:f0:4f:a3:38:
         89:9c:0f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:11 2025 by rpki-client