Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/323830343a386365303a3a2f33322d3438203d3e20323733333230.roa
File:                     323830343a386365303a3a2f33322d3438203d3e20323733333230.roa (raw, json)
Hash identifier:          mY1owELMXoq5BRjtUYOOzFgAJjl+N37JQtMJStvgBfs=
Subject key identifier:   C0:9F:A5:9C:00:D9:3E:A2:FF:D2:7B:44:51:E9:DF:AD:E1:F0:D7:B9
Certificate issuer:       /CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D
Certificate serial:       4829DB59C3A854CFDD309E35DB7137B6F2B36AC4
Authority key identifier: AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/323830343a386365303a3a2f33322d3438203d3e20323733333230.roa
Signing time:             Mon 07 Jul 2025 20:56:55 +0000
ROA not before:           Mon 07 Jul 2025 20:51:55 +0000
ROA not after:            Mon 06 Jul 2026 20:56:55 +0000
asID:                     273320
IP address blocks:        2804:8ce0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl
                          rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 18:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:29:db:59:c3:a8:54:cf:dd:30:9e:35:db:71:37:b6:f2:b3:6a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D
        Validity
            Not Before: Jul  7 20:51:55 2025 GMT
            Not After : Jul  6 20:56:55 2026 GMT
        Subject: CN=C09FA59C00D93EA2FFD27B4451E9DFADE1F0D7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:d0:95:ac:df:2b:74:a4:8e:25:5f:69:3f:
                    fe:13:02:14:c9:82:7a:52:ca:37:a1:68:30:39:f7:
                    c6:c8:65:b6:3d:68:47:9c:62:04:f1:15:90:6a:a7:
                    25:11:1d:05:03:ec:45:54:a5:fd:09:04:d8:ef:80:
                    48:b1:38:d4:e8:a4:8a:6d:60:35:e4:d6:e1:47:1c:
                    0a:ab:07:4a:00:50:45:e7:74:ad:2f:a3:ff:fe:33:
                    d4:5f:c1:c4:2f:fe:96:d4:ee:a3:5d:19:d1:6d:8f:
                    96:81:32:67:f7:ce:ee:81:08:47:48:bf:1e:0f:9b:
                    e0:90:41:e0:28:78:33:cd:fc:c1:bf:2c:73:ac:f0:
                    e3:58:96:20:aa:a0:1a:61:3d:72:d6:f5:cb:e3:0c:
                    82:7f:24:32:de:94:12:cf:51:ec:d3:69:58:11:59:
                    6a:19:cc:15:73:9c:56:d4:00:c0:13:12:ec:21:59:
                    b4:f5:00:57:9c:e7:f8:7a:83:93:15:68:13:12:df:
                    bf:77:21:45:e4:15:78:6a:83:82:1b:53:fb:8e:fc:
                    b1:42:ef:7b:98:68:4a:f2:4f:e7:6e:80:fd:32:f8:
                    e7:8b:6f:cf:ca:3c:62:70:0c:69:75:28:bd:5b:32:
                    f8:4d:e8:64:dc:6a:1d:82:92:9b:85:f3:4b:06:e2:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9F:A5:9C:00:D9:3E:A2:FF:D2:7B:44:51:E9:DF:AD:E1:F0:D7:B9
            X509v3 Authority Key Identifier:
                keyid:AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/323830343a386365303a3a2f33322d3438203d3e20323733333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:f2:5e:1d:ea:d4:5d:98:09:72:6d:63:38:20:61:11:25:c5:
         4e:18:69:92:ed:2d:73:86:6f:f2:60:6f:89:c9:ae:c2:52:dc:
         c0:ef:72:da:cb:a2:56:19:42:1a:81:e0:b2:b8:02:52:c5:98:
         d1:d2:72:b4:b1:8e:86:1c:33:7c:90:65:11:6d:f2:1e:03:b6:
         cb:1c:52:e2:4c:9b:a6:99:99:70:7e:88:92:f2:eb:74:44:9d:
         cb:96:6b:4c:7f:d4:83:b7:f4:b2:ae:73:31:62:dc:74:b1:dc:
         4a:7a:5e:37:b9:10:89:a6:58:9e:b2:97:13:bd:c3:33:1d:2e:
         d1:24:df:d6:0a:96:65:aa:0f:a7:8f:88:21:6c:e1:26:46:56:
         17:2c:c5:e4:30:cd:27:43:9d:a3:db:66:0c:10:61:63:fd:27:
         4c:b9:db:3f:69:eb:bf:ab:3e:2c:f0:73:74:e8:f9:ff:15:55:
         6e:c9:b5:02:ea:d5:95:7b:79:69:d1:42:74:ef:5f:0e:e4:c5:
         34:18:02:89:1c:01:81:24:ef:ab:e4:02:17:8c:4e:7e:2d:eb:
         f8:36:ad:55:52:6d:e2:92:ac:78:c2:94:bc:c6:3d:08:28:a7:
         f1:90:44:49:c3:22:31:d2:28:e4:c6:4f:7d:36:14:6e:7c:48:
         87:4c:ee:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:46 2025 by rpki-client