Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a373030303a3a2f33362d3336203d3e20323638353936.roa
File:                     323830343a353361303a373030303a3a2f33362d3336203d3e20323638353936.roa (raw, json)
Hash identifier:          DOtLrlSGEtofaMvg6f/zdBYXZlGo6XcD29xO7xyBCAw=
Subject key identifier:   82:97:F2:FD:B8:8A:01:33:9C:EF:4E:CB:CC:45:45:FC:08:26:ED:3A
Certificate issuer:       /CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
Certificate serial:       6DD0FE4975D79925C3026479A07E93CEAD748CF1
Authority key identifier: 2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a373030303a3a2f33362d3336203d3e20323638353936.roa
Signing time:             Sat 02 Aug 2025 02:12:17 +0000
ROA not before:           Sat 02 Aug 2025 02:07:17 +0000
ROA not after:            Sat 01 Aug 2026 02:12:17 +0000
asID:                     268596
IP address blocks:        2804:53a0:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl
                          rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 16:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d0:fe:49:75:d7:99:25:c3:02:64:79:a0:7e:93:ce:ad:74:8c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
        Validity
            Not Before: Aug  2 02:07:17 2025 GMT
            Not After : Aug  1 02:12:17 2026 GMT
        Subject: CN=8297F2FDB88A01339CEF4ECBCC4545FC0826ED3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e8:1b:08:d9:19:a4:2a:57:5a:20:de:f7:43:
                    59:ac:78:07:63:cb:38:ce:65:e9:9f:b1:c1:cb:e7:
                    b4:78:3b:80:26:04:50:68:51:2e:29:40:1f:29:17:
                    21:90:98:15:93:2f:1c:26:af:a3:cb:8e:1b:7e:a1:
                    db:25:ce:18:ce:d3:c0:a4:89:5d:e2:21:3d:42:ee:
                    2e:4a:89:8b:72:c7:89:02:b5:4c:9a:4b:43:f8:85:
                    cb:ff:c7:ba:e6:d3:6a:44:ea:44:5b:0d:4e:34:3a:
                    a5:bc:7e:da:a8:db:ae:7e:8c:fc:8e:f1:a6:27:d0:
                    1b:20:fd:fe:54:82:d6:94:d1:8a:37:70:2c:30:ec:
                    87:be:d2:93:1c:e1:fa:6c:05:91:97:de:a3:10:33:
                    87:24:73:25:5b:4a:12:45:c1:1a:24:8f:7c:e0:3c:
                    88:72:c9:76:eb:30:38:e3:6b:2e:df:28:00:b4:63:
                    59:26:5b:45:7e:98:b0:92:e9:77:45:62:63:c5:5b:
                    1d:c1:41:41:5c:92:5d:43:10:68:1b:5a:ca:a8:4a:
                    8a:39:3c:96:14:01:de:f8:42:b5:31:c1:eb:4e:19:
                    9f:f3:e5:42:0d:7e:f7:2d:71:f9:52:a4:d0:26:76:
                    3e:a0:e7:3c:b2:37:45:63:c4:49:29:4f:1e:41:5e:
                    8b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:97:F2:FD:B8:8A:01:33:9C:EF:4E:CB:CC:45:45:FC:08:26:ED:3A
            X509v3 Authority Key Identifier:
                keyid:2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a373030303a3a2f33362d3336203d3e20323638353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53a0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a4:01:9f:7b:4b:f3:b6:97:46:72:5f:4a:02:98:62:60:14:ce:
         3a:9e:6d:dc:6c:2c:f1:e9:8d:20:74:20:5f:7d:fc:1b:b4:84:
         1b:57:0c:da:95:2d:d0:1e:cb:87:70:4f:7c:90:3d:41:0d:44:
         e8:e5:1e:d2:a2:11:0c:33:b5:12:11:8a:09:7c:51:22:38:37:
         09:c6:87:62:51:18:50:56:18:dc:ca:1d:11:15:62:6a:3d:ac:
         d0:c8:14:68:30:b7:ef:5f:e6:28:6f:0b:67:8b:8d:06:f5:9b:
         2b:18:fd:36:f4:94:e1:5e:49:20:9f:1b:89:8d:7d:13:79:6f:
         7b:f5:fd:32:f0:0b:4d:ba:b1:c4:79:3e:98:24:12:f5:c8:1a:
         7a:38:f3:67:b4:74:bd:9b:8a:b3:85:86:4a:c8:12:34:61:4e:
         8d:6e:aa:8a:4b:71:f3:91:d7:2b:3a:94:39:50:3a:70:79:4e:
         7d:15:dd:d7:73:1a:12:a0:0d:fd:b3:2a:a8:cc:2d:bf:41:db:
         67:92:53:08:53:1d:d8:d2:55:11:d8:20:1d:8a:ec:91:30:67:
         86:30:47:63:79:5b:06:6f:8f:1e:18:d7:83:4f:86:61:08:ff:
         4b:03:62:2c:be:b1:01:3a:2f:83:0c:23:59:f0:37:61:18:c7:
         88:53:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:39:56 2025 by rpki-client