Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/323830343a6239343a3a2f33322d3332203d3e203532373936.roa
File:                     323830343a6239343a3a2f33322d3332203d3e203532373936.roa (raw, json)
Hash identifier:          UHOAMnyQuDaDlnL1JvlwIpjEGx/YCz4LZEw70WSU75Q=
Subject key identifier:   61:9C:3F:56:FA:9B:88:10:01:C2:16:0C:14:CB:0B:9F:74:B2:76:BE
Certificate issuer:       /CN=653D1900116E7E41CE869340B5477E400370D802
Certificate serial:       170F1601CD9614EA5F8DC995F710E1450A6ECED1
Authority key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/323830343a6239343a3a2f33322d3332203d3e203532373936.roa
Signing time:             Mon 04 Aug 2025 20:00:00 +0000
ROA not before:           Mon 04 Aug 2025 19:55:00 +0000
ROA not after:            Mon 03 Aug 2026 20:00:00 +0000
asID:                     52796
IP address blocks:        2804:b94::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl
                          rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0f:16:01:cd:96:14:ea:5f:8d:c9:95:f7:10:e1:45:0a:6e:ce:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653D1900116E7E41CE869340B5477E400370D802
        Validity
            Not Before: Aug  4 19:55:00 2025 GMT
            Not After : Aug  3 20:00:00 2026 GMT
        Subject: CN=619C3F56FA9B881001C2160C14CB0B9F74B276BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:cf:94:bb:ca:ee:5c:cc:9b:6c:1a:64:b4:
                    b8:91:c0:31:f8:aa:47:ba:3e:14:69:13:1f:47:c2:
                    68:2f:8d:b6:a4:5b:60:09:e1:a4:e3:e9:06:53:c0:
                    50:31:76:36:d9:e0:89:be:fa:42:15:fb:13:9f:49:
                    b3:79:30:3c:c3:c8:23:4f:07:5c:13:72:0f:11:36:
                    bc:61:0a:d7:94:b5:bf:fc:fa:96:ad:fe:98:d3:66:
                    11:bd:76:60:93:6f:b8:79:13:48:15:4d:fa:83:6e:
                    77:f4:d8:cc:a5:0f:a6:f1:72:04:7c:49:b2:25:37:
                    6d:ae:e8:91:30:90:3d:99:36:54:58:cd:ab:59:8c:
                    a1:00:14:65:09:02:13:83:03:72:10:42:16:9b:71:
                    c1:72:9d:2d:20:d7:e9:71:57:dc:42:b0:72:cd:41:
                    37:97:35:96:6e:77:f6:12:31:6d:c1:eb:0f:34:0e:
                    9c:fb:29:aa:4f:10:47:43:56:46:14:8c:63:43:99:
                    59:7d:0b:af:43:d2:7d:c1:6d:07:78:11:51:7c:57:
                    d8:a3:d7:fb:12:ba:6c:37:c7:17:c1:b2:b7:d4:21:
                    27:0e:7c:50:fb:76:95:4f:3a:7a:17:0b:19:16:77:
                    2d:b8:ba:c7:59:63:69:20:77:49:20:37:34:2b:5c:
                    17:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9C:3F:56:FA:9B:88:10:01:C2:16:0C:14:CB:0B:9F:74:B2:76:BE
            X509v3 Authority Key Identifier:
                keyid:65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/323830343a6239343a3a2f33322d3332203d3e203532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b94::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:ff:14:6d:b9:54:df:23:62:01:7d:16:1f:08:9a:6d:54:f8:
         2b:65:f9:7b:a9:f9:19:2b:1c:a1:3f:40:df:d0:ac:67:cd:5e:
         4b:b9:76:76:5d:b4:8c:67:a4:da:8d:17:65:6f:fb:2f:7a:1e:
         9f:6a:e4:d4:23:41:f9:cd:a3:8a:28:e4:55:5b:ec:fa:62:1f:
         5a:55:9f:6a:2c:35:5a:86:ae:65:20:8f:f2:6d:9b:a8:4b:f5:
         a8:4a:99:3a:38:fe:ad:06:3f:e6:0f:92:c6:60:f4:96:17:2c:
         7b:da:07:63:5f:fb:0b:be:5e:95:9b:da:68:f0:a4:fc:55:ba:
         e8:f8:b0:87:a5:d1:93:d4:02:a3:d7:68:71:29:86:c6:b1:f7:
         9f:23:b4:b6:d5:dc:ed:37:73:5e:80:f8:ba:5e:eb:d2:64:71:
         77:3e:a4:49:74:ac:55:f6:ac:e8:e5:3c:e2:48:92:8a:c7:1c:
         48:b0:a4:c0:b9:82:15:62:d1:9c:17:d5:73:b4:74:04:38:51:
         be:24:b0:cd:0e:d6:58:3c:d0:ed:e0:4a:46:64:f9:1b:22:3a:
         66:a6:08:ad:9c:fc:04:27:d5:14:ac:3c:f1:b2:c1:47:1a:8e:
         82:31:cd:58:4c:8c:e6:2e:aa:32:da:9b:37:89:93:17:13:45:
         0b:11:16:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:35 2025 by rpki-client